Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier: 8jMnP8Hm8beHV9b5oaX7AgJBPVSss41wlvDOZbaWoHA=
Subject key identifier: 59:D6:74:B6:58:4B:BF:95:D1:B8:B4:AA:71:2E:5F:3B:E4:47:7B:B0
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial: 019D390A3BD75178975B34D8ED996A9106E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number: 13AF
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: U6MNXsIiQyUWzfXpW3UnHYUwHkc.roa (hash: jrq3ihzHX+Q926Z95yemtvB18GgOprbk1pa3OArkcrg=)
2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: EF4wZxaZRCFjl9aedMBMbJp3FBjZy3c4vdVgx+wpR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3b:d7:51:78:97:5b:34:d8:ed:99:6a:91:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=59d674b6584bbf95d1b8b4aa712e5f3be4477bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:23:ba:30:71:7b:e5:a5:13:34:e4:c6:e5:
c6:87:61:64:cd:5d:2f:21:9d:7a:f7:ee:b6:01:c5:
6b:c0:6f:3c:16:9c:32:c6:1c:77:78:02:8b:22:5b:
03:64:e3:bf:a7:9f:83:1d:e5:a9:8c:2b:58:ae:01:
b1:1b:6c:ba:64:aa:41:8b:9e:ea:71:da:b8:f8:ae:
a5:d7:54:0a:33:43:49:c5:78:3f:b9:7a:44:11:24:
90:c0:07:3a:f2:f8:e6:56:7f:59:db:0d:c1:b7:9d:
df:d7:49:0d:01:66:1d:83:4b:7d:40:eb:ca:31:20:
c3:49:d3:58:23:5b:53:93:bc:c0:ae:ef:8f:a1:dd:
de:71:dc:cc:51:a4:f0:9f:4f:38:b6:50:e6:e1:7d:
ee:0f:bf:bf:41:36:60:8a:de:12:fc:34:be:19:73:
b3:32:c7:5a:93:95:d2:16:5c:51:5b:fb:92:eb:55:
fe:0d:4b:36:c4:91:7e:01:a7:09:49:c5:dc:05:84:
b1:f4:7d:3b:62:4d:d0:99:f5:eb:d6:b8:1e:70:e6:
80:09:ca:7d:ef:be:41:7b:10:7e:9f:77:7b:0d:50:
cc:0d:6d:f7:75:15:51:1e:01:1c:65:f4:3f:0c:96:
34:9b:fd:73:d2:e0:65:24:85:bf:69:57:8b:1d:bd:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:74:B6:58:4B:BF:95:D1:B8:B4:AA:71:2E:5F:3B:E4:47:7B:B0
X509v3 Authority Key Identifier:
keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:13:1b:7f:53:97:4c:0d:69:ba:12:81:f3:ac:b7:e0:c6:f3:
c6:20:2f:a9:64:11:21:50:41:99:01:c5:70:4c:9e:a3:a6:66:
36:a9:b6:09:39:b0:45:ea:b4:23:ba:a4:eb:6b:9e:8c:50:1f:
8b:8e:42:07:a7:dd:cb:41:30:98:f9:5d:f0:47:27:b3:49:4f:
f8:4a:4f:fe:11:fd:83:ea:11:70:8c:d7:5a:09:57:9a:95:36:
b1:a8:c8:6f:0f:52:f5:1e:b5:dd:6a:1b:a6:dc:37:83:65:c8:
e8:9c:9a:2f:99:6a:66:2a:84:16:ae:14:9d:22:53:ff:df:24:
b8:b9:79:f4:7e:32:d1:1a:32:d0:1b:fb:5a:91:cb:74:20:98:
8f:fb:28:1c:67:7d:ed:37:a1:58:cc:4e:ad:f0:ed:d6:f3:1a:
2c:b4:ab:12:88:53:da:9d:90:6a:14:c3:9e:48:8d:b3:2c:8e:
93:58:39:2b:67:6c:6d:57:38:8d:4d:3a:7a:a1:04:24:f6:4c:
51:6c:a0:af:09:aa:30:63:40:4f:11:3a:10:ec:65:24:62:b4:
5a:3f:62:2c:51:6d:02:1f:2a:df:8c:36:23:66:e2:44:8a:24:
10:55:43:22:e4:8f:2b:0e:95:84:92:0e:c1:8a:9f:75:69:79:
07:ea:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:59 2026 by rpki-client