Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: estlqETUIkga2nz8ghE0hFPrZlrW0nLICHCRD2PwEsg=
Subject key identifier: D4:A9:59:7A:A9:8B:A8:59:46:55:E4:81:DD:92:6D:64:E3:C0:D9:90
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019D3977DC8C8763DCD141F9B4D8E69A459C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 038C
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: Vxijl7ZHOsV704q8evglEcbFwBs.roa (hash: KARNA+c405NIrwYFEYCF2kgsRfVWL6vXKf3QD7GyrdE=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: yxmRjuHaRkmPfYa7EPyt7cytH1a+sBREtTnys900TE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:dc:8c:87:63:dc:d1:41:f9:b4:d8:e6:9a:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=d4a9597aa98ba8594655e481dd926d64e3c0d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:de:a6:aa:4b:33:8e:8b:d5:9f:cf:9a:81:
e7:fa:dd:0c:dd:ee:9e:bc:e5:07:c4:16:24:33:ec:
46:df:70:51:54:07:a2:13:d2:c6:14:b9:6b:c6:b5:
73:ab:03:43:e6:92:26:a1:9e:1a:a5:2f:a1:bd:dd:
5e:28:b0:82:46:8b:ca:62:f8:42:a6:40:97:8c:b2:
01:88:ae:ee:3f:22:df:94:95:f8:65:63:c0:9e:39:
3a:90:31:fd:c7:73:7c:c1:fc:fb:5f:46:eb:51:19:
5c:5e:ac:c7:f5:fe:f5:aa:27:55:ab:81:49:9c:d9:
1d:59:d8:af:c6:da:46:49:9e:8a:2d:67:c1:f3:50:
ae:a7:59:bd:7a:4f:b7:bf:d8:9d:7f:cb:d0:34:4a:
09:96:82:da:1c:5b:44:d5:5a:9b:b4:8a:f7:a8:48:
a9:50:f6:5f:f8:d0:96:02:58:b0:bc:75:8b:05:ed:
8f:ff:34:25:bd:6b:4f:fe:d0:95:f5:7f:51:59:22:
58:dc:c3:8b:e6:41:17:ff:2b:ae:1d:60:48:b0:36:
13:47:5a:7c:9b:1d:dd:1e:46:c5:30:ab:95:51:0d:
fd:99:2d:9b:96:94:83:60:d3:09:e9:b9:6f:23:c0:
29:a0:69:f9:57:5d:48:a3:88:68:5a:ca:7f:24:47:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:59:7A:A9:8B:A8:59:46:55:E4:81:DD:92:6D:64:E3:C0:D9:90
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:c3:4a:04:66:f7:18:b8:b3:37:5e:1d:b9:08:b9:af:5d:
27:40:fe:84:d4:83:58:dd:af:8e:f9:22:a7:a9:59:22:a8:17:
b3:70:07:01:18:cf:e7:3b:dc:4c:af:64:c7:b9:39:c0:51:63:
1b:0e:06:e5:4a:fc:ba:c7:0b:58:89:16:d4:35:8e:a5:d7:4d:
04:ba:32:37:d4:4d:fc:e4:c1:06:57:1b:5c:3e:25:27:00:f0:
49:df:ab:95:6c:9e:bc:3f:37:3e:f7:5b:b5:52:bf:78:a0:19:
98:38:e6:09:5a:5c:e4:9a:ff:fe:ad:b9:34:47:9f:ae:a8:18:
3e:03:35:fa:62:80:64:d6:38:4d:6b:5b:e9:9e:e8:ae:0e:6b:
a5:6a:41:90:7b:73:33:8d:c7:a5:c0:06:ac:ce:26:b1:eb:9f:
04:59:f3:ac:03:99:ac:da:a0:a9:34:48:ff:6b:14:6b:b7:87:
e2:31:ec:e5:aa:18:fd:a2:0e:9f:3d:17:b4:e5:9d:8d:81:f3:
5b:59:05:d7:cd:d5:b1:3f:8f:91:aa:a8:69:e0:a9:95:5d:1c:
0e:4c:49:0d:d2:49:53:be:fe:da:d0:67:22:94:e8:25:3f:0c:
15:c3:2f:d4:d9:e6:56:54:ef:74:fd:21:8d:6e:fd:6b:b5:fd:
2c:59:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:51 2026 by rpki-client