Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: bgirxPO7Ms6GhAI36YXp6Aqd+MB1ZR4xo9caBy2N4JI=
Subject key identifier: 55:E7:B1:16:02:5A:2B:C0:FF:77:C9:B3:B5:9D:3D:EA:D6:92:52:4D
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019CB0FF6E41774C6305EC440821B2ABC049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 013A
Signing time: Tue 03 Mar 2026 00:00:55 +0000
Manifest this update: Tue 03 Mar 2026 00:00:55 +0000
Manifest next update: Wed 04 Mar 2026 00:00:55 +0000
Files and hashes: 1: Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa (hash: 1KEdvoLP6yhjWGPI+w0FZQ+G9oJgjKxPQ04M4Cgw2Vs=)
2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: bMY1QM1/26FKYKn6jO70WXwZ1KfGCdikJoH8tiLAVjU=)
3: hB2BZEp3k3snIXX7WqS-RdwWQys.roa (hash: 8rMtnmtq8bnekYwB36ieFLOQVbfHr0cVP7kSuphbKKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:6e:41:77:4c:63:05:ec:44:08:21:b2:ab:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Mar 3 00:00:55 2026 GMT
Not After : Mar 4 00:00:55 2026 GMT
Subject: CN=55e7b116025a2bc0ff77c9b3b59d3dead692524d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:dc:79:51:a6:ac:73:31:8b:cc:65:e9:14:
c4:59:0e:e4:be:a2:e1:fc:2f:08:34:af:30:83:4f:
7e:19:44:7a:43:60:c9:06:9e:83:53:b0:cd:08:c4:
8a:6d:fd:fe:31:42:03:15:4c:2e:23:d7:4a:d1:95:
15:69:d7:bc:de:06:af:7c:a3:c5:68:39:5a:1c:67:
c9:b4:3d:76:be:f8:4b:d1:47:0a:08:ea:08:c5:31:
15:ec:26:5d:ec:69:09:d4:7d:d5:5c:2c:d7:8e:3e:
92:df:43:0b:7c:1e:f6:bb:8c:73:7a:54:5e:78:c1:
ea:b1:4d:cc:ee:82:33:14:e2:4b:ae:26:97:9e:f5:
1e:9c:8e:78:23:88:d1:a2:4a:7c:54:cc:61:f9:d0:
07:16:0b:82:75:7b:4a:10:08:82:c1:07:3b:27:95:
7e:c2:36:4c:03:17:54:f3:86:d0:6e:65:e7:4e:71:
b8:be:de:02:fd:48:93:c7:64:da:27:12:51:f5:ae:
ab:d9:8a:28:c3:72:0d:ea:24:b5:1d:fb:23:69:a4:
8a:19:72:0b:92:5e:1e:a6:63:ab:83:78:ed:96:0d:
63:0c:37:6f:29:f5:de:73:cb:84:c5:35:c5:80:d5:
da:3e:f8:2b:3c:ce:36:e5:a3:41:cb:e4:a8:41:eb:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:B1:16:02:5A:2B:C0:FF:77:C9:B3:B5:9D:3D:EA:D6:92:52:4D
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ba:68:59:37:8c:9b:3f:6d:3a:60:a8:cd:e7:ff:29:b2:e7:
93:11:48:d8:a3:e0:4c:0a:48:27:17:17:f0:1a:22:f2:19:f9:
2a:91:bd:98:3d:2d:64:be:74:ee:ea:ed:5f:51:2b:32:0c:17:
17:28:75:0d:b2:d5:8d:a6:9c:1d:b9:ca:14:a6:12:0f:8a:0b:
a8:b9:3e:7c:09:8b:18:d4:97:d9:1c:35:c0:4a:ba:cf:f0:3a:
50:12:69:4d:67:5d:18:7c:31:c6:40:b7:ee:dc:c3:c3:7f:ec:
39:65:63:e6:eb:d4:26:4e:21:b1:a9:59:31:e2:1d:d6:2f:e4:
18:da:52:c4:d6:7d:40:d2:a0:31:81:86:c3:4f:94:18:8c:ee:
ea:7c:0d:d9:27:b6:a7:7d:2b:bd:08:a5:c1:89:c0:2a:c1:a6:
3b:a3:2f:db:ad:65:f2:45:d1:e9:02:bb:bd:d8:30:2e:15:29:
41:1c:36:eb:e5:47:8f:1c:f1:c8:03:9d:b5:14:47:03:4e:bf:
02:97:78:9c:58:03:62:50:b9:80:6f:4f:23:f7:62:59:d5:2a:
24:3d:c7:bb:1a:45:f0:6d:ec:38:c9:1e:b0:37:43:52:69:dd:
ce:60:39:2d:16:cd:88:0d:60:92:0e:0f:00:10:5c:25:52:a2:
58:2a:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:32:05 2026 by rpki-client