Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: 22dR7ZbX+hObzdo/GRdbCZryJnejWfcZffEpR/A7Fd4=
Subject key identifier: 6E:CB:70:75:78:DD:D4:72:C1:15:2E:C3:E5:8E:00:57:D2:8B:C6:AB
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019D1044ECE180375E581DC06CF8CB703DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0D5E
Signing time: Sat 21 Mar 2026 12:00:45 +0000
Manifest this update: Sat 21 Mar 2026 12:00:45 +0000
Manifest next update: Sun 22 Mar 2026 12:00:45 +0000
Files and hashes: 1: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (hash: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM=)
2: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: ms155WcF1/Y0TyM3f/C7kOTk0Ldx0Mv+FY2hA1QpnCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:44:ec:e1:80:37:5e:58:1d:c0:6c:f8:cb:70:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Mar 21 12:00:45 2026 GMT
Not After : Mar 22 12:00:45 2026 GMT
Subject: CN=6ecb707578ddd472c1152ec3e58e0057d28bc6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:63:04:6a:43:96:50:51:4e:2d:6d:fb:7f:
57:87:d1:56:f9:99:95:6d:94:fc:30:13:29:42:e0:
cd:09:6c:f4:f8:2f:25:21:bc:e6:ed:a6:0f:89:c9:
47:3d:1a:f9:9d:75:ad:83:06:11:33:bb:29:ea:dc:
71:7a:60:ca:83:ea:fb:f1:05:ed:10:d8:8f:8e:42:
9c:94:3e:a8:36:f9:2d:4c:a3:04:25:36:31:1e:ac:
c3:4a:38:15:72:07:48:b1:f5:73:00:f5:08:f0:b5:
44:03:67:ae:ef:0b:02:fb:00:e0:7c:c6:df:22:f8:
04:1c:31:e5:e1:cc:9b:dd:1b:05:00:4c:46:80:5a:
0b:55:35:0c:0c:2a:64:15:58:a7:5d:18:00:b7:9f:
79:41:cd:42:9a:6f:d5:45:a6:e5:36:af:04:78:5a:
36:f1:55:39:f0:4a:85:8e:9b:30:52:5b:97:97:d2:
9c:b8:4a:b2:94:3c:3e:c6:f3:17:f6:ad:53:ec:4e:
93:e2:f7:bf:aa:24:be:c6:9e:f9:6e:6c:37:c0:2d:
70:54:b7:b2:0b:b8:61:af:26:c1:03:69:03:42:1d:
64:8a:4e:1c:ba:78:1e:b8:93:43:03:df:b3:fb:58:
1b:d2:67:06:4c:c9:02:82:fa:db:b8:fa:e3:75:23:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:70:75:78:DD:D4:72:C1:15:2E:C3:E5:8E:00:57:D2:8B:C6:AB
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:7a:5f:dd:18:11:87:f5:8c:11:fa:3a:a2:a0:de:0e:44:
fe:6f:06:5b:fb:76:40:28:85:28:72:b7:ba:6d:c0:c8:18:45:
32:e0:e8:c0:a6:ad:b9:4a:7e:81:f5:85:b1:7c:c6:58:4d:e1:
68:89:31:e6:89:ee:78:a3:da:ac:05:a3:74:7b:31:3f:b3:e2:
e1:49:8d:53:db:6c:a0:22:e6:74:6f:b8:77:b1:56:54:27:3e:
06:f0:2f:0c:ac:4b:1e:9b:62:80:62:80:6d:85:39:96:ce:b9:
1a:12:78:bc:5f:ab:20:e4:ed:c9:a3:df:e6:b4:58:ef:20:54:
41:ce:7c:81:f1:01:84:20:a1:30:31:b8:6c:df:1e:52:c5:25:
10:07:62:86:08:32:f0:03:df:9c:b6:1a:ea:ec:9c:4b:2f:46:
d5:68:e0:29:91:95:8b:36:c1:91:84:ba:f3:54:c4:bf:a4:98:
6b:11:c5:cb:2e:69:02:4d:54:18:1a:98:da:cb:94:22:6d:60:
e5:3d:df:b8:19:5b:13:a6:4b:e1:04:a2:d4:af:1f:dc:e6:60:
4a:d6:df:54:25:c6:45:f9:e8:cf:e2:52:4a:81:ca:c9:0c:2e:
9d:94:ed:7f:80:d2:59:d9:90:29:3f:c7:a6:31:75:5b:36:f7:
6f:57:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:07:37 2026 by rpki-client