Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
File: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft (raw, json)
Hash identifier: 4JRvfPIc4PKfwzGaK4bG9AqJivKuej9OlhL7JBwE/sY=
Subject key identifier: DA:D2:DE:33:65:B0:15:91:04:C9:4D:56:34:B0:60:70:9E:75:E3:C1
Authority key identifier: 64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
Certificate issuer: /CN=644d731965489244a7bd28f893d0b3769afd996f
Certificate serial: 019D3752DEC5C892590413670BEDEDC8FEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl (hash: h+NWDsMi1HL2/+JrhQndOXBN+BhGojsa10bKpQwtfew=)
2: u9gP8A91VMRA57qyicb7SQNNI18.roa (hash: 0MKrZtGd36J4o61NEPJP4zHNGsYmgrJJ2A25NjVwYGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:de:c5:c8:92:59:04:13:67:0b:ed:ed:c8:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644d731965489244a7bd28f893d0b3769afd996f
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=dad2de3365b0159104c94d5634b060709e75e3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:4c:56:57:e0:1a:c0:d4:8f:6f:99:23:a0:
d1:6c:df:6a:de:43:99:0a:20:26:c1:81:08:93:c1:
16:d3:73:65:f9:d2:de:97:1e:4c:c1:52:1e:ff:62:
c3:62:e9:d9:6d:a9:46:ff:8d:66:25:26:31:b8:13:
23:94:ca:be:2c:2a:2b:39:55:8d:52:31:7d:dc:3a:
44:10:11:f3:34:2c:b1:6d:82:e4:f0:f8:b7:a0:06:
b4:ee:6e:68:51:f8:aa:05:53:a4:18:8d:23:58:96:
05:aa:7b:21:56:91:6b:03:1d:e0:28:74:b6:d1:25:
88:dc:ec:9a:36:0a:01:e5:47:8f:fc:1c:48:b1:3b:
dc:0b:5e:95:7c:95:52:8a:3e:0c:25:ae:7f:94:94:
d8:80:98:20:4c:ed:2e:a6:f7:15:ac:2a:6e:a7:fc:
94:5b:25:77:8f:13:21:9b:04:18:b1:f2:38:6e:99:
a1:ea:56:a3:43:c7:b2:99:32:4d:7c:02:07:46:73:
06:64:18:94:68:25:1c:76:84:97:45:d8:a4:8e:f2:
37:16:2a:c6:e1:c3:90:e9:6b:61:9d:97:d0:1f:3d:
67:fa:69:92:2c:9b:78:22:05:ae:59:33:35:b0:24:
dc:10:f6:4a:24:e2:f7:f6:79:f1:99:95:30:72:4f:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:DE:33:65:B0:15:91:04:C9:4D:56:34:B0:60:70:9E:75:E3:C1
X509v3 Authority Key Identifier:
keyid:64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:6c:8a:f0:55:e9:ec:b1:5c:cd:c0:5f:c7:bb:33:ee:97:
c4:95:7b:12:2d:49:40:a7:d2:1c:66:bd:0b:d0:fc:73:42:47:
16:bf:60:11:10:5b:91:45:7a:ef:ab:94:e6:fc:65:3c:66:9b:
41:be:41:e5:84:00:70:07:21:6a:ca:e7:ca:40:e7:cc:7a:b1:
4b:a6:f5:cd:17:74:fd:36:d9:b7:70:8d:f6:31:c2:9a:39:c0:
0d:40:43:37:9a:c7:37:49:b1:20:08:34:0b:59:b0:67:83:fc:
c8:ef:44:62:99:04:49:bb:5a:b3:9b:6f:c8:2d:fb:ce:d2:be:
e3:14:8e:43:d3:43:3e:c5:07:f0:cb:6d:0a:03:06:50:be:58:
f7:36:2f:e9:29:5f:2b:3d:10:f9:16:28:4e:e0:6c:10:05:de:
34:8b:fd:0a:9b:96:4a:41:45:24:86:f7:37:53:5c:1f:c4:f1:
86:99:66:0b:48:3b:d0:71:9b:56:0e:05:c6:88:14:46:e4:49:
85:82:2a:f9:3e:e4:59:a4:1e:ee:98:79:97:74:5f:fd:a9:34:
18:40:ea:68:1e:01:00:0c:24:80:91:a7:b1:3e:c8:37:8a:a0:
59:3c:e2:e7:f8:53:67:93:50:31:ef:9c:ef:e6:04:0d:8b:37:
a6:dc:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:23 2026 by rpki-client