Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: b5bX4N7c2o3w5PFGQsWry1LOe8wzbjyPJxRHaNe1g8c=
Subject key identifier: C8:40:A6:E4:B1:AA:26:44:7F:D6:65:19:4F:F9:08:02:5F:5E:AC:DC
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 019D37F74DE341DD87E4069A39F81AF38285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: cJ+mTttfoecuOQBgHcnKADAGUEmaZUl1XUjDXqCSIDg=)
2: kcYFoWMu5QoSNf9ceG2n-kODfhI.roa (hash: gkTfw6NqMW7Am2gTmxLPtlhTW10NUd3lUtw+Ko4m44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4d:e3:41:dd:87:e4:06:9a:39:f8:1a:f3:82:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=c840a6e4b1aa26447fd665194ff908025f5eacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:71:24:74:5d:d9:44:05:4c:8f:be:0a:7a:
8d:f3:c2:c8:60:f8:e1:ca:ec:71:ae:7d:81:e5:35:
08:78:b2:e2:8d:e2:ba:8b:5b:ad:14:f3:b9:0d:99:
7e:97:e4:b5:92:1e:4c:3f:72:38:03:4c:9c:f7:01:
8e:2e:4c:77:96:d1:f1:d4:79:a7:5f:28:db:58:9d:
0a:85:80:f2:ee:ad:12:64:c3:7e:e2:7c:ba:4f:1d:
ee:86:3e:0f:bf:29:1a:34:bf:76:72:fb:a7:cb:c6:
94:03:b0:4f:10:4a:06:cf:bb:79:af:ba:c3:55:e5:
1a:71:84:81:f4:62:38:45:e1:97:8e:5e:d1:f5:02:
aa:6a:16:68:13:c7:9f:db:1c:7c:8b:8b:fa:e5:74:
0c:bd:57:b9:8c:6f:96:23:e8:4f:7a:42:ef:f7:0e:
81:ea:37:d1:36:19:05:e1:a2:44:1d:0c:31:0a:97:
a7:96:30:78:5b:5a:4f:15:5a:ec:ab:c2:5d:61:4d:
fb:8e:60:b5:d9:ad:ff:b3:0a:d1:0d:6a:d4:dd:5f:
8a:85:26:a0:6b:35:1c:8b:a4:14:a3:a3:bf:63:98:
1d:c6:70:b1:22:71:9f:fb:e1:5d:a4:04:01:16:ce:
42:da:a8:35:00:ca:6f:92:d4:1d:a9:88:7a:ae:02:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:A6:E4:B1:AA:26:44:7F:D6:65:19:4F:F9:08:02:5F:5E:AC:DC
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:86:cc:36:d3:51:91:f4:62:b4:db:4f:8c:57:67:42:84:b1:
80:19:e7:12:85:c4:5e:5a:33:b4:79:1c:1f:e6:77:8a:99:f6:
c3:bc:0a:0f:8a:44:99:f2:48:5c:5f:87:9a:08:f5:52:e6:e1:
f5:97:77:bc:2b:21:77:e3:c5:b9:2c:b7:cd:35:a5:c5:1c:1f:
9f:e8:0c:4e:65:85:54:96:61:65:4e:78:32:a5:c2:3d:64:41:
76:96:72:9b:0b:4f:93:06:e0:d6:2d:45:9f:af:bd:d9:16:5d:
f0:0a:3f:8b:3c:41:7f:d4:7c:ff:fe:6e:5c:5f:df:c1:8e:c6:
ba:0c:6c:ad:a2:b8:6c:6b:3c:5e:d0:ac:53:ef:a0:d1:27:eb:
7e:d4:70:c1:aa:1a:3e:bb:8e:5d:c2:b0:7d:53:68:32:6e:8d:
dc:cd:f3:11:5c:7d:20:ca:80:eb:db:66:9c:69:9e:69:99:65:
4f:38:28:9e:62:e7:b3:5c:f4:d6:5b:d8:63:f3:61:3a:62:33:
6f:2d:e3:58:b0:97:f2:c8:34:3f:53:6a:2a:f3:ec:a0:f5:4e:
2f:eb:1c:5b:93:75:9e:53:1f:d9:33:07:bd:88:a8:25:3f:09:
fb:68:6c:12:09:cc:3c:e8:aa:7c:4c:71:70:ed:7a:14:cf:59:
a1:fd:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:33 2026 by rpki-client