Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: MecRmeU14T80M/DTfYTAJkiacvbOHr0zp4+31HFqFbM=
Subject key identifier: 68:CD:AC:1B:91:B3:EB:A8:D6:67:DE:FE:57:E1:83:4F:75:EF:EA:CC
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019D38D33C05A7AF755105316D52CE8CEA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 118C
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: YdxJmJxv0eHOPq4USa1JO92+RDmFPOR7MJd1hXhMgAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3c:05:a7:af:75:51:05:31:6d:52:ce:8c:ea:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=68cdac1b91b3eba8d667defe57e1834f75efeacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:83:36:3a:a5:c7:e0:d9:7e:88:81:ad:c9:
12:99:3f:3e:9c:6c:43:b1:5f:73:dd:a2:40:f3:d1:
66:02:4f:ff:bd:9f:11:a4:40:3b:e2:a9:5a:da:77:
07:52:56:18:a5:09:cf:34:09:cd:f8:a1:55:48:3f:
54:e2:06:33:3c:f3:50:8a:68:1d:8e:ca:57:37:d5:
7c:6e:11:4f:87:5a:32:d7:8d:38:b7:3c:eb:b0:6d:
fc:80:73:91:cf:e1:6c:e5:62:b9:ba:96:7c:ad:99:
68:46:4c:56:d6:d2:2f:e6:65:c1:46:d6:60:67:0a:
cc:bb:58:47:af:f7:60:5e:e8:48:07:fa:8b:db:5c:
72:0c:c3:71:38:aa:67:e1:90:cb:5f:3d:8a:8c:82:
aa:31:ab:dd:c1:d8:a4:87:af:91:71:10:d1:a3:e3:
4b:59:9f:48:0d:ac:85:74:4f:4b:44:8c:77:9d:dc:
bd:a6:e0:31:b3:f1:18:a6:99:8a:b9:30:7e:c9:f6:
c7:82:74:6f:77:8a:0d:d0:6c:fa:2c:1b:fa:16:7c:
65:08:c2:a2:20:37:6a:b3:f9:26:d4:a3:d5:ad:20:
50:6b:75:52:ca:4d:e2:75:4a:ac:a1:30:bb:01:ea:
d5:77:ce:87:ad:3d:21:97:26:f9:c5:11:1a:fc:e7:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:AC:1B:91:B3:EB:A8:D6:67:DE:FE:57:E1:83:4F:75:EF:EA:CC
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:3a:75:85:cc:ee:6c:e5:a0:11:37:4b:c5:d9:53:d9:30:
36:fd:e3:5d:42:cb:0f:39:fb:48:e8:57:99:00:77:62:39:66:
c4:7d:9a:70:4d:64:0d:a5:43:6c:bf:b1:5e:2c:60:39:36:92:
b2:4f:45:80:62:24:52:e6:c5:8d:e1:ed:1e:5a:e0:bd:74:ab:
80:77:44:98:76:77:33:dd:8b:a7:50:2a:00:e2:7b:af:b0:7c:
b5:9f:b3:58:7b:ce:b4:a5:78:c0:99:91:76:c8:d0:ec:89:85:
88:0e:8d:d6:89:0e:ed:ee:5b:99:18:59:49:f1:e8:4b:ae:c2:
56:b2:6d:94:0e:bb:4c:35:9a:cc:89:5c:01:af:cd:ed:ff:e0:
6b:9d:df:5c:4c:db:1f:a2:6b:98:eb:dd:e1:9a:e7:dd:e7:8b:
c2:0f:79:e1:3d:ed:25:0e:06:9a:d7:02:04:54:53:56:31:92:
e9:9f:bd:c0:78:14:5e:c2:5f:cd:b7:b6:a3:b7:54:63:0c:be:
4c:c9:6d:6e:9a:99:5b:e5:5c:be:7f:a6:3a:a0:7f:bf:02:81:
8c:95:9f:62:05:64:fe:09:75:1c:5e:6b:f8:f0:b4:ad:f7:f8:
72:4a:74:6e:73:2b:79:fa:87:9b:d3:72:27:4b:45:a8:3d:b9:
f0:8d:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:34 2026 by rpki-client