Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: u/d5KPdbToinhCMXk/ZOZp9HO3j9BTS/NFAoFibKdE4=
Subject key identifier: D6:58:84:E7:DC:CB:67:06:BE:01:8C:16:35:5E:47:ED:C4:4F:DE:6A
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 019D3A1CAC3605321C7C8C0B8F87BD2E46CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0D84
Signing time: Sun 29 Mar 2026 15:00:50 +0000
Manifest this update: Sun 29 Mar 2026 15:00:50 +0000
Manifest next update: Mon 30 Mar 2026 15:00:50 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: BIr9lCtJNYkRpzNA58NlQCvpwsyTiQd8uQoU2WCeCCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ac:36:05:32:1c:7c:8c:0b:8f:87:bd:2e:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Mar 29 15:00:50 2026 GMT
Not After : Mar 30 15:00:50 2026 GMT
Subject: CN=d65884e7dccb6706be018c16355e47edc44fde6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:99:85:bc:bd:65:3f:4a:75:f1:a7:85:09:
fe:4f:8f:c1:ba:09:93:5e:dd:c2:8a:22:a6:5d:81:
b9:d1:ce:8e:9b:15:b1:26:29:36:4b:af:c8:ea:e1:
03:50:c0:e4:f1:b8:47:96:c4:33:75:bb:9f:e4:ae:
78:43:c6:2f:25:14:5c:21:04:6d:c2:f0:68:e5:1f:
60:8b:c6:77:3d:9a:93:ad:13:37:fd:0e:e6:05:7c:
28:a7:3c:78:6a:36:f2:31:25:f8:cd:91:c2:d8:49:
f7:5b:6a:fb:3c:bb:f9:1c:27:bd:c8:6c:3b:7c:1d:
3c:1a:b6:9d:24:29:f3:41:7e:ed:cb:1c:44:0b:0d:
eb:df:a8:d7:5b:4b:1b:e3:43:63:4c:16:8e:f5:da:
09:51:c8:72:8d:e2:1f:b9:bb:d7:22:65:e1:0d:ec:
fa:2a:82:6c:ca:b4:60:ff:f0:32:59:0a:2e:ac:ca:
04:49:35:6d:8e:3f:51:b0:43:09:23:58:79:64:3e:
cd:37:1e:31:3f:9c:ca:2b:ee:94:f9:29:58:f2:92:
cd:04:89:26:3b:3e:1c:28:f5:1a:9a:33:dc:12:bf:
b3:c4:10:41:50:11:af:b0:57:ef:2c:d4:c1:f0:6a:
dc:f6:d0:ab:13:e1:68:9a:77:6f:fe:7e:1b:74:de:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:84:E7:DC:CB:67:06:BE:01:8C:16:35:5E:47:ED:C4:4F:DE:6A
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:cf:10:5f:c5:93:b8:b2:30:de:bc:fc:0e:27:2a:8b:04:
55:17:4f:71:15:37:6e:3f:9b:86:f2:40:b1:a7:72:9d:bf:a5:
43:87:5f:40:68:4f:84:21:e9:3f:8e:68:03:df:65:6a:3f:53:
82:80:75:8b:26:a0:26:24:5b:da:6c:62:0a:af:a9:6f:e4:64:
a2:23:12:d0:f6:3a:7a:0f:18:44:fe:a4:56:76:c3:d1:77:8b:
11:46:df:3a:50:2e:09:88:b4:cb:50:0a:d1:67:4d:93:04:7e:
64:41:5e:93:97:16:7e:07:dc:01:68:6d:cc:ad:24:38:67:4a:
14:1a:d1:30:70:10:cf:a6:3f:ef:7c:32:1d:c4:ca:c2:93:6f:
2b:7e:9b:1e:be:db:10:4f:44:48:56:2a:e8:35:15:13:a5:2a:
b3:3d:34:00:5c:ea:0f:65:d2:f7:14:67:3e:8e:06:14:2b:f8:
fa:62:99:08:80:95:a5:3c:d3:36:75:73:6a:c5:fc:12:33:a8:
fb:a4:d6:0e:54:70:ed:57:6f:87:9f:2d:85:fb:37:9a:80:9f:
cd:bc:20:af:23:57:76:84:35:4b:a9:55:47:2e:2c:62:07:ff:
e5:58:5c:7c:f5:ea:6f:1e:03:de:cf:d0:48:69:39:8d:7f:7c:
ab:43:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:45 2026 by rpki-client