Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: 7aDfaNIW518TWXBd4AtTAmMKq0ssbtSPg63YJQlLpUA=
Subject key identifier: E3:19:B0:F5:62:77:C8:35:71:CA:EB:0E:7F:05:07:E9:23:77:D1:0C
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 019D39AEB680EE814E9E923C6BC495430E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: 5ykNNuOXCAKRyYUgsgNPI9hWFTjbSEIJOn3OUkGU4GM=)
2: ruf5ygSKBpBoMppN0_Ydb0zlKDA.roa (hash: AYXx9sIQleSTgwqrdqLha3RogyCLh5BNOu7WolJzJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b6:80:ee:81:4e:9e:92:3c:6b:c4:95:43:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=e319b0f56277c83571caeb0e7f0507e92377d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:df:fb:7d:45:e9:60:21:ac:f1:c9:7f:51:
cd:ed:fa:5f:0b:b7:ec:7a:4d:b6:57:f6:5e:60:ce:
cf:92:eb:88:31:db:66:64:b5:79:2f:fc:0f:4f:9c:
03:ad:1a:02:44:f3:0b:55:73:3e:cc:91:2e:60:3b:
fd:a3:bd:46:63:c5:a5:71:a1:bf:48:c6:53:65:48:
2b:9f:37:e9:a0:4e:dc:33:f9:f6:0b:bf:49:20:98:
81:6c:05:f8:0e:f7:99:fb:a1:bf:fe:87:d8:53:d6:
5f:3e:fb:d2:ff:56:6e:d9:fa:d8:76:53:69:aa:2d:
d2:8c:75:3b:e3:67:b3:4b:33:40:d1:69:e8:4e:6f:
61:63:17:ee:48:4a:9e:e9:1f:a7:05:e9:f2:21:92:
1e:8b:74:b7:87:d6:e2:96:8d:6d:1c:de:5b:9f:33:
5c:27:31:c0:12:d2:74:db:37:48:79:cb:5b:68:1e:
67:46:0d:34:e4:cf:1d:dc:5b:1c:71:5b:62:76:3e:
57:0b:d6:dd:52:01:e3:a2:99:7a:b0:8d:37:e9:97:
90:ac:2b:9d:9a:28:82:a2:8f:83:dc:ce:a9:32:23:
37:fb:10:26:cf:9b:e8:26:61:f2:78:f4:6d:d8:89:
38:bc:ca:f7:a7:4b:83:bf:99:a8:00:33:04:a0:9e:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:B0:F5:62:77:C8:35:71:CA:EB:0E:7F:05:07:E9:23:77:D1:0C
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:96:90:3c:c8:ed:c3:70:c7:da:81:45:21:5c:5d:bd:07:25:
91:b8:bb:7f:54:94:1a:94:40:ab:83:d2:bb:2e:5a:2b:4e:ea:
22:88:03:49:54:e2:4e:e7:a7:58:00:c4:db:a7:e9:bb:9e:ee:
e8:28:86:d8:f1:7b:45:fb:a2:24:cc:5d:01:0b:43:a7:5c:c1:
b9:46:81:f3:89:c2:91:ba:e0:87:3e:de:e6:97:83:3c:88:90:
5c:dd:60:9e:34:02:9e:1e:81:2f:b1:a0:74:49:8f:50:21:b1:
f0:f6:73:64:87:8c:a9:70:ed:9f:32:50:65:4a:75:33:2f:59:
14:43:1d:5a:67:a9:c2:5a:92:ab:b3:f2:1b:6c:6e:7b:08:c8:
6e:99:f2:9c:9f:0a:6d:d6:61:4a:40:ae:28:14:24:90:22:e4:
53:fb:4c:75:32:95:b8:a4:37:15:c5:5b:c0:de:6b:aa:4a:fc:
51:46:38:96:9c:cf:50:cd:ed:ab:87:a4:58:52:8b:8b:72:3d:
5f:92:07:64:7a:02:59:d9:dc:08:ad:e6:a1:ef:09:07:cc:4d:
08:8a:e0:78:f9:bb:ff:48:b6:9b:55:f1:a6:5e:33:f7:8a:81:
99:55:51:89:c7:02:78:65:37:3a:8c:b1:eb:5e:8e:93:b5:af:
1d:e4:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:09 2026 by rpki-client