Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: UOkAiJDP25ridEY0rKDhA7Hx8+N8iohgAGhczsP3z4o=
Subject key identifier: 99:3A:CD:E0:C0:BF:B1:B8:28:F5:F7:D5:93:85:F2:D2:10:F2:5B:ED
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019D394101D87B5A581142E1E717169D06B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0677
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: WRfiHc9cg5PXucJW3XTsNXpTeg3sWeLyEzbO9Rw9De8=)
2: u8CFwQAgI9Z_ArKZcryQPx48tlg.roa (hash: ouz1fG+C7TUSgfVu4kqpK6uPFZhg0Hf+lpBxVtrxN4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:01:d8:7b:5a:58:11:42:e1:e7:17:16:9d:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=993acde0c0bfb1b828f5f7d59385f2d210f25bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:a1:8b:f7:10:03:66:5b:14:d6:ea:70:c8:
be:bc:a2:5d:6f:9e:58:c8:5d:17:0d:cd:c5:94:c6:
50:ca:03:22:85:a9:da:25:90:61:01:41:9d:6a:46:
63:ac:fa:03:33:bd:32:f5:c9:a2:9b:71:55:6c:4b:
b8:ba:56:71:fb:ad:44:9c:4d:3a:b4:5a:d1:62:67:
a6:fb:5b:c1:5a:ac:dd:3d:61:27:89:b7:1c:a3:8e:
d1:ff:d1:d6:0d:ef:54:b2:6f:5a:ef:c5:3e:dc:73:
98:45:7e:cb:17:fb:7a:27:80:6a:df:4e:a2:d9:d2:
e3:bd:2a:39:0c:ea:f9:ec:4e:1f:d9:6b:7f:0e:6a:
47:8f:b8:bd:84:08:1d:eb:8c:90:85:34:9d:ef:a3:
80:49:80:fe:96:ba:48:24:eb:7f:62:a4:c7:35:24:
5e:66:77:c0:a5:b6:85:6f:4c:0d:9d:14:97:fa:0f:
64:01:f6:5e:a2:a3:04:e3:fa:3d:16:be:8e:46:4a:
3b:f2:09:ba:9f:cc:6a:2d:bc:c0:2f:66:7b:7d:60:
56:12:f8:89:6e:5f:12:e9:15:20:e5:73:a2:cb:a9:
cf:ee:16:47:83:1b:b1:3f:e6:dd:0e:f7:8d:44:c1:
ce:f1:77:1c:21:cf:70:b6:ea:0e:3e:1c:1f:38:44:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:CD:E0:C0:BF:B1:B8:28:F5:F7:D5:93:85:F2:D2:10:F2:5B:ED
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:23:f4:7e:6e:59:14:8a:35:59:3f:90:da:2b:0c:29:bc:84:
8e:93:40:49:14:1f:24:35:5c:a4:d2:9a:a2:9f:b0:d6:09:c4:
1a:d9:49:24:d0:6f:b6:8c:3d:3b:94:04:74:69:66:44:5b:3d:
fd:c5:36:32:85:a5:f8:a7:df:d7:46:f4:eb:6c:c1:ea:f5:b4:
43:40:17:f2:a6:ed:4b:2b:40:bf:53:fa:d5:1e:b3:6a:af:76:
58:b4:7a:ff:4d:67:06:b6:9b:0f:f7:ab:3c:e6:b4:12:af:bc:
55:fb:6f:8b:51:84:c5:c6:42:fb:0c:dc:d1:86:56:98:8f:56:
bf:23:f2:01:fe:70:1d:4b:b5:37:d4:9c:8c:75:ef:2c:09:06:
10:9a:a0:9f:d8:ef:8e:39:12:e3:5c:7b:d2:d3:f0:16:40:bd:
8e:47:4f:e9:5c:af:ca:97:2a:b9:e6:a4:10:5f:00:e4:89:f1:
fd:35:bf:0f:5a:fc:4f:e6:be:06:8c:09:30:7a:d9:56:07:53:
00:df:70:96:d6:1a:cb:35:58:90:e1:d1:47:2b:1e:e3:39:fd:
36:b4:10:c6:55:f4:d1:50:06:cc:d9:2c:8c:86:ce:26:e6:fd:
8b:1c:8e:fe:3f:b2:ec:14:8e:9d:b3:b2:be:d7:de:32:fb:52:
34:76:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:03 2026 by rpki-client