Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: Bzyu53yaDp8Qhde1dsgV5Royb6E/fOVe6rtTnuETKlY=
Subject key identifier: 65:45:EE:8A:04:AE:A1:E2:52:28:B3:61:B2:C3:2D:D9:AF:DE:CE:B4
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 019D39AF45013B8C73B97D885AB1E188DB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0D55
Signing time: Sun 29 Mar 2026 13:01:20 +0000
Manifest this update: Sun 29 Mar 2026 13:01:20 +0000
Manifest next update: Mon 30 Mar 2026 13:01:20 +0000
Files and hashes: 1: SKTC8iFjoyKhvbRbbjVeP1tuXkY.roa (hash: x4nm8dMDKJDEpeH+JfZ+1a0v/EVg7R0GUoex2DYQAOs=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: otPCU26tBQ5TcrLbF03Hp2Ygeum9Qx9OcAFnUF2rOFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:45:01:3b:8c:73:b9:7d:88:5a:b1:e1:88:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Mar 29 13:01:20 2026 GMT
Not After : Mar 30 13:01:20 2026 GMT
Subject: CN=6545ee8a04aea1e25228b361b2c32dd9afdeceb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:8f:8a:23:e5:7b:6b:81:67:ed:eb:76:eb:
48:25:a3:d8:38:77:4c:00:5b:c8:cb:35:05:c8:4c:
21:13:21:3a:1f:16:40:10:27:02:85:b0:52:be:35:
13:da:a7:e9:be:03:3c:e7:1a:aa:3c:41:e1:37:e3:
10:af:7a:2f:4f:60:19:0c:99:51:1e:d5:12:eb:f5:
cd:5e:22:05:eb:0c:e0:3f:06:18:19:dc:fd:ac:42:
4e:6c:c7:6c:41:88:87:e1:22:2d:21:ac:4d:b8:f2:
d4:42:41:5a:97:06:7e:0a:fc:a1:b6:9a:84:37:fc:
6d:a3:94:d7:c4:0a:75:de:2a:07:da:d3:96:a5:56:
25:3a:60:6e:dd:7f:86:c5:39:ce:d4:54:87:00:54:
b6:92:92:39:c0:a5:1d:f8:b3:47:9f:09:55:61:b0:
c4:ba:97:98:50:f7:22:7a:e6:11:62:aa:d2:31:72:
b0:02:95:fc:cd:e4:24:68:9f:a2:56:4d:54:c9:57:
e8:1d:d4:bf:3c:01:57:6b:bd:b2:e0:b2:b7:11:a5:
86:24:f1:d6:2e:e3:91:c2:ff:6c:48:39:9d:c4:e2:
05:8e:9f:18:aa:f3:54:49:d3:a8:2f:70:11:99:4a:
0e:7f:7c:b3:6f:dc:d6:99:c7:87:ad:e0:b9:ce:36:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:EE:8A:04:AE:A1:E2:52:28:B3:61:B2:C3:2D:D9:AF:DE:CE:B4
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ac:36:ee:2f:c6:b2:0b:8b:04:48:ba:01:74:39:97:5c:61:
ce:c6:ce:ed:cd:f2:ad:b5:46:eb:11:4d:6b:43:84:c0:8b:2e:
aa:b4:31:2a:02:ba:f9:09:d4:0f:51:e1:21:33:78:8d:2a:5e:
26:5c:49:78:0f:c5:2c:76:75:70:7c:0e:75:90:5f:b3:af:39:
6b:1a:57:df:21:87:1b:36:05:1f:ba:f8:9b:e5:02:41:1d:35:
66:b3:0e:75:03:0d:74:fc:a0:1b:dd:1c:c5:8b:f3:f7:e9:2f:
26:78:f7:d3:c8:72:46:93:bf:61:03:b6:02:c4:f2:3d:4e:01:
2f:d1:85:93:2d:4d:ad:d8:6e:f0:71:57:ad:fa:aa:56:e6:f1:
1a:1b:c7:80:1c:05:50:7f:44:0b:c8:4c:70:49:dc:3a:8f:be:
da:de:ed:a6:ec:65:93:17:91:a9:be:f8:34:30:33:e4:60:09:
b6:b6:7f:72:0c:af:ab:74:7f:42:a9:14:29:a0:e3:ca:a8:9d:
9a:31:78:10:08:f6:51:da:a5:fa:26:74:fd:5a:c0:ae:2e:47:
31:0e:48:19:d5:db:cd:ef:88:45:e5:d5:0b:4d:32:86:5c:69:
55:74:3d:37:49:ff:69:7b:11:8e:57:d4:bf:d2:a9:f3:27:4a:
78:00:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:20 2026 by rpki-client