Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: b6CgS2rqN7Ks7ZqjeVltHkf/+M84HA8LeRIEfPvkBKk=
Subject key identifier: 4E:FF:BF:39:AA:A7:74:D6:D1:7F:B5:F5:86:E9:13:99:8D:C9:2F:A4
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 019D39AF33757202DDA71081D6985AC68E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 0836
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: PlOkB+7jXry7oGneJ5Am/aKO1nPbQQ2K9UyF+iuXLwU=)
2: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (hash: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:33:75:72:02:dd:a7:10:81:d6:98:5a:c6:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=4effbf39aaa774d6d17fb5f586e913998dc92fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:50:dc:cb:6f:18:86:14:30:41:bb:b8:4a:
eb:92:d1:02:62:af:bd:f2:b5:61:08:37:0a:e9:dd:
a2:39:87:4e:e8:31:65:ea:d2:08:74:c5:83:2c:52:
7c:a3:45:3e:1c:91:1e:19:f9:6d:c4:1f:c7:42:c6:
4b:5e:94:bb:bd:b4:c5:ee:46:e7:40:44:5f:66:6d:
22:17:68:a8:c4:f7:b8:3c:71:90:d6:97:a2:65:05:
0d:cd:9b:3f:3b:8b:56:88:36:8e:e4:6a:a0:36:87:
c8:c6:65:dd:d7:58:5f:cb:d4:74:fb:33:bd:84:6a:
1c:13:a6:31:f0:62:79:4b:7d:0c:7f:c1:61:af:c8:
fc:72:06:26:34:24:9b:cd:79:1d:49:32:78:07:4b:
8b:36:4a:91:08:87:a5:51:27:2b:e6:b7:96:ec:5b:
36:85:1c:14:07:af:56:57:03:8f:9e:70:4a:ac:e1:
03:4b:88:b3:6a:1e:0e:0a:12:38:62:90:d3:cb:2a:
3f:c7:92:bc:e9:16:fe:14:d0:c6:1a:59:93:0d:d0:
b9:95:ea:20:2b:9d:bd:80:af:39:77:ca:91:c3:93:
d8:47:20:c4:d0:d9:88:39:24:66:57:e2:08:e0:85:
d0:d9:ee:ce:31:92:01:53:8b:97:6e:74:a9:5a:9d:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:BF:39:AA:A7:74:D6:D1:7F:B5:F5:86:E9:13:99:8D:C9:2F:A4
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:66:34:37:5f:ec:ce:fe:1c:39:10:d4:f9:86:71:ea:cd:e8:
ee:99:ae:c1:de:20:1c:73:62:79:31:b8:46:cc:32:e9:22:d8:
b3:f8:50:5c:eb:57:57:7c:42:88:9f:42:ec:2e:23:78:a6:4d:
52:ad:05:9a:ac:83:61:28:67:a4:af:36:05:ed:86:3b:5a:08:
79:4e:9b:03:82:21:3d:b6:76:e3:96:37:c5:26:80:80:90:ed:
6b:89:b6:8f:71:e5:b6:3a:4d:96:35:8f:ca:be:76:cf:28:c4:
75:97:15:72:f3:75:f9:47:8d:63:a1:df:b6:2f:22:5e:31:2e:
73:8f:0b:4a:bc:a2:5d:0b:c5:55:6e:4c:9c:be:2c:3f:df:75:
46:5c:6c:2c:6c:10:26:0d:d5:4b:c7:a8:f7:b9:04:dd:63:3f:
16:15:7c:dd:37:82:c3:74:af:b9:37:37:6b:ac:5e:53:1b:1b:
df:06:59:b0:53:81:8c:da:71:1f:12:28:f7:a6:63:11:89:d7:
03:88:bf:e3:f9:1b:47:90:50:5e:8f:50:64:0a:8f:b2:a7:45:
8c:f6:fa:a8:32:e1:cd:06:20:76:bc:f3:d8:ff:6d:42:18:2e:
f3:87:b8:3b:05:f9:6a:44:37:fb:53:fa:10:66:d9:f9:3f:76:
78:64:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:04 2026 by rpki-client