Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: RAtKIxi7831dyyyOHJgkQdp/aJWuDVYqkVh4Crq/jv4=
Subject key identifier: 31:0E:E6:F9:F5:A5:00:A6:8B:03:30:50:29:7F:97:E7:67:96:67:62
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 019D39418F07DA903F254169546680473DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 1864
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: HymtY1xBPTqgspy2R9WlDjTq7C0.roa (hash: otzuSUG5+mHBacjIwL+bRGVnp2sGdruALqEv8ZrCUdQ=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: NzC6J0NIt36Sg4R1NdbuOAhhevF7sxeVS01dhbtxIx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:07:da:90:3f:25:41:69:54:66:80:47:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=310ee6f9f5a500a68b033050297f97e767966762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:5f:e6:98:b6:c4:f6:a4:73:bc:ac:9a:a7:
0b:cb:53:9e:67:08:47:83:b2:ba:31:6d:3d:ec:af:
d6:24:61:ad:f5:6b:e8:06:4f:96:c9:62:f3:c0:9e:
25:1d:d7:33:7b:fd:a8:08:fb:72:99:b6:97:e3:77:
8d:75:0c:d0:0d:11:be:e6:11:3d:5d:c2:08:87:d2:
5b:12:48:19:85:7a:8c:30:b3:ae:dd:6e:c4:25:ab:
50:b1:54:64:c6:50:f7:9b:35:48:ca:ab:f5:25:f6:
72:21:96:41:b8:02:c3:60:e8:77:d2:53:a7:0d:5d:
2d:0a:a7:d6:b7:c6:78:ff:2e:89:2f:09:8a:2c:2f:
43:26:f4:9c:33:13:28:e7:99:8a:ac:47:97:9f:2f:
b0:ea:c8:02:e7:47:c0:a3:fc:7a:6a:b1:b2:c1:28:
65:22:09:13:08:2a:6f:e3:de:62:bd:ea:53:15:3f:
f2:e7:aa:90:eb:aa:81:6d:44:35:fc:7e:5f:e2:ce:
86:7f:72:55:9a:d5:2c:a4:d1:9b:d2:c0:08:14:6c:
60:8e:10:ca:09:83:d4:f6:d4:7b:c9:29:fd:26:8d:
71:60:0f:d5:1d:ca:ba:5e:c0:28:0e:98:e8:e9:e5:
de:b0:64:96:7e:15:27:3c:58:e1:a2:a4:34:a2:0a:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:E6:F9:F5:A5:00:A6:8B:03:30:50:29:7F:97:E7:67:96:67:62
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:b2:90:1f:34:53:04:20:39:f7:de:a6:e8:7f:c0:00:00:
1c:5c:d8:c9:ec:30:96:44:9b:8f:cd:9b:39:57:1c:8a:87:4b:
0f:64:d1:80:bc:f5:b6:d3:4b:5b:ad:43:b0:45:8c:a0:f4:f4:
65:57:3a:1e:ff:43:7c:2c:f7:e2:99:0b:67:64:ad:a1:6b:d1:
58:17:c8:0c:d5:1c:20:d7:f8:5a:db:08:ef:e5:f1:7f:5a:2e:
fe:96:d9:be:b8:af:b5:cf:cc:01:4e:83:d0:cf:be:9c:1f:df:
ee:87:48:0c:b3:89:99:ba:aa:a7:65:18:62:54:74:3c:15:1b:
be:e9:05:3e:35:7e:fa:1c:1e:64:e6:14:42:b0:84:49:51:b0:
72:96:df:82:34:7d:f4:09:f1:1a:51:72:d6:5d:08:95:07:a2:
b9:83:9c:57:1b:67:bb:8b:4c:d6:70:f8:e6:4c:01:02:c3:45:
4d:24:2d:a4:6b:a0:e1:28:d5:5f:6e:1b:d8:9a:95:ce:a5:a4:
9c:65:ef:5d:48:9d:4d:ba:eb:80:50:f9:b2:9d:d6:23:3d:28:
1b:54:89:d9:c2:6a:eb:87:59:bb:9a:27:a1:78:4d:86:15:6a:
10:13:1f:e7:5a:43:d9:6a:07:ec:6d:18:a6:25:f3:49:21:50:
88:43:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:07 2026 by rpki-client