Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: Eyy0bpHTfjCM0re1//ZkoqELDAMIkFoZRSCbhSFkm/w=
Subject key identifier: 8A:1F:ED:85:B6:33:E3:F7:8D:98:54:FD:55:1F:C3:92:BB:CE:AF:37
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 019D3909BBCE12DF1A27049D54A36327E4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: JAAnHoGMLFM8nmQt8Fw1GYpFSMlNQ+vRWECPOUMNNqk=)
2: jwb3_W1JU1Qdkl3kW-bgLNh66os.roa (hash: 1Pb1Phz3ZFSFx/2QmC/w8mjEvm4/tTuC+LVbbpWItSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bb:ce:12:df:1a:27:04:9d:54:a3:63:27:e4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=8a1fed85b633e3f78d9854fd551fc392bbceaf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:88:07:11:3d:20:29:53:83:29:c9:e3:a3:
59:98:f3:6b:f4:bb:7b:d9:60:f1:82:97:08:87:ec:
c8:2e:b5:7f:d0:96:b3:ba:db:18:44:09:60:32:ba:
59:2d:08:f6:0f:3a:ea:7e:4d:7b:66:a7:02:4e:52:
b6:6d:69:c9:ad:81:b1:db:8f:df:b7:e2:de:74:d4:
0b:82:ff:4e:f6:c4:76:ef:d8:3e:02:6b:cd:6f:ef:
bf:fe:64:c7:ea:fa:54:28:cf:aa:b1:55:65:f2:7f:
6d:e7:fb:63:7e:f7:8d:53:56:db:ad:9d:a7:ed:f3:
0f:f0:ac:cb:05:12:f1:a3:52:ee:41:2b:1a:8f:f7:
0d:d1:e4:ca:99:83:e5:a3:40:3b:81:28:42:35:0e:
1b:b2:53:e4:46:ed:98:0d:0a:96:98:21:2a:39:39:
89:6b:28:16:76:30:4b:30:15:a4:59:eb:e7:5d:00:
76:bc:51:40:9c:f3:e5:ce:a3:b6:2d:43:f1:98:d4:
31:28:67:85:8b:00:01:ca:6c:f6:ab:78:5b:fd:7b:
3a:d6:d9:36:fe:ce:48:df:7c:7c:a5:5e:a6:03:f5:
a0:20:b6:ed:1a:20:04:29:79:e1:09:44:4d:da:f8:
6d:1e:03:04:5d:43:86:54:59:3d:4f:6c:ac:b2:c0:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:ED:85:B6:33:E3:F7:8D:98:54:FD:55:1F:C3:92:BB:CE:AF:37
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:eb:f0:85:b0:f7:a4:42:3d:07:75:c7:53:44:1f:7c:4e:
15:a7:31:7e:16:71:d8:5d:4f:d4:5c:59:b8:01:c4:ce:2e:45:
6e:30:58:24:f9:c9:2b:d6:e3:b5:43:02:5d:31:06:75:3e:a8:
8f:6a:e5:79:b1:2c:ed:a0:a3:50:d7:b5:9d:c1:20:e6:5d:c0:
f3:e3:b4:a4:91:fe:db:16:81:09:16:1d:5c:9b:70:6c:41:64:
2d:54:17:5a:b9:98:4f:de:31:d0:5f:60:1d:c1:f1:b6:6d:aa:
94:b7:5d:e5:76:34:4e:5a:d2:8c:0b:bf:68:f3:b4:85:57:fe:
bd:d1:c2:06:95:e4:63:43:53:e9:7d:a7:a6:26:13:57:8e:0c:
3e:45:46:ca:1f:68:4b:e2:21:39:be:1c:4a:bb:93:26:51:09:
3e:65:9b:b2:6a:3b:c4:a3:f5:4d:0f:4e:ee:11:df:ec:70:b1:
0e:12:9c:6c:8d:d6:46:57:81:78:e6:21:2e:14:e6:22:b3:30:
2f:60:82:d3:18:2e:05:a8:5a:1c:61:d4:af:f6:0a:3a:58:f3:
4b:15:08:c7:6b:3c:90:46:85:1e:a9:33:17:e8:fc:54:e1:79:
ea:04:09:48:f6:2b:9c:12:12:e4:cc:be:da:cb:38:3f:18:68:
6b:be:f7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:43 2026 by rpki-client