Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: m7gsPwtDwrmu501M7AH2PWkwd64Bii/j4GHeViDo0Kg=
Subject key identifier: 20:42:F7:C3:5D:A9:75:31:90:52:2C:A6:20:0D:9F:19:3E:F2:04:83
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019D38D3414FBBA562C311DA13F107B74E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 070B
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: QLVaaZTXR2zK2PkUCYuOaR6vbj/teu6qUlQGlVI30bE=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:41:4f:bb:a5:62:c3:11:da:13:f1:07:b7:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=2042f7c35da9753190522ca6200d9f193ef20483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:f5:5e:e8:66:c2:0a:f9:a7:79:9f:ca:7d:
fd:92:c8:1b:48:a6:b2:69:65:6c:f8:5c:09:fc:ab:
3f:5d:d3:a7:c2:ab:4f:1e:d4:a6:22:9a:c4:48:bb:
98:79:b6:96:21:cb:22:d3:55:b9:15:aa:50:24:32:
07:40:8a:69:28:af:14:77:f6:19:8f:bd:ba:46:f3:
a2:63:55:a9:c1:30:54:d6:0b:8e:76:eb:71:5f:f5:
a6:8e:0c:c7:e5:c2:75:af:1f:e6:62:98:c6:30:1f:
7a:b1:5b:a7:f3:ec:77:82:ad:92:85:9a:63:0f:7e:
80:95:48:bd:27:ee:dd:04:02:a9:a6:15:a7:cf:85:
a3:f7:7b:62:3b:e8:37:00:87:d4:ba:5c:c5:43:e7:
22:bf:a2:0e:fd:5e:a4:05:f6:98:fd:21:66:11:c8:
6f:98:05:76:db:49:13:28:2a:30:3e:bb:34:c6:54:
93:8e:82:e2:af:03:71:28:d6:61:c3:3b:e5:0a:8f:
fa:c3:9e:12:75:fa:4f:19:3d:99:90:e6:fc:72:fc:
3a:0a:48:43:67:df:87:a5:5c:cd:3f:d7:ca:f0:5d:
6c:0b:88:77:66:b1:f8:7c:ee:5b:7a:c8:fe:8a:ac:
66:11:dd:9b:27:01:9c:1b:60:9c:10:07:82:50:98:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:F7:C3:5D:A9:75:31:90:52:2C:A6:20:0D:9F:19:3E:F2:04:83
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:70:5f:6a:f8:3d:65:98:5a:1e:7d:1a:ff:19:a4:27:bc:84:
22:6f:ff:ef:db:01:1f:5b:c4:d9:c6:09:da:72:30:d7:0d:d4:
17:4e:bf:52:86:db:71:e1:c8:0f:f9:fc:7c:29:1a:00:83:ee:
b7:60:f1:5a:60:22:46:7e:ec:f9:4c:2c:de:ac:51:28:ee:92:
ab:8c:5a:bb:9c:fa:b0:1b:89:52:b1:ac:e2:0b:e4:0a:27:99:
89:f2:76:4a:32:ea:f5:38:58:06:1c:e5:01:0a:d6:99:3d:44:
04:b6:6b:63:e5:06:44:d8:cf:22:dc:cb:a2:45:5c:60:71:ef:
49:cc:ae:40:51:08:0b:ea:68:73:2a:c8:b1:62:b1:7e:42:43:
24:9e:1b:39:e2:52:2a:b9:b2:e7:14:21:84:e2:4b:d8:b0:ae:
a6:a8:64:c6:a7:f9:7a:5f:28:3f:23:ca:3d:9d:45:1c:81:9d:
98:30:2e:ee:e3:8b:03:9b:e3:ff:a8:20:4b:63:ce:c7:b5:fb:
8e:4a:f4:55:98:e1:ca:08:34:82:de:ca:32:4e:5b:b4:25:32:
8f:f1:9a:5d:83:29:5c:40:cf:1e:02:32:fd:5c:f5:a3:b1:4e:
bd:00:60:02:13:eb:01:32:ed:1f:74:61:87:c8:a0:0a:6f:3e:
38:1c:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client