Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: eJBdQqKF0e8sz+4j3l2cxM7gR0XDdcRuXemFARosMyo=
Subject key identifier: 33:6B:2A:5F:F8:AF:46:DD:5C:F2:02:7D:1E:95:2A:C2:6F:B1:C7:CD
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 019D3A537D4F8A77C8A12D437E67E6DB0643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 12F9
Signing time: Sun 29 Mar 2026 16:00:43 +0000
Manifest this update: Sun 29 Mar 2026 16:00:43 +0000
Manifest next update: Mon 30 Mar 2026 16:00:43 +0000
Files and hashes: 1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: qotKexbqoEF9uy+r4lYVuJ9zCrCYdGIrDIvcEddGH18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7d:4f:8a:77:c8:a1:2d:43:7e:67:e6:db:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Mar 29 16:00:43 2026 GMT
Not After : Mar 30 16:00:43 2026 GMT
Subject: CN=336b2a5ff8af46dd5cf2027d1e952ac26fb1c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:ce:bc:a8:a4:a6:89:44:3a:21:00:2b:2e:
aa:79:d6:4b:b6:2e:8d:29:15:05:a5:70:18:e1:12:
ce:c3:2b:10:56:54:0a:4f:55:18:56:55:0f:75:4a:
c4:4f:40:07:ed:70:aa:0a:2c:ea:ba:a0:75:29:d4:
66:d3:6c:81:74:19:52:31:02:de:65:fe:d3:46:b1:
57:08:97:7a:42:cd:c8:c2:41:01:25:48:58:2c:28:
50:3e:9e:f5:4d:cc:5e:4d:83:c2:1a:b8:32:5c:1d:
0a:59:07:9e:de:71:c5:90:84:71:d6:7e:e4:38:2b:
e5:97:8f:ce:fd:6e:db:ba:60:12:25:04:c4:bf:bc:
e7:18:21:58:d6:4c:5c:dc:41:13:df:3c:77:2a:0a:
d0:6d:bd:c0:6a:30:31:05:ae:76:93:a2:55:52:71:
b7:1b:df:ae:e4:38:36:4d:e8:19:1e:8d:3b:17:b5:
3d:25:32:d9:bc:5e:e2:94:bb:51:bc:e3:b7:4f:4c:
aa:3b:c1:a3:9b:49:92:ca:0f:28:bf:03:b4:35:bb:
e8:b3:24:db:f5:58:68:6a:f5:d8:c1:c6:9a:0d:94:
91:ea:6f:a6:a4:c7:34:ed:30:ac:28:80:56:da:5c:
d4:e3:f1:e2:f0:f2:0f:df:9e:ae:17:37:86:6b:fa:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:2A:5F:F8:AF:46:DD:5C:F2:02:7D:1E:95:2A:C2:6F:B1:C7:CD
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:20:4a:8d:02:d5:94:1a:46:73:3d:f6:db:1e:fe:5f:99:6b:
43:4a:7c:4d:76:3f:e0:e7:3d:43:75:d9:82:62:d5:4f:78:7c:
0e:6a:28:1b:0b:63:63:ea:f3:1d:00:3b:90:d4:ba:e5:f5:cb:
2d:0b:47:c1:dc:31:8a:89:a1:9a:06:46:5b:31:b9:9e:af:ec:
75:a4:91:59:23:f3:c5:9a:f9:1c:be:9a:59:5a:73:d0:2c:30:
2a:6a:ef:70:6f:60:c7:d0:7d:f0:df:1b:9e:a9:81:a7:d7:a4:
2c:fc:96:f7:28:97:0b:24:bc:03:95:3c:42:fa:25:6e:65:17:
9d:b0:43:ac:f4:36:d0:9d:77:b8:42:ab:46:a5:82:59:5c:90:
1e:28:79:02:0b:a3:b3:8c:18:57:20:76:57:03:b4:c5:41:56:
3b:21:b6:ff:f8:1f:f0:f1:54:b0:84:5e:56:64:69:fe:2d:77:
a3:96:4e:7b:00:80:e8:83:91:89:30:0a:e7:8e:be:0b:bf:ee:
3c:62:15:54:5e:cd:f2:33:aa:f8:e9:19:5b:ea:a3:85:0d:74:
8e:c3:71:41:8a:6d:c9:26:76:47:10:c1:46:70:40:eb:fd:23:
77:ea:0c:99:35:25:08:a0:4e:e8:d7:bb:f5:d3:1f:5d:54:e3:
4f:e8:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:41 2026 by rpki-client