Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: 32XoyVY55wjEy1Ig3GvZzF52GZqLN6m2urLK7eK9Zvo=
Subject key identifier: 38:9A:23:A0:28:50:D9:51:BE:A5:35:A0:64:E7:16:8E:2D:A4:0F:67
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 019D3940999DDB108D0BAFAED5A845B460A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 15F6
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: qjz0e1t9VQ9ayB5prp9zqtP/zyr/uo3JBlTi6gbgAf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:99:9d:db:10:8d:0b:af:ae:d5:a8:45:b4:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=389a23a02850d951bea535a064e7168e2da40f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:2c:40:79:4f:4a:14:fc:7d:7e:f6:17:d9:
47:92:7c:38:be:2a:0e:61:bb:9d:9d:67:81:3a:d8:
d7:5e:fe:e0:e0:af:24:8f:b6:d9:29:88:83:2c:b0:
44:ba:ed:99:10:ba:df:c7:cb:49:4e:05:90:e6:55:
c4:fa:f4:dc:b2:b9:9a:87:41:2a:dc:ac:d8:77:fc:
16:cb:1d:30:da:18:45:90:71:b4:9a:9d:7b:32:cb:
b3:a2:91:5a:43:15:59:47:b9:06:d5:53:3c:1c:53:
15:ae:af:d2:91:af:a5:61:0d:0d:3d:d3:a4:9b:11:
6f:16:b5:07:57:34:28:e1:ff:87:7e:d9:36:9c:48:
0e:fd:26:1b:39:d8:f7:05:7f:fc:5d:2e:18:27:5c:
30:3a:86:d9:b5:6f:15:c0:be:32:41:b6:f6:31:af:
d0:47:99:d5:6e:9f:6c:2c:eb:74:dc:32:c5:67:f8:
a7:3e:46:fb:1f:a7:03:4b:20:3b:79:19:40:73:9c:
51:8d:c4:1e:8d:a0:86:92:76:de:cf:42:6e:2c:6b:
bc:85:70:6d:df:6d:ae:86:11:86:79:5c:d2:b1:dc:
0c:37:88:fc:a5:95:b5:10:1f:cc:ab:f4:0d:dc:00:
8f:4a:5b:11:9d:13:b5:1e:42:56:97:e9:1c:40:20:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:23:A0:28:50:D9:51:BE:A5:35:A0:64:E7:16:8E:2D:A4:0F:67
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:62:db:91:5c:89:b0:a7:cf:f2:57:7f:7d:d6:06:3b:cc:
b3:57:9d:a1:23:05:e8:ae:93:82:da:61:70:f4:ae:be:72:d4:
ce:d9:3f:d4:e5:39:dd:79:71:9b:ea:38:b0:bf:62:7f:c2:8b:
fd:fd:e8:28:64:5f:9d:86:2a:4a:e2:ea:fa:29:c5:5b:95:9e:
82:85:71:51:06:c0:51:d2:ac:78:37:7a:e3:20:7c:69:1b:8b:
24:23:9c:4a:f3:b5:d9:13:5a:b8:3c:4a:67:7a:b0:f4:a0:07:
9a:e2:28:f9:ff:f1:23:93:99:70:32:b0:90:57:25:2c:5a:82:
33:6c:ce:d2:b9:4b:18:5c:14:ff:8e:2c:88:30:6c:c2:99:19:
53:81:a5:c3:40:10:88:13:be:02:93:c9:2d:00:1b:3f:15:30:
3e:c4:7c:9d:a8:99:9f:05:fc:c6:46:61:2f:f1:72:ab:a1:87:
92:14:df:33:e1:fc:e1:35:d3:1a:85:4f:58:7b:c8:9f:5a:65:
86:00:11:b6:13:61:72:b3:25:c4:6b:fb:3a:5d:fa:d8:18:ce:
bb:c6:ba:22:6f:cc:c9:36:c5:a5:82:17:50:ee:57:1f:c4:71:
0b:25:0c:cb:e1:77:3c:00:2e:52:a8:58:f5:2d:44:fc:8e:00:
69:bd:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:03 2026 by rpki-client