Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: B4Gp1qqSGYb2DXpqpB7meIKtS7OGxHo/SI/fxTcqKu0=
Subject key identifier: 6C:97:6F:40:2B:77:8E:83:61:AB:1F:4A:0E:E1:2C:69:DD:A2:78:58
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 019D39E5ED22DFCA7FB4D05376C0C3075953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 14:01:02 +0000
Manifest this update: Sun 29 Mar 2026 14:01:02 +0000
Manifest next update: Mon 30 Mar 2026 14:01:02 +0000
Files and hashes: 1: TZjBq4odAN7upelKgfu1RPB63zo.roa (hash: bR7hMvq2zyGR+w9kpTZrW9dDTe7aMsxdA/NdBaV269g=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: KYAzP9bfYkQ6yVPqMzsRE5/U4NwDS4uT2qNur0UTyMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ed:22:df:ca:7f:b4:d0:53:76:c0:c3:07:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Mar 29 14:01:02 2026 GMT
Not After : Mar 30 14:01:02 2026 GMT
Subject: CN=6c976f402b778e8361ab1f4a0ee12c69dda27858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:4b:51:5a:b4:da:b3:39:96:7a:6f:5c:e3:
1e:87:83:fc:97:1b:e9:ce:58:50:aa:14:60:16:a5:
1d:ab:95:fc:7f:46:0d:99:71:f9:ab:63:22:23:d4:
39:6c:8b:93:58:de:f0:6b:bd:6e:56:37:44:cb:df:
b7:dd:c2:7c:aa:53:81:c3:7c:86:99:48:d1:55:89:
ac:14:c2:14:b3:cf:7d:c5:19:c4:68:5a:55:c5:3e:
85:68:f2:f0:d0:8b:68:3a:ca:38:5c:49:8f:cb:41:
01:44:62:7a:2d:6c:f7:f4:23:5f:77:b2:98:7b:5b:
38:6b:69:a0:32:07:bd:be:45:32:11:b2:53:97:a6:
11:bf:93:1f:07:29:90:2a:06:3a:80:fc:25:16:36:
8f:41:6c:af:5a:b3:f5:e3:a4:47:cf:d4:07:7a:18:
9a:72:76:94:ea:c6:7d:f2:33:62:50:aa:52:6a:8f:
d8:ca:89:21:b2:a2:01:17:09:86:24:2b:f8:34:41:
43:db:50:37:97:ec:75:c3:d5:8c:9e:07:18:fb:9f:
bd:97:27:2d:bd:64:0c:85:97:2e:66:b7:56:a0:18:
e0:44:5f:6e:40:37:6f:90:78:ab:bd:85:46:32:a2:
56:a0:7f:0d:76:6b:e4:30:3f:73:82:f9:41:0b:a4:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:6F:40:2B:77:8E:83:61:AB:1F:4A:0E:E1:2C:69:DD:A2:78:58
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5d:9d:f0:3b:ee:98:9f:32:d8:41:36:e3:a9:ae:39:ee:a6:
da:fd:4f:34:f0:fb:0a:6b:13:45:d3:c0:48:5a:91:bc:64:32:
7c:08:b6:a9:b9:a4:7c:06:04:df:6e:7d:2a:83:50:52:20:8c:
6e:66:8e:e7:1b:e8:4f:e8:ac:66:f0:02:de:15:64:d8:42:e5:
b9:77:ff:ab:a2:37:21:f8:73:f3:d4:db:d0:d9:b7:0a:4a:63:
24:07:35:06:43:43:81:75:bd:ab:f6:33:e0:73:c1:8f:b7:69:
73:84:46:6b:19:4b:86:c5:ce:b5:e6:c6:29:84:13:bb:b7:f7:
c5:3c:0f:33:6e:84:30:57:85:be:4d:35:fe:26:b7:8f:59:59:
c4:11:48:24:b0:71:81:e4:b9:4b:07:17:73:94:71:e8:37:f1:
a9:5e:d5:d0:11:fb:42:4e:6a:ea:06:36:0c:0f:5d:ae:51:47:
18:9d:65:60:c0:ee:3c:ce:59:10:ee:af:fe:bd:4d:f3:e6:84:
0d:41:a8:81:9f:ab:ce:2e:74:59:66:26:e4:f7:a5:93:da:0c:
4f:51:5f:d5:d1:5d:52:06:5a:59:ac:e6:ca:90:0b:69:34:2b:
ea:95:39:23:f4:37:36:6d:38:1f:7c:b4:d6:3a:d2:be:5e:45:
89:5e:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:50 2026 by rpki-client