Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: S1yl5OAbvtiK0ikEf/gOVCgE41xVKMj60xQKZFNoW9U=
Subject key identifier: F1:37:4F:AC:CE:D9:05:37:D0:E8:61:11:13:25:6C:81:7E:60:53:86
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 019D3789BA3A9046FD1F8DB7FBBE2C226620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:05 +0000
Manifest this update: Sun 29 Mar 2026 03:01:05 +0000
Manifest next update: Mon 30 Mar 2026 03:01:05 +0000
Files and hashes: 1: DU8OixuQSBT4wDmFxWVtjuElegU.roa (hash: fAA3Up2hh08gKhdkTQ9YAofCRj3IfUFUPtWpnzTKD+E=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: cRQ4mrzYkwsPmvoiJnz12IKoqsQ0ZEPMmvoHjbmnjPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ba:3a:90:46:fd:1f:8d:b7:fb:be:2c:22:66:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Mar 29 03:01:05 2026 GMT
Not After : Mar 30 03:01:05 2026 GMT
Subject: CN=f1374facced90537d0e8611113256c817e605386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:d1:60:ce:51:a2:67:09:98:4c:dd:98:31:
ec:e1:89:72:11:a5:a8:86:e6:34:88:a1:cf:5e:61:
7a:16:27:27:72:af:64:0c:2d:02:87:46:15:26:00:
8f:ae:e5:d6:ca:f9:f5:3a:79:e8:15:2f:bd:3a:36:
a3:70:54:69:5f:23:dd:78:31:ff:cd:58:4a:71:ba:
33:fd:85:c5:fa:c3:1c:34:d9:c4:ae:5f:be:91:96:
a7:f3:d3:78:76:8d:b6:01:69:b2:d6:7b:7b:7e:ff:
aa:2d:f2:e8:b3:e1:57:a8:da:f9:c9:be:4e:e9:b2:
5b:45:76:4f:13:2a:91:a4:bc:73:e4:06:7f:a9:56:
1c:7b:fd:f1:4e:24:95:6d:b4:4e:3a:93:51:f3:38:
b9:41:f5:68:4b:6c:cb:17:1b:8a:16:bf:55:fa:5e:
2a:ed:f9:c2:d9:c0:fe:2e:0f:64:7c:f3:96:b7:0e:
e7:a6:8e:e9:e0:61:01:fa:01:9c:7b:f7:94:8a:9e:
d6:bb:ae:66:1c:d9:e9:83:32:8d:fa:af:34:94:32:
dc:29:1a:bd:38:f1:15:ef:45:ef:48:0e:82:20:e2:
74:9f:d0:fa:0a:aa:b4:cc:6a:86:17:20:5c:8d:8f:
47:5b:65:3a:b7:16:4e:ca:59:6f:ca:37:e0:2e:d9:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:37:4F:AC:CE:D9:05:37:D0:E8:61:11:13:25:6C:81:7E:60:53:86
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b6:9b:f1:ee:f1:ee:8a:ad:69:ba:89:e1:9a:f8:13:84:96:
40:5e:60:fa:88:ae:fc:ec:a9:1f:9e:ed:16:96:b3:a5:67:f2:
eb:e6:d9:4a:1c:35:85:d4:36:c3:32:be:c9:96:af:df:e7:87:
68:27:2c:68:58:5a:08:cb:d9:b9:85:2c:25:11:71:49:45:a4:
c4:c2:2e:5d:92:d5:1a:48:fd:03:7b:84:e3:ad:ea:89:df:ee:
f2:13:49:c0:50:36:0a:d7:b5:e9:84:e9:05:09:96:b7:82:62:
3e:44:e9:e5:ac:9f:28:8b:ec:6a:71:e3:04:1e:96:2f:e7:4c:
f1:83:2c:5f:b9:3f:9d:41:4f:ac:f1:a5:7e:44:3e:9d:62:f9:
d7:6f:c7:f3:87:27:e5:39:ad:90:92:5f:d7:9d:d8:10:87:6f:
f8:b9:f0:ed:ec:9f:5f:59:5c:cb:25:9a:86:a7:a7:b6:9e:ab:
96:e6:26:3c:64:42:b5:02:67:ec:b8:2b:73:4b:3d:e6:d9:35:
f4:8b:c0:b4:77:53:ef:23:2d:f5:aa:9d:94:b4:ce:18:5b:82:
37:11:47:4b:70:15:20:00:a2:05:6e:74:fb:34:ae:3d:57:27:
3d:ee:ee:da:3f:ac:75:f6:20:7e:7a:de:f9:f0:75:22:5d:2d:
0d:6c:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client