Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File: zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier: SrE8oHsN8wKxOnwNbBMQklrZpjukjLsNm5FtcTHUBGM=
Subject key identifier: 71:5E:11:37:60:CD:8F:BC:3D:53:6F:9E:37:AB:5E:7C:D3:F4:40:E3
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 019D390A425FE373AC95F98D62B6F8F76A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: H8Tx-FU_K_Xw4DqaXZNJJymAcOY.roa (hash: v6fAc8qtsBNF/a7lV9CtRvjhfPSbDeEFmnJZ3DEa25s=)
2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: ZAJfiMW1J0q16FQUhJSyLtTBRoMAeOQOrz3Ywwp1emQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:42:5f:e3:73:ac:95:f9:8d:62:b6:f8:f7:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=715e113760cd8fbc3d536f9e37ab5e7cd3f440e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:9e:e3:90:eb:07:e0:26:b5:fc:a0:70:49:
29:29:f6:6a:45:d3:3d:7b:53:4f:bd:fb:1f:ac:c1:
f9:db:cd:82:3c:d0:c5:54:77:65:d4:65:0e:a4:97:
87:da:84:8f:7a:15:14:4b:51:5c:4b:5b:61:e1:b8:
65:12:63:29:b2:a5:8a:f0:ae:b1:cd:38:9a:bb:e5:
ce:a8:0f:48:af:1c:6b:82:f6:34:dc:ea:75:9b:1b:
b0:26:fe:bd:cf:6b:52:7b:e7:0d:f6:cd:18:a0:6b:
8a:66:81:7c:29:cc:0f:2c:de:31:a6:04:fc:7c:46:
9f:e5:53:ca:70:c2:d8:bf:59:89:92:b1:95:2c:7c:
db:18:88:1c:67:cb:c1:ce:8b:26:47:76:54:ab:e7:
5b:cc:7c:85:c3:80:c0:12:14:cd:68:c5:f1:55:68:
90:c4:43:00:d1:43:d4:da:94:ad:8a:3d:d3:62:46:
8c:21:e2:2b:b7:56:e6:0d:73:9c:9a:14:7a:e6:e2:
ac:92:11:25:9e:73:c0:b7:cd:c8:9c:19:e7:3a:7a:
4c:d9:1c:c3:e8:7a:eb:7f:65:a8:51:d7:61:9d:f5:
0d:49:84:69:04:85:ff:96:da:a9:a4:d0:f1:6b:9d:
cb:12:86:df:d4:39:53:a8:fe:6f:6b:bd:97:e9:b3:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:11:37:60:CD:8F:BC:3D:53:6F:9E:37:AB:5E:7C:D3:F4:40:E3
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:54:6f:7f:13:8d:bd:24:9f:e0:09:e3:b5:b1:ae:fb:84:
2c:24:9f:3c:7a:7d:ac:6b:4d:ac:9e:34:d1:f5:ff:5b:4b:47:
aa:f5:42:b2:68:9c:b8:93:22:76:66:88:44:69:c3:eb:1c:93:
b6:9d:12:34:00:96:e8:95:fb:ff:ca:aa:c7:7a:32:40:76:75:
42:4c:2b:23:6f:f7:27:02:86:ea:a5:c8:11:a5:3d:d9:0c:10:
e3:77:e1:2f:80:28:9e:91:eb:e6:29:a4:44:cd:da:08:b5:10:
a2:76:fe:a3:5f:d9:ed:7c:e6:33:f8:c7:bb:f8:1a:52:ef:b4:
07:e4:4f:2f:4f:8e:d4:d6:21:a2:a4:b1:d3:f9:88:69:9b:82:
b2:5e:83:6c:16:85:c8:c2:62:a3:93:31:2d:23:50:fe:f1:8e:
f6:6f:c6:24:f1:fd:16:b8:50:96:8d:12:72:36:26:83:e5:82:
4d:ea:2d:63:04:e2:f0:da:8f:b3:a6:a9:52:9b:69:c6:4a:55:
74:1a:4e:f7:3c:5d:84:9e:26:d6:a1:b1:9e:d5:93:c1:68:c0:
0e:44:21:5e:71:f7:fa:d0:95:97:b5:8e:5e:d5:29:50:b6:3e:
7d:75:45:53:2e:2d:84:dc:e1:15:3c:34:61:df:b3:14:ca:c6:
28:14:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:02 2026 by rpki-client