Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: 1yapinYnMBc0OZWTaIfCwiN61u94dWrAv9yz2s4zOAM=
Subject key identifier: E2:09:B5:30:CD:B2:34:ED:E3:57:14:EA:BD:98:37:B2:AD:85:77:BD
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019CE892D12F3D8D4AD8F3473BD1DF13FA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 19:01:01 +0000
Manifest this update: Fri 13 Mar 2026 19:01:01 +0000
Manifest next update: Sat 14 Mar 2026 19:01:01 +0000
Files and hashes: 1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=)
2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: t8DoH1Lomhm3ZTELBFiu3ruH4rrF/2FFhaNmlRNbcGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:92:d1:2f:3d:8d:4a:d8:f3:47:3b:d1:df:13:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Mar 13 19:01:01 2026 GMT
Not After : Mar 14 19:01:01 2026 GMT
Subject: CN=e209b530cdb234ede35714eabd9837b2ad8577bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:d4:fb:c9:f2:45:9e:c7:45:5d:bb:a8:04:
0c:39:6a:97:47:b9:6d:7f:cd:02:40:6b:e8:c0:88:
a2:d3:08:99:5e:52:c2:0b:65:83:6c:69:01:cf:83:
48:ee:55:43:b1:c3:5d:cf:ce:c0:34:db:be:f2:00:
d2:d3:80:bc:93:f5:6c:e4:a2:3f:0f:d7:0b:6e:56:
a8:31:b8:3e:71:fa:11:3b:aa:68:a9:d2:6b:7c:cd:
05:3b:d9:8c:9c:22:a4:91:8e:17:9d:c5:b5:05:09:
b2:28:9a:6b:1d:c6:b5:b5:35:89:43:2c:58:d5:39:
ac:87:65:e9:4a:d4:5d:d2:47:3b:40:97:b3:ba:6e:
3d:f0:a0:96:72:18:d5:0b:cc:56:09:7f:f4:f5:01:
22:21:23:17:48:1c:52:05:57:f9:5b:b6:be:0d:03:
b5:c8:a7:f1:28:7e:e5:3d:e2:d7:e4:44:fa:d6:01:
81:ac:61:5d:11:c8:73:b7:bb:c6:02:c7:6a:1a:ed:
f7:ff:ea:aa:37:e5:79:b5:6b:11:ff:e8:6a:56:de:
cd:7f:84:55:a0:a5:4e:38:f2:0d:73:31:d0:f7:97:
15:eb:d4:16:f1:84:f2:15:d3:6d:e5:c2:d6:11:24:
f1:7a:46:22:67:7a:0b:dc:66:26:f5:ba:d3:b0:f2:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:B5:30:CD:B2:34:ED:E3:57:14:EA:BD:98:37:B2:AD:85:77:BD
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a5:86:0d:c9:88:79:b8:52:28:bf:63:d3:84:d2:60:cb:ea:
d3:ae:2e:dc:a6:48:e9:0d:b9:09:52:58:8a:3f:a6:49:59:cf:
49:4a:09:20:5f:4f:98:2b:fb:f1:e9:cf:f6:43:b5:b9:47:77:
37:81:a6:77:65:6c:57:f7:f3:ff:cd:86:e0:f5:28:74:88:f5:
5e:fc:cc:6e:42:40:e6:43:f1:86:ef:02:84:e6:0f:0e:32:56:
d3:ec:b2:52:5d:7b:05:f3:2b:7d:db:2d:9b:31:a8:bb:8e:76:
7a:14:56:0f:0b:ba:b7:dc:32:ef:33:e4:ad:d9:52:7f:c1:f0:
2a:1f:33:07:f9:ce:05:66:14:31:46:7d:74:9c:3e:84:b2:da:
46:69:d9:61:c8:2c:04:65:ac:be:1b:93:ef:d8:2e:eb:d9:db:
02:67:8d:0f:ff:02:db:11:a3:00:d6:5a:9c:15:5d:93:d7:ba:
a2:af:f9:63:68:a9:40:a1:14:f7:db:4f:97:ad:45:e1:c3:53:
b2:6f:22:8e:37:4a:53:5f:36:4e:a2:c2:0b:9b:91:f0:9d:24:
6d:ba:9b:0a:4b:1c:f8:e3:ff:96:63:32:56:94:c9:70:64:a7:
03:3e:b1:90:2e:55:21:18:79:0c:75:79:67:83:bb:47:84:41:
bc:d9:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:39:48 2026 by rpki-client