Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: DnyDY/2X+kYEp/RejQV1FyuXNwpaVou2ZBBb2ertVmQ=
Subject key identifier: 60:05:CE:26:20:1D:EE:48:92:BA:7A:3F:7D:C1:88:03:C3:4C:19:73
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 019D39AE6EBD21ED87661595DDE78E1B28B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 13:00:26 +0000
Manifest this update: Sun 29 Mar 2026 13:00:26 +0000
Manifest next update: Mon 30 Mar 2026 13:00:26 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: nigHr8PZScpZgOq3YZngui4bHjj507C87q8HQwqS+EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6e:bd:21:ed:87:66:15:95:dd:e7:8e:1b:28:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Mar 29 13:00:26 2026 GMT
Not After : Mar 30 13:00:26 2026 GMT
Subject: CN=6005ce26201dee4892ba7a3f7dc18803c34c1973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:ff:fb:b6:d9:49:31:79:0b:32:69:e0:b4:
35:3c:fa:99:ea:aa:cc:b8:a6:9e:b6:2f:51:50:2d:
ab:00:02:33:58:ae:01:01:13:cb:f6:d9:f9:59:1f:
09:6e:8b:af:61:c8:04:14:5e:de:aa:93:87:2d:9e:
f3:03:d8:1c:c6:3b:31:72:21:17:82:9f:c2:97:df:
ed:c6:62:1d:2d:9f:1d:2b:f8:66:58:22:4c:5e:d9:
90:d4:95:c3:5a:98:93:d9:bd:55:da:cc:dc:84:0d:
52:39:c0:84:91:7b:4a:e6:8a:ef:25:a3:f8:0f:a1:
5d:84:0e:c9:33:4a:28:e0:99:19:89:9d:da:fe:61:
cd:33:4c:59:61:3d:e7:a8:d8:3a:e4:ae:9b:a5:0e:
c1:0f:a5:f0:5e:b8:85:a0:bc:75:24:e7:8a:87:bf:
c3:9b:c9:f5:b4:eb:e4:e0:25:7b:fd:56:72:bf:ae:
85:76:48:6a:7b:69:d3:25:32:83:a1:c1:ce:4f:e2:
b5:f8:83:cd:8a:39:d8:d5:4d:b3:aa:21:cb:a3:02:
09:68:94:cc:46:11:a3:05:f2:4b:b0:4c:ed:a0:68:
c3:f5:46:47:be:4c:59:8d:a7:7d:66:92:f8:d9:96:
7f:d7:3c:35:13:de:f0:84:43:09:08:79:f9:06:e9:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:CE:26:20:1D:EE:48:92:BA:7A:3F:7D:C1:88:03:C3:4C:19:73
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:39:48:b6:9e:2c:58:7c:75:19:ce:3b:d2:92:5b:a1:2e:
db:2c:4e:87:c1:63:0b:4d:d9:4b:0d:70:e6:bd:ba:fa:0e:49:
1b:49:c4:f5:86:5b:7c:7c:5e:c9:16:3f:93:7e:b2:85:0f:dc:
2c:05:c5:0e:89:d0:ea:47:5b:5f:1f:c1:20:4f:0b:4a:db:c8:
e4:c2:81:e8:c3:ae:d6:02:80:85:a6:74:34:9d:3f:13:04:d1:
00:9f:72:b9:13:fa:f9:40:0f:08:e1:dd:18:78:fd:4f:8e:fa:
e2:36:0d:21:44:28:01:a7:90:60:eb:ae:aa:b5:5a:74:89:88:
18:dc:7c:2c:9d:b5:2b:01:a7:cc:f3:ea:e9:94:b0:a8:d9:34:
4a:51:80:8e:ed:e0:14:61:26:0d:56:c3:ff:24:8a:0b:b0:3e:
e3:00:b8:d7:41:43:61:54:98:da:3c:26:91:62:1f:92:8e:70:
30:dd:ae:2d:e7:a9:22:d5:db:4f:b8:20:9a:61:dd:20:c6:f9:
f2:85:5d:3c:43:aa:86:53:7a:99:c0:08:72:e9:fc:6a:0f:f9:
f1:5c:c4:3a:0f:4c:08:1c:f3:54:3a:cf:77:0e:19:95:16:5c:
87:99:25:2d:c0:9b:6d:56:b3:57:97:bb:c1:a4:8f:e4:ab:fa:
b1:50:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:20 2026 by rpki-client