Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: FzY8TJ6PYlczBPBhbRTNywQQuMQKKh/28iUklSBQNPU=
Subject key identifier: 58:8D:D1:7E:62:F0:06:69:F4:62:BA:D4:8C:F9:50:95:CB:50:5E:BA
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 019D39AF14048F74FC3CCCCB48B4E70DA9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: yaqo8LDQPQoF7zwuJudZR37jOlxXou70pW38JDPv3i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:14:04:8f:74:fc:3c:cc:cb:48:b4:e7:0d:a9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=588dd17e62f00669f462bad48cf95095cb505eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:a5:78:6c:2f:62:93:ac:8c:4a:e6:40:10:
41:01:8a:ec:c4:6e:0d:d9:8c:45:aa:37:f3:c3:67:
5d:f0:59:da:93:16:30:e8:2c:45:24:fe:bf:41:4e:
31:dd:06:14:41:6d:0b:bc:57:61:54:cf:c2:2c:c8:
40:7a:56:eb:1f:43:03:1a:65:8d:63:44:99:e2:d5:
03:c3:c9:37:7a:7a:86:b9:e2:9b:8c:6e:e7:36:70:
67:b7:c9:c2:9a:ef:75:d2:bb:43:67:55:7d:9c:1e:
9d:02:30:bb:31:e8:11:1d:57:b9:9b:ab:f8:a1:d8:
e4:8f:8f:cc:b9:cd:77:91:1d:b3:fa:ac:44:6b:87:
b4:85:4e:89:bc:ed:ad:2b:b4:55:32:53:06:99:70:
3c:d6:ca:e3:12:c8:f3:8f:f5:3f:08:57:93:b7:1f:
89:d4:60:38:62:3d:86:a3:99:d7:bf:79:bc:ce:64:
86:31:ec:ec:99:85:a2:6e:ce:b8:82:7a:6b:37:0d:
3d:3d:d1:0c:ec:06:28:30:b0:16:b8:d1:e0:ba:14:
e5:da:c2:aa:a0:df:e3:6d:7d:6b:3a:1c:b4:53:9d:
96:fd:78:14:f2:13:bb:6a:c1:98:57:13:7e:52:cb:
ef:f4:d7:2c:45:7c:03:ae:45:32:0b:33:db:eb:70:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:D1:7E:62:F0:06:69:F4:62:BA:D4:8C:F9:50:95:CB:50:5E:BA
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:65:a1:06:66:3c:7a:d7:56:44:b9:8c:80:dc:b2:19:7d:55:
b5:f6:1e:59:36:90:b0:40:32:08:e6:4e:7c:67:6a:cc:f8:f5:
c5:3c:51:9b:21:81:04:00:36:3f:2b:d7:46:b4:e8:20:18:4c:
4f:15:4c:45:8b:99:97:92:81:e1:20:60:a7:04:3b:b7:0c:8e:
74:e3:1c:fe:9d:3c:22:bd:27:94:a8:27:ea:1b:3c:65:24:98:
a7:fd:23:cf:a5:65:6b:bf:5a:aa:64:d3:1f:24:63:93:66:d2:
13:37:1c:0c:cd:4c:c4:8f:e3:f1:a5:27:ce:6b:b0:e5:50:c3:
a4:57:e3:58:2f:e7:ad:b5:fc:96:e8:b4:9b:44:9f:7a:0b:d9:
88:2f:32:ce:b3:8b:f2:1e:eb:b2:00:b6:02:1b:1f:65:83:55:
51:a2:ec:f8:b5:74:c4:5b:b8:ff:9d:ed:0a:87:e0:c9:95:36:
90:3d:79:23:10:ec:d7:3d:48:f0:43:3d:c1:66:50:79:6c:08:
1d:1b:5a:cd:57:c1:19:12:7d:6c:38:78:da:88:0d:cd:37:58:
c2:2f:05:7b:b4:80:0b:7a:95:e0:46:8e:66:cc:d3:3f:5a:29:
ab:f8:d8:dc:d7:86:f1:d9:17:5d:a1:83:28:bd:fc:fd:6e:22:
d7:21:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:27 2026 by rpki-client