Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: xWwfEUZNyQegHJtg2xYX25gJnPuT4XhRH7yqSBsxb68=
Subject key identifier: C4:B3:13:77:EA:69:64:47:AE:5D:D4:F6:AD:08:5F:B3:1A:C5:3E:1A
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 019D382DC89E8D146225B67FF9085E0E0802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:17 +0000
Manifest this update: Sun 29 Mar 2026 06:00:17 +0000
Manifest next update: Mon 30 Mar 2026 06:00:17 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: PGzA8l4ZXva3MZA26KrvaoBsCx1H32EH3xPR0wqLdn4=)
2: x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa (hash: 7vnEm2NdMdejMyVEM/bfqmw0nAnwn/zb7nuUX/UxYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:c8:9e:8d:14:62:25:b6:7f:f9:08:5e:0e:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Mar 29 06:00:17 2026 GMT
Not After : Mar 30 06:00:17 2026 GMT
Subject: CN=c4b31377ea696447ae5dd4f6ad085fb31ac53e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:51:55:f1:16:0b:91:69:53:07:95:df:88:
f0:6b:bf:cb:e8:bd:e1:7c:aa:a4:b1:c9:e5:a7:4e:
23:cf:5b:66:55:ab:99:c3:cb:91:64:6e:0d:e1:26:
06:de:c7:27:07:4f:65:7e:b2:97:b9:b0:35:fd:e6:
93:00:cf:5c:b9:50:8b:e7:59:ec:c7:df:2f:1d:fa:
60:c2:02:3c:0f:cd:04:c7:a7:f5:31:e4:48:bb:15:
ae:1e:7c:30:3a:cf:53:0a:b0:5c:a9:63:1a:12:75:
d8:3f:70:6a:4c:e7:e3:a1:5d:e3:98:52:db:92:b1:
9a:18:72:c2:a3:66:27:f3:ad:89:93:be:d6:d1:fb:
cc:ae:91:d3:d9:00:77:a1:ce:37:2e:f3:42:f7:53:
50:b9:e6:21:e3:02:33:df:2b:85:2d:7a:13:c8:63:
07:15:a8:14:0f:1e:4b:d5:f2:f7:7a:4e:52:5a:e4:
d2:ea:c8:c9:4b:c5:75:3d:f2:cc:9a:b6:d2:1b:34:
7b:ee:e5:5c:84:ab:78:c3:72:ee:39:53:48:19:c2:
ea:3a:8e:60:18:8a:ec:d2:02:de:32:49:2f:0c:bb:
54:22:ba:f1:a2:d0:fe:ab:62:55:42:35:a4:52:a0:
c6:1f:78:c6:22:31:4d:5d:3b:88:db:bf:03:63:28:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:13:77:EA:69:64:47:AE:5D:D4:F6:AD:08:5F:B3:1A:C5:3E:1A
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7c:8a:07:37:8f:4b:2a:9a:d4:41:79:9b:6a:6e:f1:ef:7a:
8c:b2:13:3d:56:cf:43:fc:87:5e:ea:ca:f9:37:6d:04:5b:a3:
76:c5:89:6a:9d:46:72:51:0c:6a:9b:1f:46:60:e6:26:61:b4:
14:b6:54:a6:2c:f9:99:ca:c2:9f:19:99:0b:eb:9f:56:9b:fe:
06:6a:8c:cd:cc:4f:9f:24:b5:2e:0d:fc:39:88:05:0c:d8:4a:
67:a9:28:d7:2c:de:53:6a:47:1e:5c:3c:0b:e2:50:ca:10:25:
d8:7f:44:a1:0b:51:8a:e7:3f:19:bc:5c:99:3d:9e:c4:43:97:
79:6a:18:5c:23:ee:a0:15:e9:29:24:b5:15:56:3f:bc:3c:d6:
8b:f4:5e:f1:7f:37:d4:79:fb:f1:f3:c9:0b:df:74:7e:68:01:
c7:f6:31:26:d3:d7:8e:73:4c:89:d1:59:e1:d6:a9:cf:03:bb:
df:8c:04:e9:42:3f:aa:6c:8b:b3:9c:38:b1:cd:c9:79:27:94:
92:09:95:d1:80:2f:08:21:9b:50:43:b2:e3:ef:06:c9:3a:57:
2a:c9:e4:a3:b5:2b:9d:ac:9b:a5:a1:a5:5d:84:ce:43:70:81:
77:35:d2:a0:23:e2:56:bc:cc:64:2f:96:c2:35:d7:af:23:20:
eb:6a:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:12 2026 by rpki-client