Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier: UgA3zR0l6Y6j7Hyxqsj9PI99IWaWdL/y74u4vzeWCw4=
Subject key identifier: 63:6F:00:78:43:8E:8B:BA:9B:14:36:02:5D:05:4F:95:6F:C3:C3:E3
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer: /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial: 019D389BEDF837524E93DF2D57BB05258878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number: 0F25
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: Bv4QNF6SQGLHDCa4pPGSOKoN5Zw.roa (hash: PBmXt/J9jzevWMbYxCgym3c4aXWjbalEFu2SESEuNB0=)
2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: 1H5dzWLXT5gzfqnb/l0N3f5OpppzW5MBcEvTkFNURgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ed:f8:37:52:4e:93:df:2d:57:bb:05:25:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=636f0078438e8bba9b1436025d054f956fc3c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:15:db:c0:e1:84:5a:f6:2e:43:18:0d:9d:
2c:4e:f4:fe:d8:d8:8d:08:d5:4b:35:18:bf:6c:9c:
3d:b2:a8:ef:03:c4:13:7e:f6:37:39:d6:83:80:85:
a3:58:72:52:6d:2c:d2:93:12:25:2d:2e:ea:6a:42:
8d:0c:c0:c1:9f:3e:94:aa:55:ee:d6:7e:52:a5:61:
d7:0e:e0:de:21:f3:e2:d4:3f:51:fa:22:49:46:b5:
79:63:a8:55:6d:c3:33:d8:6b:43:46:40:1d:7f:3c:
c1:d8:ed:b9:e4:9e:f1:96:18:81:3c:b6:b4:b3:43:
34:5c:c3:c8:ad:42:4b:bc:1b:e6:ff:f6:38:dc:be:
d8:9e:d4:2d:99:db:31:36:d3:7d:69:f7:63:d4:31:
7f:62:f9:86:69:74:fb:53:84:34:5f:d5:69:06:f3:
b9:bf:ac:fc:60:10:c4:80:06:3a:25:cc:20:68:5c:
d7:16:d5:b1:44:2e:e5:a6:82:76:56:52:63:5b:44:
8a:0d:6d:60:a0:6b:f0:e2:e6:c5:2a:2a:16:ce:fa:
56:86:ee:48:0d:58:a4:2b:c7:bc:e6:85:fe:06:77:
ad:ca:75:90:8b:07:73:a5:49:c8:01:6d:d5:3b:89:
5f:84:80:c3:fb:63:9b:f7:db:32:00:e0:89:b6:55:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:00:78:43:8E:8B:BA:9B:14:36:02:5D:05:4F:95:6F:C3:C3:E3
X509v3 Authority Key Identifier:
keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:59:53:c3:ea:a5:04:a1:6a:47:49:f8:ac:0c:da:ed:66:
c7:e2:f8:bf:a3:07:a5:ca:59:d6:ba:16:f7:c2:f1:f6:fe:78:
1d:37:16:3f:6d:10:0d:9c:d7:4a:62:cf:1f:ae:d0:02:02:d4:
06:9c:45:49:82:00:4d:7d:c7:ff:bf:8e:d4:97:8e:7c:cb:ce:
eb:8c:a1:ea:00:7b:dc:ca:35:e2:d0:b5:1a:7a:bc:15:dd:33:
ba:06:48:08:93:2e:52:12:af:6a:5c:ce:f4:2b:2d:97:09:d5:
5a:b5:d1:88:0d:a9:80:e6:1c:b7:97:b9:5a:7b:d0:52:81:a9:
93:2c:8b:db:49:97:e4:da:02:48:40:03:af:b0:44:f0:eb:65:
fe:ce:6b:a7:33:1d:06:05:0a:c7:ce:51:ce:4d:2b:f1:02:52:
2d:b8:95:6d:8f:4a:ed:3e:38:d6:4b:46:6c:a4:44:cb:eb:b4:
55:19:7e:9e:68:7f:15:e5:66:1d:f0:4e:09:f9:52:40:04:9d:
c1:18:ba:db:2b:d4:13:b3:2c:93:44:0d:59:07:32:1f:15:35:
c4:ab:e3:4f:62:8a:4f:39:b9:b1:fe:a6:e3:f8:b9:a7:02:53:
6b:6a:d3:af:36:5a:03:d9:41:48:8f:2a:fb:ac:15:21:06:9b:
17:a7:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:46 2026 by rpki-client