Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier: IThNiqfFAn70pQJBsdIPHaKv4GZyb329X8PWqDbI2Zo=
Subject key identifier: 5A:EE:0C:A1:AB:C8:D0:F1:B8:6E:85:56:15:EA:D2:28:EC:91:17:93
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 019D3909F8E7D161A330C372F3E8A21387D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number: 07C7
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: SHkHDMCp0QZcWQoq0DRB5J/EAfpIWv2N6V5L1z636Yc=)
3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f8:e7:d1:61:a3:30:c3:72:f3:e8:a2:13:87:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=5aee0ca1abc8d0f1b86e855615ead228ec911793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:59:f7:e9:c9:c1:63:c5:81:3d:53:1a:da:
84:9f:81:38:b7:89:31:0d:e2:0c:9a:fe:15:b4:81:
b3:38:72:47:a5:0e:34:98:67:48:c2:fa:5f:46:7b:
00:b4:31:a2:59:4e:9e:29:98:a5:50:d6:78:e1:31:
64:0c:80:86:d9:ff:3e:56:f5:4d:60:d0:c6:14:ef:
9d:2f:06:64:72:8e:0f:a7:7a:22:c8:b8:ae:ab:4a:
97:4c:cc:13:da:2e:b9:d1:1b:66:36:f1:b2:2d:6d:
ed:d0:17:56:12:e9:17:46:f5:39:dd:61:78:8d:33:
41:b2:97:89:90:2f:f8:a4:a1:b4:da:fe:d8:94:c1:
19:17:ce:a2:e7:5c:31:4e:ed:db:45:6c:2c:4c:6d:
98:3a:d5:35:d8:5b:73:49:a4:2c:47:0b:1b:67:b2:
d6:c1:f4:ef:38:35:b2:fb:0f:fd:fb:0a:49:9d:4c:
51:d5:6b:fb:df:1d:0d:94:f8:43:b6:72:02:b2:33:
96:62:bd:e4:ef:e6:25:16:1b:00:36:19:81:31:20:
15:53:18:b5:3b:1d:9f:7b:3d:e1:a5:af:5b:ca:48:
0d:14:c0:a0:79:b4:3c:a5:10:96:db:a0:98:66:c0:
85:d3:d5:a7:50:31:3b:2e:bf:97:22:ec:db:ce:b5:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:0C:A1:AB:C8:D0:F1:B8:6E:85:56:15:EA:D2:28:EC:91:17:93
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:92:d7:e5:95:cd:bb:0f:b6:18:a5:7b:bf:03:d1:23:48:
ac:e2:1e:1f:3c:0c:87:66:bb:70:70:13:3b:b0:62:f3:20:83:
cd:e6:0b:43:c9:a8:bc:1a:de:b9:85:9f:59:98:a6:e2:f1:53:
28:ea:20:59:92:17:cc:47:7b:27:fc:52:f1:34:44:61:51:46:
a1:8f:8b:f9:d6:fc:b7:c9:a2:00:c7:5c:a8:05:b3:36:8e:25:
ae:84:bb:ad:91:0e:eb:45:3d:0c:d8:34:43:37:d4:42:44:e0:
82:0f:5b:3c:b7:3e:65:78:b8:08:54:f2:7a:7b:96:f7:43:33:
45:b1:5d:a1:5a:d3:2f:30:d7:12:37:5c:d1:02:de:45:b3:3e:
ba:d3:85:86:86:35:4b:e7:10:4b:fc:cf:73:84:7a:4f:50:68:
fc:72:b2:91:be:8c:38:3f:2a:fa:74:1c:99:ea:0f:d1:1f:d2:
0f:14:df:bc:be:bc:51:63:11:73:a3:e9:f3:02:31:49:3f:36:
92:87:3e:5c:d9:1c:0f:01:f3:2d:9b:14:b7:60:b1:2f:44:89:
27:a6:ca:c3:ea:b9:c8:b1:90:42:d3:6d:17:8e:be:05:81:b9:
ae:dc:77:88:49:0e:4e:ee:dd:f2:f6:ba:14:c4:ea:5b:5a:fa:
a9:a0:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:52 2026 by rpki-client