Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: Azc6Q46OARDwiLQy7gWNiTWt3nz7LlR4H7PQ/cskYEU=
Subject key identifier: 4B:2C:60:5E:6E:88:AE:55:2B:D2:AD:85:BF:ED:FC:D9:00:A1:C7:6F
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 019D37BFF9DEB78C019702917416425EDF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: 8irMhN6XI4UTd6CziWQze6aQaRU.roa (hash: 4USQ1+WIpW+ALL4UR8+ywA+eZ3L7W74DTtNUv/veQUw=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: 8760B2QG8RH2DYqSDkmZ3ZBnZqBjVFnYBurq6+08F2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f9:de:b7:8c:01:97:02:91:74:16:42:5e:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=4b2c605e6e88ae552bd2ad85bfedfcd900a1c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:ea:a9:e2:fb:cb:f3:1d:6e:27:79:3b:d2:
9a:ea:e3:d1:eb:cf:9a:5e:73:35:f9:d5:9f:1c:d8:
2d:de:df:79:21:96:15:0a:3c:29:5d:c3:cc:35:d9:
b9:d9:58:5d:94:c6:f7:95:d7:d5:51:fb:2f:1b:f8:
02:88:3c:f2:62:7c:bf:31:53:94:32:97:b2:b4:00:
d4:e4:fb:89:5d:02:db:6c:f6:37:53:28:41:fd:38:
6e:6d:6b:f0:dc:5b:77:f3:32:5f:76:9c:61:c6:c8:
72:b9:b7:ea:95:c2:70:85:5c:8e:fb:5e:3a:54:68:
16:7f:8d:a4:c8:da:24:f5:89:53:07:3c:ec:cf:2d:
6c:86:0b:d7:4e:a4:14:f8:b4:92:0a:ee:40:84:99:
71:80:59:f3:34:d9:9a:bf:fe:65:f3:b7:ad:c1:96:
d7:62:64:50:8f:91:17:5f:32:be:96:c5:a8:aa:08:
58:75:68:6d:b4:34:09:8f:8c:c5:e5:44:b6:0a:30:
ca:fb:3d:c0:30:ed:db:7d:ad:d6:65:c5:6e:cd:18:
4e:eb:5e:bb:2a:bd:4b:58:9b:8c:d1:0a:ff:cb:bb:
4e:c0:55:0b:9c:f7:5d:00:08:8c:5e:19:e8:48:03:
75:e8:59:07:ce:7e:73:a8:df:06:6c:07:c7:02:9e:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:60:5E:6E:88:AE:55:2B:D2:AD:85:BF:ED:FC:D9:00:A1:C7:6F
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:a9:ea:eb:5b:d5:4b:6e:cc:66:fc:a8:f6:1e:eb:ab:e0:
52:b4:81:79:7e:ec:94:a5:82:ee:cd:2b:2d:7c:c9:74:d5:d8:
8f:91:10:50:39:22:64:6f:3d:1a:51:44:2b:26:68:94:51:12:
31:84:02:d0:b9:a4:e2:ac:9b:5c:b9:12:ff:97:8b:22:23:20:
b6:68:91:a2:b7:5e:ab:a9:c2:32:57:6e:45:8a:a8:b9:7e:2c:
bc:cf:92:f7:80:37:a3:a9:c0:1b:fd:1d:23:f9:9a:18:7d:76:
4d:86:06:8b:63:12:12:13:91:26:13:e9:83:73:12:ad:6a:cb:
6b:01:26:c0:79:f7:1e:d9:b9:58:5e:76:10:1b:5d:5c:af:74:
57:ba:d4:07:34:ae:7e:e6:a0:18:18:16:95:7e:bf:be:7e:d7:
31:01:f1:ae:0e:e3:11:84:e9:d9:b8:d1:85:0a:23:aa:89:d6:
44:35:0c:0a:d5:04:14:4d:6a:1a:25:44:04:b4:27:7d:6e:7c:
bb:e5:9c:38:4a:24:ec:cf:76:45:4c:e7:4a:eb:9b:92:c9:01:
c1:f8:78:f7:1d:86:31:68:75:7c:d8:7e:7e:4b:12:f9:0a:72:
77:9e:a6:4f:de:4c:03:79:af:2c:d1:f4:ed:61:87:7e:58:bc:
46:fd:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:01 2026 by rpki-client