Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: 4PuIYr4bHK1vKbPdfx0BsMw38OTfVaAIQ5u5gXxRvVk=
Subject key identifier: 07:42:C0:10:8C:AC:A4:5B:23:FB:0C:A7:12:44:23:E2:19:12:BD:65
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 019D382DFCCAEDC0273BE1DB5BC5182E1647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0FF7
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: LKRbgNIuym0Svm9B8CcGPQLjgtgyqz9jXV7E8rqC6Ok=)
2: y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa (hash: N7GdQ0FkLOrci0SR8hsklzMqdumTV6SFC6K9X7skI5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fc:ca:ed:c0:27:3b:e1:db:5b:c5:18:2e:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=0742c0108caca45b23fb0ca7124423e21912bd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:c3:d2:99:83:b5:71:08:40:00:de:10:76:
71:e4:92:c7:87:b8:a4:f8:c6:4e:79:e6:6d:1a:7f:
24:f4:80:60:73:6b:57:7b:0d:c8:46:d7:13:7c:d6:
2d:50:91:bc:aa:b0:4e:82:78:77:2e:f9:3a:2c:10:
f8:a1:c3:64:72:c6:25:9c:ff:1e:d6:7f:32:63:eb:
44:b4:ba:86:9b:66:ab:ff:09:db:89:72:e1:d0:5e:
77:2e:df:13:81:87:3b:5e:a9:21:5b:e5:6b:14:e4:
ff:44:40:59:3c:c7:c1:10:f3:a0:40:23:d0:fb:23:
5f:8b:c8:0e:6d:bf:70:d1:e7:f8:0f:60:c5:7f:9c:
87:30:e3:76:0b:ec:1f:63:18:68:c0:0b:2c:4e:ad:
e8:81:1f:e1:f5:f5:1c:6b:59:64:cc:8a:86:87:aa:
70:c2:57:7c:b7:31:02:2d:05:a7:0c:b7:d0:72:46:
de:a3:0b:9d:bc:84:51:67:f2:3c:86:f8:98:33:37:
0d:3e:40:a5:61:bd:71:a2:aa:a1:e4:30:8d:07:84:
2c:d5:4b:0b:26:f8:ab:27:45:0b:94:38:54:00:13:
df:b7:46:a5:39:ff:dd:75:bb:5a:3a:88:8d:d9:0d:
a8:20:d9:59:7c:7d:d9:48:a7:99:8b:87:51:25:19:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:C0:10:8C:AC:A4:5B:23:FB:0C:A7:12:44:23:E2:19:12:BD:65
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e0:39:f4:bf:23:c7:26:e8:65:df:3b:2a:d3:00:d5:fd:65:
99:a5:9b:e1:ec:20:d5:97:20:bd:a6:41:89:af:54:4b:31:8b:
73:ad:ed:21:cf:f5:cb:2b:d4:e9:48:76:8a:d1:bd:a2:e4:62:
f7:47:33:d6:44:8e:78:69:6d:6c:ea:12:47:24:ad:f6:2d:de:
17:b8:d3:22:3b:67:de:b0:0c:36:6d:67:d1:1b:8e:27:dd:53:
5c:d9:9d:e0:88:d3:61:4d:b3:ae:ee:09:53:ec:66:eb:67:ec:
05:10:3c:bd:b9:c9:b1:99:20:d7:15:6d:2f:40:4c:c7:22:51:
fa:5e:41:75:0a:9c:31:28:aa:fe:1f:a4:62:33:c7:27:d2:c1:
17:e0:b7:4e:2e:7a:d4:b0:7b:fc:7d:f2:ca:ec:71:9d:8f:76:
45:50:67:7a:84:ab:4c:d1:f8:97:a7:bc:2d:ce:a5:02:70:e6:
5c:3c:71:92:e9:ea:50:56:c9:ff:16:51:ec:a2:46:6f:a0:1b:
68:7f:10:30:1e:61:74:ad:33:c5:8f:1b:87:71:6e:1e:85:b3:
e7:56:45:6c:fc:4c:47:96:15:72:ef:7f:4f:d5:9d:bd:6a:7e:
dc:0f:a7:86:ab:39:f1:05:3e:a0:18:f5:10:9d:de:4d:91:8d:
3b:5f:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:47 2026 by rpki-client