Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: 2jvq7neDHzrTJ+ayoGMjL5CvXf4HID5ZYu0bAiYxans=
Subject key identifier: 7A:07:C9:19:82:2A:83:EB:0E:F9:1A:72:A9:E5:A6:A3:8A:5C:D7:6C
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 019D390A0476F9C35F4D3478706557B29D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0BD6
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: 0P7uN4tvEIayKbjzLDxjuMY6fB4.roa (hash: D76OIMLLfFy5FtZGfX5Tk3VMAoafB+zBwfrTHH9d6Ao=)
2: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: E41+wW4/xUl1iYJEGlbehab+EULyXvF9z5IyBtUmK0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:04:76:f9:c3:5f:4d:34:78:70:65:57:b2:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=7a07c919822a83eb0ef91a72a9e5a6a38a5cd76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:f0:1f:6b:91:a8:eb:d3:20:5a:87:8a:ff:
3e:18:b8:fd:e6:ed:bc:84:19:6f:da:51:49:d9:65:
49:d0:08:5e:c2:d0:96:cd:5d:8e:9e:64:38:13:6a:
0d:47:f1:72:07:b3:cf:ce:fa:bd:a3:32:61:4c:ff:
7b:de:de:6e:ed:74:ac:5b:b8:1a:fb:8b:a3:ed:c7:
18:1d:de:db:f0:30:89:c6:af:e7:ba:69:0f:7c:93:
fa:e5:a7:35:3e:0d:1d:1d:2e:5f:d9:59:c8:00:a4:
78:eb:c7:15:ba:2d:0a:3b:ac:60:5d:5b:25:3e:58:
a2:f5:e0:8b:c9:76:17:52:d4:65:b1:5a:6a:65:6c:
04:21:a1:0b:1e:63:d7:0d:2c:33:f4:b7:f5:97:e5:
a5:a4:01:4e:f6:69:bf:9e:a4:fa:0f:cf:41:56:9f:
d2:fc:73:de:d8:23:45:f2:cd:f5:12:56:bb:09:58:
fa:05:78:53:f4:e1:d5:f9:aa:83:80:d9:86:49:63:
e5:3d:8f:8c:e9:b5:89:bf:86:5a:4e:2c:45:1f:ab:
30:60:64:d5:c0:e1:f6:69:69:1f:d8:43:fc:22:46:
f5:61:84:1d:13:7c:9e:75:a1:6b:1b:31:ad:71:f5:
49:b6:16:68:a5:ba:b2:71:c4:eb:21:d2:01:35:c9:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:07:C9:19:82:2A:83:EB:0E:F9:1A:72:A9:E5:A6:A3:8A:5C:D7:6C
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5d:69:74:ec:8f:36:1d:79:6e:f2:4f:25:2e:b8:f5:72:69:
26:c0:e9:70:8a:78:e7:30:2d:04:7c:4d:53:94:3f:ae:02:b4:
bf:fd:0b:93:d2:ab:a8:70:0e:31:9f:73:a3:8e:fb:38:b5:62:
bf:1c:04:20:e6:a3:3b:00:9d:67:0e:7b:14:be:2f:12:a0:c4:
fb:e3:3c:2b:75:4a:63:8c:4e:1a:7b:88:4e:36:53:aa:22:2e:
fe:a7:d2:62:27:2b:ca:5b:6a:72:9c:4e:58:5c:09:55:bd:90:
b3:b0:85:fa:af:f2:34:9e:25:3b:74:4a:3f:59:dc:43:ec:a5:
25:65:58:b4:24:e5:bc:97:07:38:37:17:c4:b0:4e:cf:96:7b:
2b:39:3e:12:a8:56:4f:d7:68:cd:68:bf:30:45:2f:f0:82:0b:
43:4c:73:0c:b4:41:88:c2:7a:db:f8:49:71:4c:f1:8a:b5:58:
b4:39:09:8c:63:49:d9:1c:91:47:2c:13:b7:6b:23:88:1a:9b:
e2:b8:6b:20:79:b7:c1:f2:1c:a7:94:6e:a3:2e:81:0d:4f:ee:
13:e8:09:1d:f2:05:cb:31:b9:03:11:ae:b0:0c:a4:d7:78:6e:
1d:59:c5:b7:e1:81:7f:2b:7b:9a:b6:61:38:34:ba:8c:56:b3:
60:a6:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:10 2026 by rpki-client