Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: GNf9eS4CNSPFb1AI1eNC2YZpYExfI24ZJfmitHt5wrA=
Subject key identifier: CE:B0:9B:60:03:52:D5:EF:20:1D:13:EC:BF:E5:A3:FC:4A:5A:61:91
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019CE636BAC4C6DBBC11ED9E9DB8E3B34ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 07A0
Signing time: Fri 13 Mar 2026 08:01:12 +0000
Manifest this update: Fri 13 Mar 2026 08:01:12 +0000
Manifest next update: Sat 14 Mar 2026 08:01:12 +0000
Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: bWg9iQNdtkhyGuQkQjg4mSJkkDxF2mhrBQRFMmLh0IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:ba:c4:c6:db:bc:11:ed:9e:9d:b8:e3:b3:4a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Mar 13 08:01:12 2026 GMT
Not After : Mar 14 08:01:12 2026 GMT
Subject: CN=ceb09b600352d5ef201d13ecbfe5a3fc4a5a6191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:33:56:f1:df:e4:e7:76:1c:64:5b:4a:bb:
6d:45:02:44:d4:ce:84:ea:a8:2a:39:54:73:08:e6:
e8:b9:6a:d9:f4:36:30:d1:44:90:9d:f9:b6:98:3b:
29:17:58:9f:37:f6:19:73:d6:0d:61:48:96:83:aa:
35:e4:04:f9:4c:a3:58:f7:65:43:fe:f6:cc:78:4d:
9e:de:7f:0b:16:02:d8:5d:0b:36:35:5a:8b:33:d2:
39:4e:f2:2b:a9:91:70:70:44:b0:17:f7:1e:99:91:
fb:54:ec:31:0d:7f:5f:94:e5:1d:36:7e:07:1c:db:
7c:b4:1e:f3:4e:7a:cd:9a:a5:38:c6:ed:1a:f5:b4:
ab:2d:c8:be:ba:3e:82:e8:53:bf:d7:32:46:56:1c:
b5:e7:30:aa:7d:68:84:2a:f9:6a:81:e9:d2:7c:4c:
38:1d:11:d0:c8:32:bd:80:21:93:72:fe:54:93:ea:
06:8f:bc:30:40:0d:c3:4e:91:26:30:47:39:24:ed:
29:83:d6:05:7f:fc:3f:f8:45:3e:28:d8:fc:6d:68:
a2:89:56:27:b4:e1:1b:43:af:b6:25:a4:c9:2f:19:
aa:08:96:dd:6f:3e:50:e3:a8:ed:9a:7e:7c:c4:78:
fb:ea:ea:87:93:38:b0:d6:cf:4a:eb:b6:fb:e7:e6:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:9B:60:03:52:D5:EF:20:1D:13:EC:BF:E5:A3:FC:4A:5A:61:91
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7d:2c:39:12:85:cd:fd:6b:55:2d:cb:cf:5b:ff:73:31:d1:
94:a6:e3:27:94:74:26:0f:54:5b:4a:74:bc:97:50:e3:d5:10:
8b:1f:3e:6a:03:da:fc:60:28:44:64:f5:ea:6e:6d:e5:94:c7:
38:80:0d:e7:fe:e7:0b:bc:40:12:90:50:ec:6d:86:1f:3e:9f:
71:e8:25:f7:c3:9a:b1:67:50:62:d4:6f:87:e2:2f:48:9b:4f:
5c:09:4b:dd:5d:a5:f1:b4:96:e5:12:68:ba:dd:60:09:d9:a8:
3e:1e:74:85:38:3e:34:12:37:95:11:43:5f:52:25:f8:11:0b:
64:17:08:61:95:fe:60:ae:47:fc:55:df:63:a7:27:8a:2f:ea:
4e:88:cc:77:18:8b:0d:b7:26:09:e5:d0:36:57:90:4d:ba:fc:
f3:a2:29:8d:ef:2e:67:47:62:bd:bc:c2:27:6b:f8:c5:96:d7:
a3:d7:15:bb:62:24:9a:6b:fc:f0:37:c0:32:fd:71:b5:4e:5a:
88:84:66:ee:bc:a2:56:8d:75:0f:f5:9f:27:b0:45:de:a1:7f:
7b:70:02:7e:99:ce:a5:f2:4b:a7:c6:2e:f3:bb:99:11:99:93:
12:6a:e5:54:7f:d6:d4:58:27:4b:32:dc:c3:22:3e:0f:34:ef:
b3:7f:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:36:12 2026 by rpki-client