Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: fF4Tgqwt9kmk5jXd17Oui4//WOOo2jJFAwUhhhoJ95Q=
Subject key identifier: 40:10:C8:FE:4B:95:BB:B9:57:45:56:BD:BC:67:2E:0E:54:30:37:D3
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019D382E9540382576FFEDC63BE25E53054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: avGZH7ZUTRt4LOmi7ebG6cHs9VyH/SEnJFjK0aCOcoI=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:40:38:25:76:ff:ed:c6:3b:e2:5e:53:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=4010c8fe4b95bbb9574556bdbc672e0e543037d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:9c:ca:df:7b:b9:a5:9a:7a:3d:c4:ce:0e:
c4:5a:73:ab:48:e2:29:fc:8a:af:3e:b2:f3:b9:cb:
83:f3:0c:93:b9:be:f8:e3:37:f2:e0:97:96:91:c4:
d2:87:4c:04:83:03:11:74:a1:c9:5c:62:74:6f:86:
7c:28:1c:dc:09:17:89:6d:cf:60:ee:5e:5b:b9:db:
3c:63:70:0f:fb:53:61:7b:d8:57:d0:a0:da:e1:17:
7f:70:87:f3:03:b8:7f:92:81:97:89:c9:16:ef:c2:
cd:06:c1:0d:a6:16:c3:de:7d:d3:4b:4d:dd:20:40:
b2:d9:cc:fd:16:b3:2c:22:fc:c8:0f:f7:72:33:32:
7e:fc:36:dc:25:eb:10:86:3d:07:51:3b:3e:c7:5c:
24:b4:50:e6:74:bf:de:83:48:fd:fa:28:c8:89:12:
9b:a9:57:c9:05:69:62:5f:89:27:3b:e9:68:ee:21:
45:97:ad:e1:91:1d:5c:10:f3:8a:cb:3a:bc:d0:d8:
0e:94:8a:ba:7e:3a:05:5b:84:10:26:1e:f0:97:af:
4e:b4:39:6c:45:60:dc:50:29:f3:7a:2c:53:16:cd:
d7:f6:93:09:18:03:22:5c:9f:45:0e:59:c4:8b:67:
4e:8e:4e:f3:c5:fd:2f:26:48:b5:69:a7:9f:db:d3:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:C8:FE:4B:95:BB:B9:57:45:56:BD:BC:67:2E:0E:54:30:37:D3
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:c6:a9:d8:00:ae:f1:8b:2c:34:cb:2c:25:6f:6e:24:e4:
51:30:7a:8e:3b:ed:1c:63:c9:e0:a0:27:ce:dd:74:e2:7a:37:
56:37:29:2a:95:bf:2e:35:92:e8:e0:62:28:eb:5e:1f:da:e8:
02:4f:d2:26:b5:c6:4a:f6:a6:92:8a:ea:2e:f0:f2:1f:70:c3:
a4:57:fa:4d:c4:a8:ca:53:99:6f:e9:64:83:ec:fc:7d:78:e1:
7d:fe:b5:18:1f:90:a8:9a:33:83:28:c4:00:dd:b5:70:27:44:
7d:6a:6f:1e:ed:17:ee:20:e8:4f:f4:dd:29:82:d7:b1:54:01:
d5:a7:b6:fb:6b:4e:d9:a7:bc:9e:73:29:10:8f:fb:6f:a2:58:
2a:9f:04:a8:48:4b:18:69:bf:f2:d9:5d:47:e3:e0:17:7a:bf:
d0:66:43:3f:6d:fc:07:33:0e:22:98:9d:a2:9f:f8:05:22:ca:
8d:18:47:49:02:6a:69:70:cf:47:f8:22:b7:a5:a9:6a:29:7b:
4a:b2:03:48:f2:a9:68:04:9f:d3:a1:a8:60:6b:d4:44:52:98:
5e:13:56:18:ec:cc:0f:dd:fd:a7:51:78:77:d8:1d:8a:1e:8d:
fc:ce:6f:d4:c6:30:81:c6:ca:a2:5d:4a:f2:06:56:c6:ae:ea:
03:b1:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client