Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: rAKcP5yop243hR4XcfJIzTW4AlYoXlZQhCxmF9TpKEQ=
Subject key identifier: B9:E7:91:CE:E6:64:B4:65:7C:A9:8A:61:8C:43:CB:2F:27:32:ED:9E
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019D375248C075A6BFD4DEFD5771CDFBCE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0487
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
2: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 4eaYD3xXk0fXPZpSabZ061TVVAJSnpy/8zu/tv3x2fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:48:c0:75:a6:bf:d4:de:fd:57:71:cd:fb:ce:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=b9e791cee664b4657ca98a618c43cb2f2732ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:4f:7f:de:95:93:ce:3b:79:59:99:ab:6d:
4c:a6:c8:cd:36:8a:0f:39:7d:ed:ec:8f:dd:ca:54:
9e:f5:92:e7:db:77:87:da:7b:b2:64:cf:71:02:c1:
80:ca:79:0e:c3:31:39:94:c7:1f:46:10:76:42:46:
cb:48:2e:9a:db:b8:c8:54:01:b5:5b:9d:61:46:ef:
0b:de:65:f4:21:f5:33:fa:f8:e9:a2:0c:49:66:de:
e6:d4:57:34:a3:87:3e:f3:8a:24:7d:06:d0:6c:3b:
b7:24:22:a4:99:1c:f8:0c:6f:bd:2a:07:34:51:68:
46:08:03:44:e3:c3:4d:ad:23:b7:ac:76:aa:d9:f1:
db:76:f4:95:4f:77:3e:ac:df:b6:79:05:39:93:7d:
08:9c:f9:2a:11:04:d6:9b:00:2d:5e:52:6b:d3:0f:
1a:3b:c1:56:1d:22:53:63:96:69:e6:b7:be:f4:93:
aa:a3:59:64:4f:2e:4e:c7:69:f5:c5:d1:be:b6:6e:
7f:4b:bb:e8:06:a1:1b:cb:83:15:8e:07:f1:3a:65:
43:9c:77:95:8b:03:d6:94:c3:98:4c:00:86:87:86:
1a:7c:0d:cd:7d:6c:16:17:6f:26:8d:4d:f7:56:1f:
42:ba:eb:e6:ae:5b:bb:15:82:aa:7e:74:9e:77:b9:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:91:CE:E6:64:B4:65:7C:A9:8A:61:8C:43:CB:2F:27:32:ED:9E
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:de:2f:5e:8c:7b:76:22:9f:24:ff:5f:8b:ee:eb:29:bf:c6:
a4:cf:d9:a7:4f:f7:01:55:95:9a:a0:e3:56:82:f5:7e:36:88:
14:14:3a:9e:6c:68:f1:02:81:8c:c0:9c:c4:27:f1:a4:5f:3a:
88:63:ea:c7:5c:47:f9:2c:2c:64:6e:2e:1d:1e:dd:cd:62:97:
bd:30:bb:d2:37:b9:9a:38:05:76:47:56:26:fd:78:40:bd:08:
3e:57:c5:8c:27:a7:5d:39:03:93:19:cc:88:f8:1c:84:81:83:
c1:ae:5f:5b:31:02:37:30:0a:51:37:d4:ba:0a:72:b5:a7:ff:
05:00:60:02:5a:fd:a0:c1:78:fe:e3:7f:eb:3b:84:fa:53:2d:
c4:80:bb:95:f3:7a:02:8e:fb:0f:f6:00:6a:ac:9b:f9:18:66:
7e:12:9c:5a:d1:a4:bb:84:80:17:84:6f:54:a3:af:27:dd:76:
61:5a:0c:c2:52:6e:f4:e7:a6:bb:4c:53:de:83:7e:32:87:e6:
f4:16:cd:13:99:31:b4:4e:80:c5:b8:bc:9a:f1:6e:80:62:bd:
cd:76:2a:00:68:27:1e:78:18:84:ec:6a:77:65:bc:7b:d8:45:
db:29:75:39:df:a5:e6:88:10:7b:83:8f:76:ea:2e:cc:f9:37:
3c:41:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client