Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: IbJlxycNRM1gVHjJfu/Qqe4Za74Pv9FqcpbHrbB2Pfo=
Subject key identifier: E2:68:DA:D6:DB:7E:8B:51:A2:C7:5F:31:72:17:E3:C3:39:5D:0D:DD
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019D3866552E0A1CE217D898A2551D0F4646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 082B
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: pnPDHC2KzDifeazEhNJ0Dtxx8S+r3+fQb38yK9uhzf0=)
3: wDaukqq7DBMLY3tz0NlY1IroUx0.roa (hash: 3J9MoAyfecCeK4hgjY1lICytZk6haCoZrI0pumvGF1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:55:2e:0a:1c:e2:17:d8:98:a2:55:1d:0f:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=e268dad6db7e8b51a2c75f317217e3c3395d0ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:3d:f5:b3:a2:08:30:9d:5a:98:c1:16:e5:
d2:6e:e8:67:82:1d:ad:fc:ac:b2:84:b5:5a:c3:d5:
64:49:47:5f:dc:1e:a4:d7:4b:d8:b4:e8:59:c2:03:
74:33:60:69:ab:12:dd:f1:f2:fb:e8:34:0e:f4:5f:
c6:ea:b2:05:33:a5:3a:72:7c:d1:b5:a2:5c:e5:a3:
eb:2b:39:8c:02:ae:3a:ee:31:de:44:ed:16:27:9b:
b0:27:67:58:60:67:56:63:6f:35:24:fa:a9:22:b9:
78:b6:69:b3:e5:22:7a:6b:65:d5:55:36:59:49:bf:
b1:51:25:91:a8:6d:b2:d4:5e:4d:ac:21:a9:dd:4d:
77:28:3f:68:4a:b1:c0:43:48:57:e6:c9:3b:86:43:
a0:e2:12:4b:85:2b:a4:10:0a:e6:71:d9:4e:2e:44:
ce:0b:cc:62:dc:e9:1e:76:9a:63:88:ee:5d:44:ea:
52:7e:c8:1f:9c:ef:78:f2:f7:ef:a1:6e:0b:14:57:
6d:2a:eb:48:b0:f5:18:03:67:e0:de:4f:ff:e5:2c:
05:8a:c8:cd:b3:86:53:40:b9:3d:62:55:7e:27:df:
fb:f3:53:58:03:cf:c2:68:c4:91:58:da:2b:a5:78:
51:fc:04:88:9c:97:40:78:c7:76:c5:50:b0:8f:40:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:DA:D6:DB:7E:8B:51:A2:C7:5F:31:72:17:E3:C3:39:5D:0D:DD
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:8e:cf:d7:e6:83:43:21:38:53:51:9b:c8:63:86:c7:9e:
f9:d5:0a:ed:15:fc:97:75:f4:51:00:b6:de:93:e6:ad:d2:a1:
28:8b:ec:b0:10:ce:5e:51:7e:29:66:3e:d3:2a:8e:3d:a2:d2:
a5:c6:cc:da:7e:f5:f9:e1:91:11:e0:1c:a8:57:4e:a7:10:19:
9c:f6:c0:3b:34:23:be:85:0a:31:0b:5a:aa:5e:97:b1:4a:52:
16:92:16:07:fa:5a:c6:9d:04:0d:ca:fd:35:a2:0d:e1:74:fa:
e0:e8:5f:da:35:cf:e2:dd:e4:6c:65:8f:77:0f:6e:32:9c:41:
bd:5b:83:ba:6e:bc:c2:5a:97:cd:4f:8a:cf:8f:18:f7:ea:33:
4b:c3:01:cb:07:65:9f:b9:54:d8:c0:54:f8:58:59:7a:59:86:
23:36:d6:4a:e4:5a:96:62:87:3d:f5:dc:79:36:24:fa:07:cd:
d5:12:99:78:e9:79:cf:fd:25:3d:ae:86:05:06:16:59:f3:2f:
a5:60:ac:9b:3b:f0:79:8a:54:b6:ac:32:43:be:85:f7:1c:8c:
b9:52:2d:81:35:a2:56:24:e4:ec:44:7c:c6:6b:ff:79:ce:7e:
7d:c4:23:86:83:3d:a1:3d:35:8e:b4:b4:b9:45:ed:7d:76:f3:
a0:67:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:59 2026 by rpki-client