Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: CofIjBSJRzcx+q+MSXjAFtmqgxvWH3d8uOM9GGhkN7E=
Subject key identifier: 7B:47:AF:FE:E9:78:C6:39:81:BF:05:42:36:72:E4:CD:9C:1D:A1:DE
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019D389BBA1F00E2CB0590F7C95DBC3A76E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 154A
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: SYIf5Ik-OCMwc9Pf810Yroa_ZFU.roa (hash: 74Uxyj72SuLbr2jaxa3pXrDIfqGb08WX3YcRqaMlrGk=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: qM4g6kt+ZaSFzigy536Msp0baaUM0ypp/AtgAUg4thk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ba:1f:00:e2:cb:05:90:f7:c9:5d:bc:3a:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=7b47affee978c63981bf05423672e4cd9c1da1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:c0:14:3a:06:1c:da:fa:71:f7:31:c6:a5:
87:a3:5f:98:6a:78:d1:ee:af:28:34:14:9b:18:e8:
14:76:25:83:48:3e:ae:3b:78:cf:93:f0:c7:47:16:
4f:2e:40:0d:de:9f:71:35:98:ff:74:a6:13:cc:36:
4a:61:d3:5b:03:d4:69:42:48:ac:14:65:31:0f:52:
d3:ee:92:1d:0c:be:4f:0a:31:7b:05:d0:3b:81:37:
7a:b3:e8:4f:6b:37:a9:09:98:f4:40:7f:ad:41:30:
19:56:f2:f2:22:1f:36:0e:63:e2:03:6b:4e:c4:19:
fb:ae:4b:50:f5:5c:f2:e7:e0:ca:9f:e6:f3:b2:bd:
ed:9c:dd:0f:f4:1f:50:8e:72:b5:78:0b:a9:96:10:
12:76:9b:a2:8f:7a:4d:0b:57:31:42:ff:6f:a8:de:
bd:af:f8:65:6d:85:ae:eb:d8:1b:c1:a2:dc:2b:ac:
4d:95:dd:9d:5b:81:78:2e:e2:96:f1:0a:97:0e:b5:
8b:ab:5c:8d:b2:c4:54:0f:20:6d:54:a4:c5:c2:28:
b9:b8:4c:e2:cc:f1:10:a5:91:d8:f4:c4:2e:26:6b:
2d:51:95:cb:bd:d8:a2:39:67:10:ab:16:68:e8:07:
75:56:c3:07:47:e8:0f:91:58:d6:d7:6a:49:ed:80:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:AF:FE:E9:78:C6:39:81:BF:05:42:36:72:E4:CD:9C:1D:A1:DE
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:66:0c:71:52:4d:a3:b1:df:79:83:3c:9d:01:7b:40:eb:
4f:74:b0:f1:2c:a7:78:5d:46:17:bc:32:e5:7c:2a:51:73:26:
e5:8d:41:f6:a2:2b:59:bf:a1:e5:14:b8:7e:de:99:f4:74:64:
a3:1a:e3:01:db:0b:9d:58:ed:03:01:eb:fb:b4:48:51:2f:9d:
f6:52:37:d8:a2:85:82:23:7e:2b:5f:cb:25:6c:fa:31:1e:0b:
01:62:20:cf:8b:2d:a4:b9:09:ee:e1:68:61:72:fc:82:84:75:
ab:93:b1:fd:17:a9:d8:94:f5:94:e7:45:d2:49:79:da:f3:d3:
80:31:b3:a7:ae:19:41:6a:95:b5:dd:7e:0e:4a:a0:30:9a:2a:
9d:23:6b:c7:47:e3:48:56:b5:6f:65:5d:bd:5e:cb:13:94:d8:
2d:70:f2:ff:0c:e7:4b:be:5c:9f:c0:ed:0e:5a:32:ba:6f:bd:
6c:b9:2f:74:6c:5e:26:10:e9:9f:6f:87:2a:3f:ff:8d:32:fd:
6b:8b:8a:d0:7f:2f:e2:62:94:15:a2:58:76:ba:12:13:5c:fb:
5b:e5:b6:81:07:6c:ad:f1:dd:bc:d6:a3:a3:11:c2:ff:73:eb:
90:78:b8:d6:82:6c:ee:8a:62:38:0c:6d:d1:89:c9:be:35:79:
75:60:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:12 2026 by rpki-client