Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: Xlau7ninBQkFnDfwppmGPs4fT+VONUIZcjjuVIjJjLQ=
Subject key identifier: 83:CD:A0:68:EE:1A:51:93:AE:61:A7:21:B3:05:4D:23:40:70:5D:51
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019D37F77E518FE26D84965302A5462B53FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 17CF
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: 1p6N-kK_4V3GFKcMeMBC634qt2Q.roa (hash: TSyzIZ76W8e8kErWqZwdXl64ZiwUdxKLNAqgp6ToAQQ=)
2: 4WvNG4qNCW2EFlj86dJTOuveJH8.roa (hash: oJyVY5B1qiE0XMrui4EotkBx3jXoI+Z2a2bCSywanP8=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: 4ny6Ia/yWosSD0U4oPZrOITYGbdXHs5GIvee6wHzHGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7e:51:8f:e2:6d:84:96:53:02:a5:46:2b:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=83cda068ee1a5193ae61a721b3054d2340705d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:17:50:97:43:c8:26:03:f9:59:b2:2d:11:
37:e9:f3:91:23:c1:df:1a:b1:cb:0d:44:9f:46:17:
e0:ae:93:d9:19:3d:8b:df:9a:7e:41:55:aa:ca:63:
6d:ce:15:27:85:b1:49:c6:9a:a2:9f:d5:d9:d5:d7:
39:3f:8d:46:61:0d:f3:13:de:3e:3a:07:07:9f:f2:
38:cc:00:59:05:dc:4a:df:07:9b:fb:53:52:2d:e4:
09:f4:fe:48:cc:9f:ed:74:91:33:b1:22:89:26:a7:
fb:5e:71:30:b9:01:5e:43:36:39:9c:45:5a:9c:c6:
25:2e:3e:65:e8:aa:da:f6:be:57:45:59:aa:77:32:
66:f0:d8:67:47:bf:5c:fa:16:46:30:ff:23:47:03:
b0:4b:2d:a5:2b:ef:e2:a3:25:5e:83:77:3f:ba:72:
f4:e9:4b:76:42:e2:3a:ef:16:e4:52:e7:a4:92:d2:
83:fb:0d:03:65:6e:fe:5f:cc:00:7f:a5:da:29:75:
20:9d:21:98:53:31:95:6a:45:2a:6f:a7:64:96:4f:
1b:65:37:9f:d5:04:46:06:30:69:b9:0f:f7:a9:d8:
aa:f3:2d:33:33:9f:6c:8f:90:d6:cd:06:a6:a7:7a:
d9:a6:0f:05:bd:aa:53:11:6a:54:f4:01:eb:2e:a2:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:A0:68:EE:1A:51:93:AE:61:A7:21:B3:05:4D:23:40:70:5D:51
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:93:b6:bf:41:79:c9:36:9a:69:40:e8:5f:ad:be:11:35:
dd:0b:4c:9d:84:2f:4a:8c:f2:69:5a:a0:e6:0f:22:73:b3:c8:
70:f3:d8:70:96:5f:05:22:a6:33:bd:aa:54:ce:7f:27:36:95:
24:58:da:97:11:94:b2:c2:53:5a:b0:a0:03:d7:45:3c:30:ac:
b6:77:d8:9f:68:60:d1:1e:a6:a8:aa:3e:18:6b:0b:37:6c:52:
d2:99:0f:db:87:15:62:1f:c4:36:ca:b2:51:dc:44:07:c7:56:
58:19:2a:b1:58:8d:e4:76:8a:16:b3:70:d4:da:b8:82:d0:1e:
80:3a:9d:3f:6a:45:ae:c8:31:b0:b0:0f:b3:42:ac:33:99:4c:
49:03:a1:73:4c:a7:84:97:c4:73:55:32:84:42:05:46:fb:3c:
0c:12:fd:ad:f3:d4:45:39:1d:a6:d8:1e:1a:b2:a9:8c:dc:c6:
b2:a3:1a:0d:32:4f:f7:64:22:2b:18:3a:a5:92:57:3d:8c:07:
37:f6:b6:1b:ec:14:f5:c6:1f:d4:29:07:76:ca:65:cf:26:21:
2d:da:f3:77:b2:1c:2a:e5:e7:09:28:f6:ec:c4:00:a2:fa:cb:
ab:9f:5c:ae:c2:b4:1b:08:8c:a9:ea:b9:d3:18:88:67:f0:eb:
d0:e3:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:21 2026 by rpki-client