Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: XRfgGD5XMZPlLixiExTZ9SChOZ1JKR9bDKl1QtTrDs4=
Subject key identifier: 51:36:B6:E2:9E:75:C3:6F:39:0E:97:E5:AD:CE:09:AF:85:A6:09:60
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019D3940DE8D1BEF1992454C2372A887C57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1670
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: 4VmOPx1dRvq0Fu+/KpkioffyW6MMrlbDHjHRxRPMwdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:de:8d:1b:ef:19:92:45:4c:23:72:a8:87:c5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=5136b6e29e75c36f390e97e5adce09af85a60960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:56:4d:19:0f:79:4d:8c:06:34:00:79:e5:
c3:f9:31:ad:5c:b1:6a:44:e0:cf:ff:06:18:b9:67:
7c:02:87:a3:94:63:44:5b:b1:96:31:35:03:8d:2c:
83:35:6c:93:32:98:1a:b6:48:8f:a9:0f:18:78:f8:
c4:62:ab:cb:68:b8:bd:03:33:5d:3d:c5:56:66:00:
34:95:d7:9b:c5:ba:d2:96:66:07:b9:81:9d:29:ab:
40:d5:d6:ec:83:25:f6:52:1e:83:6e:57:d5:27:6f:
7a:d1:c7:85:ab:ba:57:a1:4d:1e:cd:11:8c:5f:9d:
1e:9b:27:50:1a:a0:6f:25:26:b8:32:f6:26:73:5c:
73:a3:08:1a:91:aa:d3:2c:11:17:d9:1c:29:7f:3b:
3e:b4:b2:a1:4a:b7:cd:51:2c:f7:6c:f5:40:47:80:
7d:25:42:3b:b3:93:f1:79:83:6b:a2:77:c0:58:d5:
0a:0e:f8:e4:14:68:27:4c:bb:0b:e7:dc:d1:19:d3:
09:6f:1e:e0:fc:d8:d5:12:c3:be:e3:b8:ea:b6:1b:
87:59:35:88:fb:fe:e9:b6:65:d2:21:51:20:64:96:
f8:43:3c:b7:ec:d7:c3:0b:31:cb:56:f6:b4:67:34:
2b:34:ef:a1:25:2c:3c:1f:67:d1:30:7d:9f:8f:c8:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:B6:E2:9E:75:C3:6F:39:0E:97:E5:AD:CE:09:AF:85:A6:09:60
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:53:0f:2b:83:9f:96:de:62:0e:2a:fd:23:e7:89:36:1a:
51:1f:a8:73:3f:67:a8:41:10:82:85:34:cc:52:84:d9:fb:4a:
c6:50:76:47:bb:53:26:6c:39:c0:67:b0:28:87:65:2c:f8:73:
7c:ed:b7:61:54:14:3d:76:4f:ee:a6:68:82:f0:d6:0d:3c:6b:
3d:9d:f4:d3:c0:31:37:22:9a:8c:cf:7a:81:e7:5c:af:83:fd:
c4:c8:57:e2:70:98:6a:e4:75:ea:a2:f2:dc:64:c5:9b:69:5f:
bc:42:89:6c:84:a0:15:58:ae:dd:b3:98:8b:fe:9d:5f:4b:e7:
7c:44:7d:97:f5:1a:5c:84:6e:22:1d:4e:8e:10:f1:42:7a:68:
28:cb:1b:4d:c9:c3:89:64:e8:eb:1d:80:c1:85:d0:7b:e3:a9:
58:c7:a3:b4:b4:31:4c:a9:e0:5b:b2:cf:ed:46:cf:fd:e5:35:
39:c1:96:28:8f:1a:f1:3e:a9:cb:93:b1:fa:6d:c1:d8:76:31:
65:54:93:c5:63:56:ce:7b:f9:0d:0d:0c:da:a5:fb:dd:90:e0:
4c:67:56:f1:6d:1c:31:f6:d0:66:b2:45:9b:6d:69:94:66:2b:
9e:a0:e0:23:27:db:d0:ec:d0:25:14:d7:f9:56:79:d3:aa:85:
34:32:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:23 2026 by rpki-client