Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: fXsInK41mUvLd1YO9UsEYAgekJStm+QpcUuREgkXX68=
Subject key identifier: 83:26:B2:E6:92:DF:81:6E:2F:5C:0E:27:53:65:92:77:B4:E8:15:E7
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019D39AF6B1289CCBC53EFA15B7D7860A82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 05E7
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: bzp/VBDWaoQw4skihR6NcMZyWEP1TbX19/Q2XHdZgSg=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6b:12:89:cc:bc:53:ef:a1:5b:7d:78:60:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=8326b2e692df816e2f5c0e2753659277b4e815e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:e9:d7:82:73:f4:6b:29:fc:09:b0:b0:f0:
c5:63:1c:48:9f:1d:0e:8c:40:0e:c1:22:e1:04:5b:
79:e4:42:32:4b:7b:00:5c:8a:7a:fa:2c:44:c3:ed:
98:73:f4:4a:f8:6f:40:64:cc:6f:97:dd:15:e2:3d:
53:72:fd:a4:21:55:dc:0a:cc:f7:48:ca:57:4e:92:
4e:bf:be:89:89:d2:53:c3:c4:80:a6:cb:57:61:2b:
f4:11:ef:ef:b5:07:f3:00:4f:eb:eb:96:e6:61:0c:
5f:97:da:00:f1:84:86:a5:f3:64:9a:e4:ba:cc:43:
48:45:a3:d1:69:ac:54:70:f0:8f:0d:ef:ed:65:ef:
97:6a:4d:d0:c5:37:d7:21:bf:a5:9f:4b:95:4c:75:
a0:18:95:5e:25:cc:d0:8c:14:98:05:9e:33:6b:99:
b1:35:f0:ba:6c:74:a4:6c:8f:3a:26:7a:18:53:a2:
0e:d5:7d:17:16:f8:a9:a6:d0:33:bc:cb:34:e9:18:
3a:e0:87:fa:6e:1a:dd:47:f6:4e:b9:20:6c:2d:bf:
5f:f0:37:84:c9:dd:7b:09:56:85:5d:0a:0e:07:5b:
c3:a2:3a:c8:69:d0:8c:b6:90:ea:c9:1f:e7:3a:a7:
26:93:77:30:0b:f7:e5:2f:64:1b:5b:54:b6:fd:c3:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:B2:E6:92:DF:81:6E:2F:5C:0E:27:53:65:92:77:B4:E8:15:E7
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ee:3c:fe:fe:6f:4f:8e:e8:1b:a2:2e:fb:58:e3:06:a7:0d:
36:80:3b:5a:9a:f5:6e:80:0f:e6:65:cb:26:d9:37:6e:66:22:
d3:bf:55:cb:5b:cf:ac:e0:8c:da:90:94:53:2c:07:c5:0b:1f:
cd:3e:2b:c3:b5:c5:fd:47:cf:5d:60:84:78:35:97:53:3f:11:
7c:aa:97:5a:0a:84:7d:ce:16:ba:26:0f:59:69:45:72:11:e5:
5c:c4:90:bf:e3:c1:4f:6c:ac:e6:e7:cd:ba:0f:e3:5d:f1:00:
c8:5c:d8:44:41:48:9c:93:72:6b:af:27:7e:6e:96:07:bb:fd:
fe:d6:26:2e:85:88:8b:b4:c3:c7:6e:b0:db:85:15:29:e3:a1:
35:6b:67:4b:2b:96:12:9d:a4:ac:73:be:28:3a:0e:2a:18:ca:
ac:eb:34:a9:73:d0:87:84:69:8c:62:22:16:41:84:e7:97:83:
da:cf:ca:8a:88:ec:ab:bd:19:d9:88:38:45:8b:59:08:51:74:
31:a5:0a:0f:19:29:f9:1d:c9:40:8c:30:89:36:23:ab:ef:96:
7c:16:2c:34:37:60:96:09:df:db:b1:de:17:a5:bd:8e:a9:b9:
95:8c:ac:10:e3:5d:76:93:6e:f4:b9:63:17:2e:83:6a:b4:25:
11:bf:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:14 2026 by rpki-client