Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: giQvKLVu4Zrjmn7g5s/bXIYbskzqDPvlJnCH7gZRNiM=
Subject key identifier: C9:CA:CC:D7:FE:0E:0D:05:F4:A1:1D:BD:AE:C7:E8:39:9D:1E:50:5A
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019D3941A7759756348233B276B632BBFF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 05FB
Signing time: Sun 29 Mar 2026 11:01:37 +0000
Manifest this update: Sun 29 Mar 2026 11:01:37 +0000
Manifest next update: Mon 30 Mar 2026 11:01:37 +0000
Files and hashes: 1: iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa (hash: JNPz+DPVRJ+TisUyQ98oWlbI8xfnbWF+8FcFXp7EsvY=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: wyNRlMqd6GDkpiAe8JZegpfizmzHZ9iDbZSGjnuDVzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a7:75:97:56:34:82:33:b2:76:b6:32:bb:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Mar 29 11:01:37 2026 GMT
Not After : Mar 30 11:01:37 2026 GMT
Subject: CN=c9caccd7fe0e0d05f4a11dbdaec7e8399d1e505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:c2:8b:f4:d1:8c:49:68:69:17:0c:b3:36:
0f:4d:af:2c:c5:9f:fe:48:b8:83:ca:b7:97:2a:3a:
33:03:36:f3:2a:d4:99:5d:a3:c2:09:b0:fb:49:8d:
d2:38:d5:71:af:58:a9:8f:2c:30:bd:5e:42:d3:17:
8f:37:b1:21:c7:9c:37:7c:23:15:c6:bf:54:2b:e6:
fb:9e:70:68:b4:c8:29:fe:b5:b2:90:a6:e7:b8:96:
11:6f:e7:48:79:ea:19:28:34:02:83:7e:94:ef:66:
44:68:6a:79:f5:b0:54:46:fa:c7:32:80:1f:8b:7d:
a2:3a:91:b3:9d:51:bd:8f:b3:f0:cd:6a:7d:88:76:
19:06:00:db:5f:f0:33:1d:6c:3a:f6:35:59:8a:47:
f2:d9:24:ac:bb:4a:da:e3:bd:4f:99:78:88:d0:74:
2b:97:81:13:fb:00:34:5e:4e:e8:3e:61:c3:0e:eb:
72:b2:8d:4a:44:e4:20:6d:44:49:74:99:4b:36:2e:
4d:8a:a8:2e:59:4f:c6:7a:27:ac:32:f7:6a:8f:51:
c1:54:43:aa:b0:15:31:ef:05:e7:7b:b2:8a:16:36:
90:cc:fd:90:a8:9f:3b:9d:4d:3c:6d:41:bd:67:26:
51:88:fc:5a:6b:c5:9e:8d:bb:50:e3:7c:92:0c:16:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:CC:D7:FE:0E:0D:05:F4:A1:1D:BD:AE:C7:E8:39:9D:1E:50:5A
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bd:9b:21:ca:a5:94:2b:8e:62:9e:b3:75:47:8a:6f:b7:9e:
cc:0d:db:1f:42:31:c9:d8:ee:42:52:0d:14:13:66:c5:9b:43:
57:c4:c3:a3:69:23:f8:9a:ee:8e:da:33:74:62:63:3a:12:19:
f0:43:e0:b3:77:01:89:02:2a:a4:1b:91:80:29:f2:c5:e8:83:
c9:40:3c:ac:45:b1:de:bd:5e:eb:51:99:b4:8d:19:45:84:28:
25:bb:41:7c:c9:f4:93:11:83:55:29:64:66:bc:7b:3e:6d:c7:
67:f1:88:0b:b1:49:51:cb:94:00:65:08:76:86:96:30:11:df:
74:7a:95:01:b3:ae:74:da:77:d4:5a:2f:31:39:c0:b9:6c:a1:
b5:47:70:ff:38:7b:57:ea:67:9d:e3:2d:d0:6a:af:05:92:a0:
a7:32:82:40:72:48:2a:1d:60:54:c5:35:ce:ed:59:f6:3e:1e:
c7:24:b0:76:ad:09:24:77:03:0f:cb:8a:24:69:f4:0d:ef:31:
fe:47:9f:c3:fa:e3:39:ac:10:6a:7e:23:31:91:0a:81:93:fc:
ab:37:a5:d8:8e:03:b2:ae:46:7e:e3:f4:a1:4e:83:a4:7a:13:
40:6e:5b:26:a5:70:fb:f9:6b:41:73:e3:8b:88:d5:44:ab:52:
6b:03:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:46 2026 by rpki-client