Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: 1ThzrC59FpRabBlelvQICvtZvozrpdg6ZQjERR/ZkLE=
Subject key identifier: 9F:E5:07:1C:EC:EE:19:59:4D:88:05:A2:35:2C:F3:5A:E3:D7:9C:12
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 019CE590FFE472EE80E3756E251D61D302FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 05:00:10 +0000
Manifest this update: Fri 13 Mar 2026 05:00:10 +0000
Manifest next update: Sat 14 Mar 2026 05:00:10 +0000
Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=)
2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=)
3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: Vgo3P55fTI9pLttQLtaiD60yommUtjaMScE3n9Cdg9M=)
4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:90:ff:e4:72:ee:80:e3:75:6e:25:1d:61:d3:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Mar 13 05:00:10 2026 GMT
Not After : Mar 14 05:00:10 2026 GMT
Subject: CN=9fe5071cecee19594d8805a2352cf35ae3d79c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:1b:6c:a3:be:73:26:8b:6c:3d:c3:16:a7:
05:a5:50:6a:7f:73:92:d0:95:66:29:1e:d6:af:4d:
63:1d:e3:b4:96:14:8c:f1:d6:e5:98:ef:a5:c2:39:
27:ef:fa:69:1f:a9:c0:95:fc:50:af:37:fe:9a:c1:
c5:53:5f:7f:b0:73:a9:2d:71:e4:41:47:55:94:0a:
cf:91:0d:f3:7d:e7:8c:75:7a:af:d9:7b:9b:d7:78:
19:65:ae:e0:ee:a3:97:0c:87:5d:da:f1:76:51:e3:
96:d3:81:78:7c:1d:24:c3:e0:3a:62:a8:e4:13:be:
3a:33:af:a0:4b:ca:6e:38:04:0c:e5:2e:91:f3:65:
b1:36:3e:c9:60:76:4f:00:e7:86:10:e4:2f:87:c7:
3e:c6:93:33:41:3f:88:6b:58:0b:b1:e5:76:6b:65:
aa:ba:2b:42:da:12:6d:64:7a:78:c2:c2:0b:2f:43:
6b:35:a9:ce:54:23:0a:91:d1:13:b2:41:24:50:6b:
f8:9a:fd:53:f0:23:1e:90:66:2c:cb:e0:95:3b:3e:
ac:96:5b:8e:7b:4f:76:25:10:98:25:4f:33:4d:d4:
40:89:98:b5:cf:ca:0d:d1:19:d1:68:f3:23:72:68:
f2:89:69:20:89:2e:54:f7:1d:e1:e2:bd:cb:13:ed:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:07:1C:EC:EE:19:59:4D:88:05:A2:35:2C:F3:5A:E3:D7:9C:12
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:40:80:33:25:a6:5f:b6:94:04:3f:14:96:d4:fe:06:f9:
b1:1c:73:09:62:c7:37:b5:4d:46:de:24:1e:c6:ba:88:5c:a2:
57:37:f3:b3:43:30:42:96:c4:07:8f:07:71:8d:83:6a:99:cd:
03:65:ee:6c:fa:06:fe:7a:e5:1c:fe:8c:05:e4:f7:4d:c2:df:
5d:71:ae:fe:f3:53:37:35:68:a6:8f:15:36:08:c4:68:19:0a:
94:2b:a6:0f:90:0a:92:87:fc:89:d7:f5:52:fe:bd:06:26:24:
2b:4d:07:0b:1e:eb:52:82:d5:49:d8:d1:fb:37:8b:d1:f3:20:
d6:c9:32:5b:a2:c6:42:58:ba:08:6c:a1:57:0a:56:90:48:97:
b2:37:fa:61:f9:05:6e:ba:83:af:82:ae:24:9a:03:1a:26:49:
ba:84:a3:4b:3f:b8:cd:c7:36:6b:4d:fc:e5:d0:1c:80:b4:f0:
03:2b:eb:78:81:f9:a8:86:f7:9f:71:98:c5:4b:30:dd:52:91:
fc:38:e8:9d:26:4e:76:fa:fa:b8:d6:d9:69:80:1b:32:55:03:
88:03:9d:25:fa:7c:01:b9:4b:0c:82:72:88:63:86:a6:af:b5:
b3:ef:2e:f6:78:ed:1c:10:7f:da:f6:5c:2a:a7:de:9e:b5:8a:
5c:56:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:32:34 2026 by rpki-client