Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: 7ZQxMIYsGUwP+LgzGgqNKiumS8sgpYermTtUaT9x2Kc=
Subject key identifier: 8F:2C:EC:4F:DE:47:7F:0F:5A:E8:62:F1:40:6C:54:EF:42:05:59:38
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 019D389BE8985AFD42B22E3CA38FF9C1F611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: 7qTF0jqmrE5sqWppz2XaId92Nsg.roa (hash: BXslQtBYGdpBVanESXoQgNGnECD/ohyq+njOEg7cP8o=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: iczkTsulhsK62MJ5BHmpLeZfzCtXhJPVT8dM2k8ldl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e8:98:5a:fd:42:b2:2e:3c:a3:8f:f9:c1:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=8f2cec4fde477f0f5ae862f1406c54ef42055938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:bf:24:1a:94:53:49:eb:45:5d:f0:c6:63:
34:b9:e5:6d:81:d7:cc:f7:85:df:e3:86:bd:61:86:
23:68:1c:1e:2c:b6:e6:06:fe:cf:fb:3d:01:0c:ee:
67:29:d1:02:76:f9:34:d2:30:6e:5d:c6:a6:ac:1e:
aa:2e:67:25:2d:db:bb:93:14:7f:dc:1e:4a:38:de:
1c:57:04:e8:04:52:f6:c5:d4:41:f7:34:fe:97:73:
24:05:3b:64:f0:97:5d:3c:a0:13:a0:1b:ee:df:fc:
9a:9b:1a:11:8e:10:1a:63:ea:28:f5:0e:6c:75:85:
ac:46:43:94:78:3f:95:b8:33:f7:b9:58:5f:46:7a:
73:5c:e4:26:a7:87:c1:3b:6f:de:3b:d7:6a:c5:8c:
f5:50:89:69:fb:02:25:f2:7f:c8:4a:ca:db:68:dd:
64:33:81:75:87:7d:00:81:d7:b0:8d:b6:b5:d7:0b:
18:8c:da:de:9d:f6:d6:14:bc:6e:22:8e:58:fc:8f:
a1:45:c1:80:a7:50:fd:ae:6a:98:5f:d1:45:dd:af:
03:01:d7:6c:9c:a8:b9:bc:36:da:77:4a:2d:d1:fd:
6f:2c:88:61:7b:43:6b:9f:f4:ae:80:42:69:78:71:
58:f3:2e:e3:8c:1c:c8:c4:35:07:a7:2d:87:aa:98:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:EC:4F:DE:47:7F:0F:5A:E8:62:F1:40:6C:54:EF:42:05:59:38
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:48:53:0e:51:72:5d:1e:9e:97:41:96:01:90:3c:67:15:8f:
b4:4f:98:86:40:1d:8e:35:50:1d:fb:97:f9:d2:6e:97:a5:02:
43:c8:d0:4e:e7:b6:b1:60:65:d8:6c:d6:99:49:f7:b6:1c:8c:
1c:3e:52:83:37:57:fe:b3:bb:5a:f0:3f:f4:a0:bd:8e:72:f4:
ec:e8:92:5d:5a:98:ae:43:d9:0a:47:dc:b6:23:12:75:67:4e:
20:b2:fc:36:71:f0:0e:8f:38:3d:59:eb:70:85:69:e9:12:7f:
ee:96:73:29:04:2f:36:3c:37:90:a8:e8:30:b0:b4:0a:a0:ad:
3c:d2:50:7c:46:b7:06:cf:02:cc:ff:73:2f:e5:f6:bd:ab:ed:
2d:9a:1b:43:2f:9f:96:e6:64:2d:61:0f:6d:ca:5d:50:ce:24:
9b:73:1a:a5:e3:6f:46:00:f7:ee:18:3b:8d:49:82:15:98:67:
76:c8:c2:a8:5a:77:2e:33:89:6a:ae:0a:47:c2:0c:2a:2b:25:
4d:23:70:57:9c:cf:c3:b3:85:6a:60:78:60:d8:26:5f:5e:7a:
d2:3a:77:c5:7c:d9:61:46:a5:54:16:53:f9:23:ca:7f:a1:45:
a8:c2:66:a1:8e:07:96:e5:5b:75:c3:bc:ba:d4:32:94:9b:d0:
51:94:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:33 2026 by rpki-client