Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: DwtSlTd/yUnjB6c3iWjJfW/CHUqPQPQmSaZIDdwHKKw=
Subject key identifier: F0:14:76:D9:30:74:F6:D7:2B:F1:D6:0B:C1:4A:0A:1B:11:CC:DD:C3
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019D389BF744EC801A8DB71505231700FC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 1750
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: 09kUsc8xVsHQfG22SiNr4dqPF4E.roa (hash: ysqhE++XuPh/xw2jA2E/+Gvhp8/HFy9qw2ro2jCSjO0=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: Pxi+gnJrQoShecGW/QZCsYF0k8E0HnGKO5EsBqiJXoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f7:44:ec:80:1a:8d:b7:15:05:23:17:00:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=f01476d93074f6d72bf1d60bc14a0a1b11ccddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:53:1c:9b:e7:fb:eb:93:8f:65:6d:53:84:
8b:9d:3c:60:14:a5:55:95:02:2a:e7:6b:2f:c3:6f:
88:39:d7:62:2f:93:ed:25:1f:35:de:ed:e9:8b:7d:
87:4c:d6:97:99:79:2c:cb:41:87:3f:c7:f2:19:25:
c1:65:a1:86:fc:2f:b0:3e:8e:c2:55:97:fc:d2:9a:
e4:a8:b5:0f:f9:2f:dd:c7:ee:bd:c1:1d:fa:37:ef:
68:85:5e:ef:4f:75:d1:58:ad:17:0d:a1:e9:98:c0:
d2:4b:9e:be:fe:4b:18:5d:e9:03:ab:90:b8:96:52:
d0:a1:aa:a3:36:ce:fd:a2:db:f3:00:9d:04:5a:3b:
d9:47:b7:9d:b5:a9:1b:56:1a:6a:db:08:3d:b6:03:
e1:d5:b4:84:73:da:be:e2:38:73:4c:a3:7b:d7:5f:
d2:79:d4:c8:8e:c2:23:45:a1:06:66:cb:5f:ac:9c:
a3:ce:be:26:b8:58:23:0e:c4:23:48:10:96:69:63:
23:5d:7a:6a:84:93:9c:30:9e:e5:b8:41:50:50:19:
f5:0f:e1:70:e6:98:6f:2b:0a:d0:0c:66:c7:f2:ca:
68:b4:b2:05:a8:25:46:54:03:b1:46:fa:9a:f2:f8:
2f:97:38:55:62:c5:99:8d:f6:c5:70:8d:a6:ad:f0:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:76:D9:30:74:F6:D7:2B:F1:D6:0B:C1:4A:0A:1B:11:CC:DD:C3
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7e:6b:be:b5:a2:b2:e4:f3:3f:ef:21:e4:e4:00:89:70:4e:
db:74:0d:7b:24:ea:3e:d6:5c:8b:03:99:98:90:a9:18:2a:42:
0f:73:87:d1:cd:8b:34:85:4f:a1:19:09:af:80:9b:a0:93:81:
6a:99:7c:8b:2f:d6:d9:fb:29:9a:ab:c4:09:12:2d:3c:7b:f9:
a5:73:14:41:2f:16:bc:98:90:67:b3:4d:b9:ab:13:c5:b0:c2:
ec:cc:d3:d4:fe:68:a1:75:b7:7a:0c:c9:89:a4:c2:2f:c4:01:
d9:74:ee:70:4d:27:b5:b2:18:b8:fc:28:32:59:2e:c8:ba:a9:
ce:9d:30:37:94:79:94:d4:d5:a5:c9:44:85:02:4d:83:71:e1:
31:07:55:3e:0a:73:21:5b:e0:68:ca:6e:54:d3:40:df:93:28:
24:14:c3:3c:a7:91:aa:9c:23:5b:15:18:a5:a5:36:05:4d:91:
52:3f:7c:c4:4a:20:65:ca:ca:bb:73:79:c3:54:62:78:df:03:
c4:c4:bd:9c:c5:db:10:e1:96:e8:cc:0a:fc:7e:6a:ba:8b:3e:
14:2b:75:39:8c:36:ef:83:18:1c:fb:21:36:bd:95:2e:9d:a6:
df:9a:68:f2:f0:a3:1f:91:fd:8d:4a:db:c5:1d:7e:89:4f:69:
27:8f:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:15 2026 by rpki-client