Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: sKrB5oLV1rf9YyDiAdFGkCFCtMRebw+CZdase0M+eN0=
Subject key identifier: B8:98:60:9F:D4:7D:E4:7E:44:10:79:9B:27:80:FC:81:72:9D:2A:66
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 019D3789150A170663DC8CF2BEE607FF9BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 1575
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (hash: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI=)
2: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: tJFf2uWK3rnwakyeKK5TUyxm5RptQxsyxRIalH4HteI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:15:0a:17:06:63:dc:8c:f2:be:e6:07:ff:9b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=b898609fd47de47e4410799b2780fc81729d2a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:88:5b:72:6b:62:0b:b6:f8:43:2d:61:e2:
25:0c:d0:89:c0:8b:36:56:69:df:91:8a:46:98:db:
fe:52:a8:91:06:af:4e:16:c8:2a:dd:98:aa:cb:3c:
a9:eb:41:f5:ed:49:90:bb:00:3a:8f:a2:bd:11:3b:
22:c8:91:1b:fd:ac:7b:ad:09:b1:09:a2:27:5f:e5:
d8:d7:1b:28:cb:89:06:27:10:66:36:08:4d:67:d1:
3f:47:b0:45:19:4f:17:9b:a4:52:d8:53:1c:07:ec:
9b:6a:f4:32:49:13:39:93:53:4e:da:9e:0e:3a:eb:
63:c8:d1:27:21:1f:3f:b2:31:b8:fa:7f:3b:53:e6:
f9:5b:68:6c:f3:39:e8:fb:ac:b2:6f:e8:18:77:2b:
02:c6:4c:2c:cc:5f:de:e3:7c:4c:d6:cf:e8:31:e8:
68:c5:8d:f9:ce:8d:4f:0a:9f:1a:5e:ea:46:f2:f8:
a7:45:9a:e1:40:ae:b1:83:02:db:6b:4c:a6:ae:f7:
a1:40:0f:8e:b4:f6:fd:aa:f6:79:7a:0f:68:18:d4:
b7:cc:2a:a6:78:0d:00:1c:03:d9:99:83:52:77:42:
89:6b:af:66:ea:85:88:c6:21:2f:e5:d9:aa:f8:29:
16:83:48:d2:fc:ba:c4:49:29:8b:45:b5:7d:f2:f8:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:60:9F:D4:7D:E4:7E:44:10:79:9B:27:80:FC:81:72:9D:2A:66
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:41:03:90:11:d7:25:11:07:1f:09:ee:77:e2:36:18:73:
bf:bb:13:74:a7:cf:b6:fd:19:42:83:a0:69:4b:6e:92:2a:6b:
65:b7:a8:b9:a4:e5:c8:79:fa:44:98:ed:88:fe:65:b6:66:e5:
1b:3f:af:59:79:4d:33:ad:d9:74:bd:37:43:5e:99:90:14:a9:
37:f6:a5:49:06:89:85:0f:c7:40:dc:70:cb:0f:9b:fb:16:be:
e6:28:3a:80:35:8f:e2:70:7d:8d:e0:78:2a:f2:76:3e:64:96:
83:bd:13:14:16:83:b5:6f:b5:f8:64:3a:7b:d0:d1:09:6e:32:
1c:80:94:18:05:d6:03:b3:03:75:10:20:f6:66:b2:4d:44:65:
d5:ab:7e:bb:e7:c8:e0:7b:f7:1f:45:f9:c2:6b:9e:88:4a:a5:
f8:d9:35:23:e1:12:35:cb:1c:0f:63:1f:c1:33:7b:a1:20:40:
da:63:a5:c1:d9:06:01:f5:24:2a:e2:14:7f:46:c2:7e:2e:d9:
3d:52:68:10:f2:bd:a6:d1:e7:0e:1e:59:75:aa:9a:b2:4c:35:
82:b5:25:6e:5d:93:d3:4d:59:b0:01:b7:10:6f:4e:89:0c:cc:
4c:71:31:4b:ee:54:7d:e1:dc:c7:52:7d:2a:44:54:d6:75:b6:
50:22:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:25 2026 by rpki-client