Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: rB2+8g6zCWDUsbUaJeXWiZHFRgPnYY7IpsmgThpU1Jw=
Subject key identifier: EF:66:A7:9F:9C:CC:25:0D:BD:F6:14:38:59:5F:D3:E0:F1:D0:3B:C8
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 019D371B4CFC5FCEEF8F01FF07A0ED778FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=)
2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: w72PGmdFRwOFWF+mBuxEJm023Z/ur6aKxnqkQEmp0UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4c:fc:5f:ce:ef:8f:01:ff:07:a0:ed:77:8f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=ef66a79f9ccc250dbdf61438595fd3e0f1d03bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:a1:e6:ee:f6:d7:c4:86:20:55:45:f4:c1:
ec:32:95:ad:3e:d8:64:ae:10:a2:77:70:69:dd:e4:
58:7d:30:2e:90:4f:6a:eb:95:a0:71:0a:7b:e5:f4:
99:2e:e7:68:59:58:44:36:d6:2f:af:fe:ef:71:8a:
b7:28:31:bc:38:66:e3:7a:0f:6a:0f:a0:4d:dd:69:
df:b1:55:4f:19:bd:32:9f:fe:54:cb:14:20:22:2b:
f9:ea:6f:8c:24:a6:67:74:e0:27:17:0c:50:98:b0:
e4:d3:f7:0b:4f:14:1f:70:68:3f:c9:6b:95:6d:07:
3b:56:3f:63:40:ac:f4:90:4c:99:53:d1:29:3a:bf:
34:10:8a:5f:76:97:2c:ab:d7:d0:98:57:d6:5e:eb:
26:65:77:41:3b:a1:a9:dd:e7:e8:b6:c4:5b:8a:ca:
48:17:48:96:1c:2e:a3:ad:64:e8:f9:c2:14:05:e7:
5c:81:9f:90:d1:e7:75:0f:7a:d5:cf:77:f9:70:1e:
86:1d:9f:62:6e:4b:be:7e:d1:f4:b5:30:26:ae:82:
2b:fb:82:22:53:a0:1f:28:aa:28:7d:ef:5f:d0:fc:
b1:d5:37:29:68:da:41:58:ea:11:b9:dd:88:ff:a2:
f1:74:b6:fa:d9:1c:d9:ca:3a:9a:35:89:5e:3d:98:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:A7:9F:9C:CC:25:0D:BD:F6:14:38:59:5F:D3:E0:F1:D0:3B:C8
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:60:f5:af:05:17:ae:fa:3d:ac:a5:31:a2:c4:36:85:a4:
6e:67:3c:45:dd:0c:93:98:3b:89:f4:12:70:21:d0:5a:b9:6b:
b5:e3:6d:60:2a:f6:cc:e4:f8:7e:cc:06:c0:df:09:39:26:e9:
56:1e:e0:fb:f4:0e:44:a6:f5:e1:5b:44:09:10:86:27:27:b9:
77:dd:76:89:1d:ed:54:aa:9a:31:f3:ae:d1:f7:c9:78:2e:74:
3f:91:07:ab:62:81:b7:37:23:a9:76:39:aa:58:82:f6:fd:a0:
27:5c:40:26:bb:e0:95:a6:17:66:9a:df:c4:67:ad:cf:ed:9b:
89:a5:0e:94:e9:18:35:fd:d4:d5:4e:65:c3:f9:8d:67:79:a9:
47:6c:fb:7b:69:10:ae:6b:83:5a:ec:5c:57:7d:a7:51:28:03:
3f:aa:9f:bf:62:6b:6a:04:08:31:b9:60:bd:24:ec:b4:84:e5:
34:98:da:54:38:4d:02:10:c6:2e:7d:90:0b:cc:0e:22:be:7a:
2d:76:bf:75:31:fd:61:aa:5e:08:24:4b:47:42:e4:62:d5:73:
2c:da:e4:38:13:e4:18:33:61:f4:0d:f9:34:46:10:19:35:55:
ea:b2:1e:e1:42:70:0e:9f:96:12:8a:03:b5:c3:e1:6d:b4:2a:
b8:e4:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client