Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: xHVtuHP/xQ6j9OVKmBOxm5U/m7E1M0gGhDW/zfAmBrQ=
Subject key identifier: 51:7A:E0:9D:BE:C9:5A:A7:6A:D4:A4:DC:3B:C3:EA:24:46:CE:25:07
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019D386622FAE3636EB3EB5192371C3F5D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: GOSw37CdgLKeIKbJScsqY_9Dr2w.roa (hash: ZvDfQJkz45jdazcjaKmxmDgrWuHDPZ2kpxNBxgEv1Uw=)
2: y8_LNgwxUbTo2kYfyXrTJhM5aoA.roa (hash: 5zjlPGmjTWA8lGnzMm1Kk7Dl2qi8X7Yn0O8wDBpdII4=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: jaab4zczmvd8rnrdqeGzfl+Qf7x5V8k2Xe4K7zs9iEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:fa:e3:63:6e:b3:eb:51:92:37:1c:3f:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=517ae09dbec95aa76ad4a4dc3bc3ea2446ce2507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:10:ed:d0:67:5b:b0:8c:15:d5:63:fb:d3:
53:5d:cf:1f:5c:c0:dd:a9:94:a1:0b:02:fa:17:35:
f4:ac:ce:21:c2:48:7b:d2:af:3e:14:69:0a:97:41:
9f:18:ec:4f:14:6b:f3:0c:fc:dd:18:e0:85:10:27:
36:c6:1c:a8:bc:48:53:fa:90:ab:f6:1b:94:e2:e0:
a7:71:cc:59:b1:24:35:ed:c6:1a:28:cf:c1:23:84:
00:39:d9:a1:b7:01:ff:dd:29:c0:1f:11:d3:32:f0:
c4:6f:a8:9d:8f:71:15:ed:50:ba:f8:20:d0:2c:c2:
9b:77:76:80:54:47:34:e2:e3:79:93:ca:f9:8f:9e:
50:6d:01:a2:19:c2:32:a8:c9:83:8c:41:d3:83:ee:
26:18:a2:05:a4:e6:cd:3a:d2:94:7e:ec:aa:34:d2:
8f:a7:66:1c:2d:40:33:fb:43:8d:fc:27:3a:d2:a8:
6f:33:2e:a4:d2:0b:19:e8:71:3b:c9:87:b4:13:3e:
7e:78:dc:0e:2e:f3:71:be:2a:d5:73:36:f3:93:ef:
82:5e:0e:81:18:fb:7f:45:43:8b:fc:96:0b:dc:0c:
ba:74:16:f1:9f:30:21:b7:71:f4:69:b9:fb:26:66:
86:ed:78:14:ea:2a:8a:36:f6:b7:6c:39:09:92:47:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:E0:9D:BE:C9:5A:A7:6A:D4:A4:DC:3B:C3:EA:24:46:CE:25:07
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3c:bf:a3:85:49:9e:c4:89:3c:c9:31:5d:99:e3:e0:7e:59:
d9:bc:78:92:fe:58:a2:23:61:f6:21:73:6f:6b:1f:6e:70:9c:
e8:bf:9e:2a:ef:a4:1e:4a:f1:33:9b:17:c1:59:41:be:57:76:
b1:07:33:aa:07:42:c7:47:29:f3:22:48:dd:26:ba:b3:39:32:
0a:9f:05:90:a4:45:f7:00:b6:08:69:5d:56:1e:9f:09:4a:ab:
a0:3a:eb:f4:35:1a:ac:bc:ff:b2:9d:0e:0d:87:8a:ec:5a:51:
f2:5b:3f:ec:48:04:51:4d:b7:9c:8b:a2:db:37:34:57:3f:c2:
56:91:8b:6d:62:36:65:5c:e8:4a:50:f2:51:07:53:81:e3:0a:
a5:87:4b:de:84:d8:73:12:20:5d:f9:05:b5:e7:1f:d1:28:98:
ae:00:de:18:a0:c3:90:1c:7d:92:ce:37:3c:87:53:52:ac:14:
d2:2e:a5:1b:3b:44:4b:02:99:c3:61:a5:02:04:99:0a:7f:51:
18:bd:73:87:c8:c1:44:a2:29:f0:ae:ff:b3:5f:7b:b7:f8:e4:
a2:db:fe:76:96:fe:8d:9e:23:a5:e3:80:da:2e:88:18:38:8d:
60:ca:bc:7b:10:34:a6:59:e1:04:f8:45:9f:95:1b:9a:90:ee:
7e:8e:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:40 2026 by rpki-client