Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json)
Hash identifier: TPnoZL6NjYXsJ9gzfngND4U5JpxE6wY1RhPyEfjnK0I=
Subject key identifier: 6B:FA:E7:BA:AC:02:1E:4B:E2:BA:E7:83:BC:31:0C:91:4F:91:8B:15
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial: 019D382E6976D07C0F42CB5027FBD575E00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
Manifest number: 12BC
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa (hash: 71XpHjlTdPY1qywc9le+VCgiZcIMSS2xeHJ0XkAm/ow=)
2: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: pqyrEMhKipMqGRODGM+NkKOKHiBIYeaLKXLP7tCrGjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:69:76:d0:7c:0f:42:cb:50:27:fb:d5:75:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=6bfae7baac021e4be2bae783bc310c914f918b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:06:34:ac:1a:4d:a2:e8:3c:7a:15:7a:98:
54:87:47:9c:0e:83:d3:c5:58:e1:f8:c2:68:32:5a:
29:d2:cb:36:1e:37:05:54:bc:f1:e6:f1:93:66:9d:
08:d6:8c:a9:e7:47:32:da:0c:44:30:01:24:df:8e:
af:fa:44:c5:75:ed:89:80:5a:91:2c:02:dc:5c:7d:
71:b1:d6:d4:80:95:7b:46:45:25:b2:8c:e1:7b:80:
58:50:d7:19:67:16:23:37:5a:c1:e4:51:dc:53:e2:
b4:ab:33:68:16:a2:9b:83:09:f1:e7:ce:c5:ec:c5:
87:f9:95:03:c7:18:d1:54:f3:d2:9e:74:22:6f:5d:
0f:93:93:2f:2c:1b:ea:48:d5:40:5d:15:17:de:6e:
62:1b:af:ff:26:01:6b:15:38:4b:e2:2e:b6:3a:d7:
d3:e6:d6:20:56:69:0c:c0:18:c1:5d:b3:88:1d:47:
39:8a:eb:7d:0c:da:01:d1:d5:c3:49:bc:d3:fc:7a:
af:da:6e:4a:c7:98:fd:a6:ab:43:3d:60:f4:ba:74:
13:85:09:b5:60:69:0a:e4:52:75:37:4f:4d:d2:a7:
bf:00:c2:15:ae:bd:fc:41:29:31:02:81:4c:e3:f8:
b1:0e:ae:af:94:17:50:5e:66:88:ef:d5:4a:e9:db:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:E7:BA:AC:02:1E:4B:E2:BA:E7:83:BC:31:0C:91:4F:91:8B:15
X509v3 Authority Key Identifier:
keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:ce:75:66:c7:f2:10:bc:c8:8a:51:93:53:9a:47:36:69:
41:a6:10:6b:8a:18:a5:11:d0:ce:2b:de:a2:71:08:ca:a8:a0:
ba:cb:ef:43:a8:a9:fd:97:4d:a5:fc:c8:7e:a3:0e:cd:9f:48:
34:65:85:0b:ee:bb:d9:9f:ed:aa:67:82:b6:20:c3:64:89:de:
43:40:75:be:bc:b3:b2:a3:04:44:42:c5:f4:ec:8b:65:ef:42:
13:79:bd:94:dd:8a:ef:2e:f5:48:cb:16:c8:54:5f:27:69:da:
89:6c:bf:1d:d2:4c:d5:ee:31:a3:6f:42:f2:57:0c:21:0a:09:
85:55:d3:2e:7b:61:d2:31:9d:08:5b:bb:e8:91:c6:9f:ae:bd:
24:25:00:11:cf:ed:97:4a:ca:7e:13:e1:c1:c4:19:64:1c:90:
1d:21:fa:5b:86:cd:8b:f7:fe:8e:58:a7:11:1f:44:e5:79:7b:
ab:81:99:da:f2:43:7c:ec:16:ff:78:2a:9a:38:6f:30:01:27:
b3:c3:fd:bb:06:8e:d7:f3:00:46:af:87:55:f5:cc:42:a0:df:
7a:99:6d:b3:d2:76:7b:53:cc:55:87:7f:1c:76:75:d1:e6:22:
14:51:1b:c0:d1:e2:d4:39:80:19:8f:25:99:37:ef:37:ce:88:
f9:06:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:44 2026 by rpki-client