Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
File: ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft (raw, json)
Hash identifier: ftvvx38JBZac0Dsd+kFng5dTHtyne/mqjOTWqTrrxoU=
Subject key identifier: DE:CF:42:A1:2D:B2:72:34:8F:48:6D:7E:E1:12:A9:62:09:49:8B:17
Authority key identifier: 66:92:74:97:27:BE:E6:E8:B4:84:AD:5D:E3:EC:2A:86:02:4E:A1:FB
Certificate issuer: /CN=6692749727bee6e8b484ad5de3ec2a86024ea1fb
Certificate serial: 019D3789C36BE93AFDE9065C91FA6BFAF1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ0lye-5ui0hK1d4-wqhgJOofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
Manifest number: 06
Signing time: Sun 29 Mar 2026 03:01:08 +0000
Manifest this update: Sun 29 Mar 2026 03:01:08 +0000
Manifest next update: Mon 30 Mar 2026 03:01:08 +0000
Files and hashes: 1: ZpJ0lye-5ui0hK1d4-wqhgJOofs.crl (hash: 2ZeVV23NILw8kfSU+COiP6q6A+JGGqaHxszuvRiM/sM=)
2: tAvWDg6C9tWGpf0qOSBi-bl1UoA.roa (hash: FHTTlK5qR2SriPlyoIDjDg0qyB1eJuPYoS9o961aumY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ0lye-5ui0hK1d4-wqhgJOofs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c3:6b:e9:3a:fd:e9:06:5c:91:fa:6b:fa:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6692749727bee6e8b484ad5de3ec2a86024ea1fb
Validity
Not Before: Mar 29 03:01:08 2026 GMT
Not After : Mar 30 03:01:08 2026 GMT
Subject: CN=decf42a12db272348f486d7ee112a96209498b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:a3:10:48:79:34:aa:9a:09:11:e9:42:29:
5f:85:cf:26:bd:b5:0e:a9:48:9e:6b:22:18:26:52:
58:9d:42:61:ec:ef:39:72:05:64:d6:35:29:ec:50:
3c:b2:a4:c2:af:a0:be:62:a3:78:71:3e:3c:0b:bd:
4e:ca:9d:6f:06:cb:9b:db:a0:be:ae:6e:10:61:5e:
c5:f0:70:90:2a:b1:93:e9:44:7d:f7:6d:d5:dd:fd:
c1:d2:41:04:d3:42:a4:57:3b:21:2b:69:3a:66:ac:
ac:28:7e:77:24:d6:eb:a0:d4:ee:16:ba:a5:29:74:
a8:37:d3:cb:c5:9c:fa:41:6f:84:7e:8b:2c:42:f3:
56:0e:8b:28:56:b5:db:da:42:20:52:20:2a:93:d2:
5c:f9:0b:58:5f:b1:f6:86:74:fe:4c:f9:a1:79:95:
c3:e0:ca:53:03:ea:6c:69:ec:84:6e:46:75:32:4a:
8b:c2:c5:a7:00:d7:93:34:10:e4:62:3a:9c:fa:ff:
e8:24:1e:4b:3d:cf:2a:e5:e2:3a:da:d6:e7:57:d6:
e0:bb:e4:7a:75:0b:ee:e2:1e:60:a0:a2:75:a2:57:
9d:4d:3a:27:e8:3a:67:15:cd:13:cc:6d:ec:79:cc:
f0:3f:b5:7e:6c:7e:a7:0e:0f:71:27:6e:8b:9a:4f:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:42:A1:2D:B2:72:34:8F:48:6D:7E:E1:12:A9:62:09:49:8B:17
X509v3 Authority Key Identifier:
keyid:66:92:74:97:27:BE:E6:E8:B4:84:AD:5D:E3:EC:2A:86:02:4E:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ0lye-5ui0hK1d4-wqhgJOofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ca9e47-566f-4e7d-b859-ba2efcc56558/1/ZpJ0lye-5ui0hK1d4-wqhgJOofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:32:c0:8e:1b:e6:28:64:64:ed:ac:4c:21:ac:28:38:c9:d3:
04:b9:1b:72:88:87:05:df:3f:9f:85:21:1d:5c:32:c1:90:ef:
cd:6a:19:b0:5d:3a:84:3e:b5:74:71:c0:5c:c7:75:86:5c:22:
24:6a:98:1e:86:1d:93:8d:b2:16:16:91:90:87:70:01:aa:f6:
c0:78:af:01:e4:7b:10:dd:19:94:81:00:c2:13:41:b3:32:95:
70:49:43:74:12:f6:50:19:b4:d8:51:73:d1:e4:ee:48:f1:87:
62:5c:66:8f:1a:ac:e3:60:fd:85:5b:69:50:03:5a:e6:a1:99:
07:7d:46:38:40:e6:ca:11:14:79:ca:a2:bd:61:ba:0d:80:fb:
b2:bc:75:5b:6f:19:e8:7d:4f:d6:9d:32:4d:7e:39:1b:2b:96:
cf:80:a8:59:c7:28:aa:b1:7e:83:7c:74:e1:e0:80:31:56:d7:
f7:04:47:42:aa:0d:ac:0b:db:ef:e4:c0:9b:36:ee:31:11:a9:
c1:4a:2b:b3:e9:86:e8:ee:8a:53:81:cb:92:cb:6d:48:65:f1:
0b:d8:3d:d2:56:70:ea:aa:5f:f3:9d:9e:0c:8b:b1:36:55:a7:
de:9e:5b:b1:31:ad:91:21:d0:24:d0:b4:7b:4c:e0:58:d9:29:
d6:ba:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:13 2026 by rpki-client