Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: Tv8amEXmdNM9ARoVS2IOhpagTXEyhPCi9Roj7wF9H5I=
Subject key identifier: BF:73:7E:79:15:E2:F2:EF:F9:F2:21:B2:2F:03:30:B9:5C:1D:0A:8C
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019D38D2F673998D715ED9FF402F5DEB97EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0787
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: p624k1hmfObPQbde2wwXjmTMqzmRywu0g6v5uYzi5Vw=)
2: gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa (hash: jC0EOd0XvL5sRKBgmxuZafhPeS0sVcqw+4cs49iJ+mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f6:73:99:8d:71:5e:d9:ff:40:2f:5d:eb:97:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=bf737e7915e2f2eff9f221b22f0330b95c1d0a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:d0:2e:58:da:63:d2:21:b8:0f:99:ce:5a:
94:87:25:9a:05:a1:16:28:62:50:39:44:a5:f6:72:
4d:7d:8a:45:4c:fe:cc:20:79:3f:87:1a:61:ea:ba:
c1:db:6b:ef:c6:25:84:0e:30:b9:f1:b6:50:16:f6:
2e:71:4a:24:b6:64:24:ee:d8:e9:35:ff:17:69:d9:
87:67:5c:60:8a:02:81:57:52:3d:8b:28:73:de:15:
54:1d:ad:52:84:66:02:8b:de:db:17:ea:c1:0e:ff:
f4:51:f8:0e:2e:a3:24:1b:a0:5a:d6:80:fa:c3:ec:
c5:0c:b4:31:c6:0e:b4:e8:d9:26:b2:ea:e7:6f:eb:
f7:ce:5c:ea:87:27:aa:df:a3:08:aa:b8:20:5d:0d:
dc:d2:15:73:d5:96:73:92:61:cc:90:db:10:20:5b:
f2:84:49:25:cb:d6:cf:2b:b3:e2:b9:b8:d4:fc:62:
e2:46:b5:67:09:74:44:04:6a:13:76:49:cd:5b:97:
6b:6a:f5:0d:b8:2a:c4:ba:0c:30:3b:12:47:ea:c6:
ff:5d:fd:40:a1:07:c3:29:1a:da:68:16:c9:2a:91:
f4:20:85:ef:da:c6:2f:72:ed:1e:2e:04:36:08:6b:
85:78:ee:2c:91:94:f7:1f:b2:7d:a4:18:5c:11:35:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:7E:79:15:E2:F2:EF:F9:F2:21:B2:2F:03:30:B9:5C:1D:0A:8C
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:71:69:99:a5:9d:be:e7:7a:2a:dc:78:c1:6f:a4:c3:1f:
8f:42:aa:21:ea:8d:f0:8c:30:51:c1:88:fc:15:87:b6:0e:c2:
83:22:66:d2:74:54:58:ce:eb:6e:10:9e:67:65:c5:cf:46:46:
16:9e:3c:ce:83:e8:8c:f0:8c:0f:11:e4:35:4e:7f:ef:f8:3f:
4f:53:ea:cb:92:a7:b0:7b:6f:cb:70:62:86:98:c0:91:54:c3:
96:cc:4f:22:42:3f:0b:b2:e1:38:65:2b:27:5f:dc:7d:7e:ff:
fc:a2:a0:ed:7f:48:86:82:29:5c:8a:07:ba:6c:7c:a1:fa:55:
76:6d:81:ea:3c:e1:33:cb:a5:84:ea:6b:fd:fe:1f:a0:59:83:
76:d0:e7:7d:9c:03:ad:2b:5b:74:d7:a1:b1:07:4e:16:63:08:
b7:2e:7e:1a:ad:91:61:3b:ff:48:23:24:2d:84:78:61:26:24:
1c:a5:a2:37:3f:b1:81:e0:1d:9f:c5:d0:bc:86:ad:03:2b:84:
b9:25:9a:5e:4b:a9:a4:a1:c7:e8:58:e5:e5:54:80:ff:00:87:
00:72:29:53:33:f1:b8:58:95:fb:6e:3e:01:14:ce:c9:a6:f2:
09:7e:da:35:23:59:04:6d:ea:2e:57:96:4c:a1:e1:87:43:3e:
a4:15:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:13 2026 by rpki-client