Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: YZ+dIfWoKd6YliZaDvBS7p/+V3kQrv9gl0Jx8p/8Epk=
Subject key identifier: 37:82:6B:01:B3:22:5B:C0:B6:0B:F1:D8:96:9F:DA:DA:BD:1B:C3:FB
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019D382E0D29C4874B0AF58DA7A763DC5A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 02A2
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: Pu7x38drih+pVlRw5iLgcia+QJtnybIUqz1lgZRJMDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:29:c4:87:4b:0a:f5:8d:a7:a7:63:dc:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=37826b01b3225bc0b60bf1d8969fdadabd1bc3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:51:94:2f:25:2b:88:4a:58:23:aa:9f:4f:
b8:ab:9f:26:12:9a:48:c3:77:9f:78:ac:66:5f:a7:
5f:46:ad:db:f6:88:f7:50:c2:17:36:32:ef:22:4c:
4b:d2:e0:03:23:e1:36:d1:f2:18:53:85:e9:d6:1f:
08:c7:21:99:f0:52:54:04:7f:e1:46:77:9a:bc:49:
52:3e:ae:7d:96:c2:1b:a1:a1:33:f4:57:0f:80:96:
5c:b8:4a:e4:17:75:8f:d7:35:48:ca:9e:1b:b9:ce:
8e:f0:1b:4a:3a:27:2c:86:1b:17:f0:5c:d1:92:8c:
f1:b9:59:41:ba:8a:75:97:04:9f:80:65:42:cd:3f:
1c:e2:86:d7:65:17:b6:b8:1e:59:f3:ce:07:9b:50:
ee:a8:37:30:86:b5:ff:24:c6:e0:26:7a:77:67:61:
5f:4e:35:7c:1e:85:0e:46:a1:8d:62:77:66:92:9e:
2a:dc:af:be:f0:83:58:7e:b4:11:3f:cf:90:0f:1f:
05:8a:2a:0f:b1:f4:12:fa:9d:e7:ec:fa:e1:9a:00:
aa:71:2b:d8:ac:ec:3e:51:72:cf:34:d5:21:fe:93:
91:ec:f3:9f:08:e5:2d:75:95:b7:ac:db:2b:be:c2:
4b:bc:b0:26:af:47:16:17:2c:38:5c:b3:76:eb:1a:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:6B:01:B3:22:5B:C0:B6:0B:F1:D8:96:9F:DA:DA:BD:1B:C3:FB
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ff:35:91:cb:b6:81:ae:b3:0d:ed:51:a5:49:93:ce:b4:79:
f3:a1:19:c5:ff:13:fc:44:2c:a2:fd:0c:ef:51:80:ff:68:11:
d1:e2:8f:77:df:13:12:cd:a4:e9:a6:51:d6:bd:83:da:33:65:
bf:00:dc:e1:d3:14:5d:fe:c2:b2:7c:be:b6:65:c7:9d:8a:a3:
35:fa:f2:bf:3f:cd:35:6c:f3:90:82:be:d8:ea:d8:c5:ff:fa:
c5:8b:c3:ee:9b:ba:d7:d0:12:66:c0:39:9c:f5:67:30:1b:0d:
85:1b:5f:ad:55:fc:dc:6b:48:aa:f9:31:81:56:b4:b6:7f:b3:
49:74:20:f7:0d:a1:3b:c0:a5:df:d1:2f:b0:92:87:0b:4f:d7:
f9:83:69:f2:41:8a:47:37:dd:ff:92:2d:73:1c:16:8d:19:53:
31:30:30:d5:48:e1:94:a1:de:61:a1:b6:97:1b:eb:86:b6:32:
81:fa:39:f6:7d:ef:03:17:2e:1a:6f:86:e0:2e:0a:67:5f:e0:
ac:a7:ff:8a:20:e2:e2:99:14:1f:0d:f6:2f:75:51:b6:00:08:
24:f1:b9:10:24:65:d4:89:31:8e:ee:aa:f7:c9:54:bb:be:7f:
a8:1c:92:46:5c:6a:77:52:5a:e4:1a:2e:f2:5e:64:74:91:5c:
6c:7f:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:06 2026 by rpki-client