Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: JKMxyLBSQOusSLT2IpGu9KkNtg6TrbLWo/Vo/XmY7r8=
Subject key identifier: 5F:CA:02:BC:AD:2A:81:37:69:35:21:DA:51:50:AA:D3:E8:4A:F3:2B
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 019D382DDCD09F3D11B2A113C205DB35DDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: VlcSPU0SSboucncQzfDMPKOtrJQ.roa (hash: u8Y9MDR5ph00NnslMwtKkPqxu4tVzHOEdeTM35TXuqs=)
2: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: qbLWI6rz0ct0Xph7KpHKpR+n2/q2ICM+ZXFBo6GJhmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:d0:9f:3d:11:b2:a1:13:c2:05:db:35:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=5fca02bcad2a8137693521da5150aad3e84af32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:14:86:02:ff:68:f2:4f:f2:10:90:bd:34:
26:74:3d:80:93:fe:ec:be:23:09:d5:ce:a0:76:32:
46:96:f6:56:ff:7f:25:e9:d0:2c:55:34:64:23:58:
60:74:62:ad:82:2f:f1:8a:6f:39:ec:d3:25:a9:d0:
6d:77:5a:7b:6d:be:be:ed:f6:e2:70:77:bc:93:fd:
e6:f5:7a:23:fe:b8:ec:59:28:f3:48:75:c9:d4:1d:
fe:f8:64:3c:b9:db:b3:a4:6b:c6:e0:15:1e:5f:8c:
7a:26:98:9a:af:32:c9:a2:5a:ae:8c:1b:95:82:86:
85:cd:95:5c:43:48:7c:b1:63:7b:40:ac:3c:20:b7:
62:04:c2:c1:05:61:6b:f6:4f:a4:22:71:8a:1c:4a:
22:69:88:f6:47:32:47:13:cb:30:5c:f7:3d:06:29:
c1:f0:1d:05:af:ab:fb:53:2c:5d:b3:a4:d7:fc:e2:
0e:3c:a3:c0:f0:ed:c3:15:41:bd:8f:f4:d4:56:9b:
16:2c:dd:0c:98:c2:61:96:73:30:4e:62:87:7d:81:
0d:c0:32:ab:00:3d:ab:3b:76:af:02:9e:03:2a:0d:
53:56:ee:65:2d:6c:ad:75:3e:a2:22:e8:80:d5:2a:
3b:3c:ad:36:0f:dd:14:46:35:84:02:20:d7:4b:17:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:02:BC:AD:2A:81:37:69:35:21:DA:51:50:AA:D3:E8:4A:F3:2B
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8e:2e:a3:66:b3:bf:bf:c7:aa:d3:72:0a:fc:74:34:a4:01:
cc:57:d9:41:39:85:89:30:3a:4a:13:18:80:a1:de:3a:ee:bd:
bc:8d:10:93:24:f8:28:4f:a7:92:b3:71:c3:4c:3a:03:6d:88:
b0:b4:52:b1:5e:86:0f:74:83:de:10:f4:33:1d:79:d6:56:f9:
75:7f:66:56:d5:ac:0f:11:5b:b7:5b:0c:77:42:6a:6e:32:38:
1e:a8:63:ec:38:25:69:7f:8d:be:b5:72:5d:2d:be:ee:33:43:
73:47:51:b7:f8:d9:09:0a:e8:c1:bd:80:64:04:ca:e5:89:c2:
66:84:0d:3b:f7:86:08:da:3e:d0:8a:a0:28:b7:f7:d4:36:1d:
59:64:9d:96:cb:9b:2b:f8:e7:80:43:21:1d:32:0d:21:f6:25:
e5:0c:40:b5:04:48:ce:b2:28:47:63:06:81:92:c5:ca:11:da:
cc:27:1b:81:3f:dd:46:06:7f:a5:55:d1:b1:49:2d:34:14:be:
7e:d0:b9:dc:08:ac:db:61:87:54:48:9f:63:86:21:71:7b:74:
43:8f:42:07:ef:e8:4a:9f:ba:4a:cf:f9:68:ce:cc:13:27:54:
9b:92:e5:7f:e9:a8:94:ea:1a:1a:33:18:5e:60:f7:53:6c:87:
61:7d:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:48 2026 by rpki-client