Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: fsUUqBYLkNPeZ+LuQCu8HFrNm4HOudiZbmifLQcd8rY=
Subject key identifier: F0:E2:8C:28:24:B0:61:2A:8A:3B:D4:48:A6:B1:F5:1D:31:99:DF:40
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 019D37896EABB1BE59F496D80F224510F926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0EEB
Signing time: Sun 29 Mar 2026 03:00:46 +0000
Manifest this update: Sun 29 Mar 2026 03:00:46 +0000
Manifest next update: Mon 30 Mar 2026 03:00:46 +0000
Files and hashes: 1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: Q/V/7ZOFq0s5yzDN5h5DrIHWCFiRQtG2KG8vNXZzMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6e:ab:b1:be:59:f4:96:d8:0f:22:45:10:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Mar 29 03:00:46 2026 GMT
Not After : Mar 30 03:00:46 2026 GMT
Subject: CN=f0e28c2824b0612a8a3bd448a6b1f51d3199df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:f6:fa:7b:7b:44:c9:d8:79:ab:ed:f9:77:
82:3d:88:9a:65:2e:f6:77:bb:78:c7:6b:d7:aa:3d:
fa:45:65:25:44:5d:71:77:b2:2a:f4:7c:cb:42:17:
09:27:56:87:c5:27:1b:4f:28:43:2e:c4:17:55:38:
8b:57:61:31:f3:2e:2c:28:28:12:6a:41:a4:64:ae:
ca:fc:dc:44:cc:44:73:51:4a:b5:20:88:21:74:41:
65:f9:66:46:e3:a3:69:69:56:97:dd:c3:49:c1:55:
16:c6:4c:6f:2d:16:e5:81:69:d3:64:f0:a5:56:2b:
c3:a9:a7:a2:80:bd:d3:78:a4:37:38:60:89:28:bc:
79:fb:cb:09:85:e6:3d:32:f7:40:5c:4e:22:3f:8b:
31:c3:29:30:a9:30:b6:07:26:43:b2:c6:6c:dc:ab:
63:c4:92:17:72:e2:d3:e0:28:23:50:28:70:31:8d:
4c:7c:f8:0a:c7:76:b3:4a:c7:53:9c:33:51:30:7d:
1d:ff:67:f5:ea:65:41:9d:8e:38:65:41:59:d2:09:
bb:ff:1a:d9:16:c1:1c:96:3b:92:fc:e7:f1:ae:cd:
0b:b4:f5:05:c5:25:2b:01:aa:31:68:76:c3:5d:75:
c2:65:ed:fd:d5:24:1a:83:de:8e:68:a1:e2:bf:5d:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:8C:28:24:B0:61:2A:8A:3B:D4:48:A6:B1:F5:1D:31:99:DF:40
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:f0:e5:fe:67:09:6d:78:d5:f2:58:02:3f:a0:1c:e5:22:
d7:b4:c7:8f:91:05:e5:0f:d7:b8:6d:29:53:2d:6f:46:6d:92:
4e:a0:da:b3:b6:f8:82:f0:e0:43:81:00:05:17:49:ab:8a:08:
63:d9:4c:9b:df:22:83:5a:67:71:cb:f5:44:57:45:64:dd:04:
aa:8a:c8:f2:d3:15:78:0a:13:89:96:dc:43:3b:62:50:45:b5:
82:ec:a1:a7:5e:76:c1:ce:23:c6:d3:6d:97:9f:a8:dc:8a:3b:
8b:c4:a1:dc:58:d3:bd:c6:21:1d:ea:2c:7a:9f:73:bc:a7:89:
37:c7:f6:34:35:7e:75:b0:54:fd:7c:ea:33:f3:e8:30:be:a9:
f5:bb:b0:02:9e:2b:3f:a8:cc:99:12:52:cb:c4:b2:85:bd:2e:
85:4f:6a:d0:a3:24:59:15:bb:45:10:26:56:90:b8:f7:df:fa:
6e:0c:25:2f:5f:de:72:a1:14:e6:7e:d5:88:42:46:36:4a:44:
ca:f5:b0:cc:98:e2:a3:bb:22:d1:9c:0f:16:36:d6:5e:72:ad:
1f:86:c9:d9:e3:46:70:04:75:a4:60:5f:6b:d8:21:d4:89:1f:
7b:7f:5e:07:da:ff:8c:9a:06:20:13:57:c1:96:53:25:e8:66:
28:c0:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:07 2026 by rpki-client