Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: tZzgws37+hFyNaiIAZEHHkHQba8pCXRPAIIiFaTtoqQ=
Subject key identifier: 5D:35:06:2B:6B:D3:33:A2:C1:88:86:2B:5B:B0:67:53:50:EC:60:26
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 019D37C0525C07D32F72CD9FA6B803748774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 0655
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: JbQaL2RBjoHVTuti7UfCcrYJr_A.roa (hash: iaksrkAEfaFgIKF/4+Tz3YZIiRYiBmDSf/pDYQdploo=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: 4HfkkY1cqdkW4eAN898c1A1UYh94xim8Km5fTEcusDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:52:5c:07:d3:2f:72:cd:9f:a6:b8:03:74:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=5d35062b6bd333a2c188862b5bb0675350ec6026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:e7:78:ce:42:27:8b:69:f3:8f:50:be:3b:
fd:62:e6:b1:49:aa:79:66:db:3b:97:1a:00:02:d6:
78:84:9f:8b:45:1a:95:ae:fb:a7:a1:46:ec:fb:49:
ce:89:66:db:4d:bb:24:95:cf:da:08:5b:63:b1:dc:
f2:fc:be:29:ab:2d:60:e2:9b:ac:a5:75:17:7c:13:
3b:a6:dc:fa:e4:91:9f:68:5a:f6:a4:0c:34:28:a6:
8c:7f:a1:ac:cd:b7:d2:ba:c1:7d:8d:36:a8:f7:c8:
86:a6:c8:bb:62:84:55:6b:42:a5:f1:b5:28:c8:cb:
2f:44:b5:1a:f9:d3:e5:12:c4:0d:a1:e2:c4:59:3b:
28:cb:06:2d:66:2f:98:6a:20:c6:63:28:a0:b2:81:
51:c8:9c:26:92:02:40:4f:79:97:f4:83:58:2a:84:
bd:6a:82:cb:92:03:d8:52:59:cf:28:e2:de:dc:19:
38:ce:45:0b:85:9e:cb:e2:8f:2d:f0:fa:91:65:59:
5f:e4:18:fa:07:fc:57:58:ad:75:46:f5:ee:5a:f5:
e5:5e:2a:7e:59:e1:d6:16:d7:90:8a:b6:dc:a2:9d:
8e:4e:45:fc:8c:2f:f9:3e:b3:f7:cf:6a:c3:b6:2e:
aa:fb:de:ef:f8:08:5c:ff:8f:f0:03:02:47:85:11:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:06:2B:6B:D3:33:A2:C1:88:86:2B:5B:B0:67:53:50:EC:60:26
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:0e:c9:6b:57:f7:71:a1:a1:b4:b8:ee:2a:8e:ff:9f:e9:
f9:a0:45:fb:0a:4b:0e:69:3b:30:97:fc:84:95:75:ab:30:4a:
3f:ec:a3:fc:1f:f5:aa:1c:04:55:b0:ce:a1:7e:51:e0:ec:c2:
3a:03:b7:1f:6e:1a:20:41:12:a5:7b:6c:87:2b:81:89:9e:64:
40:02:d0:e4:8c:b3:7a:39:81:cf:97:a0:0d:55:53:02:6f:d4:
15:37:0c:af:be:e3:50:67:9b:e9:db:4b:2f:35:83:cd:ac:60:
25:22:ca:88:43:5a:4a:ff:63:13:2d:90:be:ab:84:61:14:18:
1a:55:5f:58:99:81:a3:fe:09:7b:2a:85:00:a1:94:b4:ce:17:
be:32:42:78:20:d4:36:aa:24:c9:a9:92:38:a5:0d:cc:8f:49:
05:d0:15:fa:9f:67:e2:f0:dc:c0:d7:72:0f:05:be:70:1f:00:
ba:d7:2f:54:5c:18:33:35:85:78:10:85:3f:fa:cb:d6:f5:fb:
7b:fd:83:bf:4b:1a:f4:f7:44:e5:03:94:a8:dd:ad:ae:c9:47:
3e:31:30:66:49:57:b5:05:91:41:6d:0a:af:54:9d:23:13:e2:
e1:10:26:79:87:de:b0:84:72:cd:70:c5:3c:d3:34:4c:18:c9:
1d:20:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:38 2026 by rpki-client