Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: /eIqAFRQlSX6yNsUsw4N1byWT7X5+qqj/XZ3gQmFU68=
Subject key identifier: 86:FF:14:7E:CF:F2:C5:13:5A:DB:4F:E8:B8:C7:B9:6A:2F:0D:DF:BE
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019D35643D6081C9A5CC809BA63D7C4487A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 08A2
Signing time: Sat 28 Mar 2026 17:00:54 +0000
Manifest this update: Sat 28 Mar 2026 17:00:54 +0000
Manifest next update: Sun 29 Mar 2026 17:00:54 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: XiZ1YHs+PVrMV0ambl8PhjA48qgDROTpHqFao2OkxUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:64:3d:60:81:c9:a5:cc:80:9b:a6:3d:7c:44:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Mar 28 17:00:54 2026 GMT
Not After : Mar 29 17:00:54 2026 GMT
Subject: CN=86ff147ecff2c5135adb4fe8b8c7b96a2f0ddfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:88:0f:b7:6e:4c:b3:bd:a2:78:54:4b:71:5d:
fd:70:79:44:3d:39:07:cc:1f:04:d2:a7:c8:2d:2a:
10:80:5d:2c:d2:33:3f:d2:04:47:48:36:97:0a:22:
8c:69:96:a9:9e:71:f0:38:2c:87:d5:0b:53:46:c9:
38:22:50:2d:27:14:8c:cd:84:3a:38:e3:19:e4:76:
d5:d4:74:e0:3c:c8:2b:74:c5:7a:08:04:c5:3c:ee:
e5:c4:8d:4f:d8:66:73:c6:ce:11:80:ee:dc:84:c7:
31:30:48:72:52:e4:53:51:9a:c2:f2:cc:2b:fe:db:
d9:7b:e7:82:de:86:3b:f2:30:b9:3c:b7:e0:b1:df:
71:fe:99:48:e5:f1:ef:2c:0b:08:b7:5b:be:65:8d:
f8:d3:11:c7:ad:16:f1:8f:c7:fa:1d:19:35:23:42:
24:c8:b9:81:f7:88:4c:19:f0:39:4e:84:4c:a0:d5:
8a:2f:8a:63:83:d0:27:8f:86:92:10:65:72:58:5b:
16:af:69:08:09:57:07:89:e0:f6:03:d0:f8:cd:6d:
2b:28:a7:28:5f:e0:89:d3:ff:24:a3:56:5e:86:34:
29:14:86:06:39:05:20:4e:04:f5:31:9e:a4:fe:e9:
76:81:c7:a3:13:dc:0c:a7:b9:ce:1f:5d:98:6f:39:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:14:7E:CF:F2:C5:13:5A:DB:4F:E8:B8:C7:B9:6A:2F:0D:DF:BE
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d9:05:5e:a7:aa:01:98:24:84:a9:3e:bc:a6:a4:bd:b0:1a:
ae:90:70:c0:fd:eb:b8:8e:67:03:f4:9c:65:47:59:ee:c7:6b:
0d:2d:f4:e6:49:bc:0c:5a:e5:44:97:23:43:98:6f:b1:30:84:
a5:be:0f:20:be:22:46:e7:3f:5b:e3:0a:f9:1b:73:c3:59:64:
47:8f:c5:e3:41:b6:f4:8b:c8:5e:d8:e0:73:0c:2e:97:87:c3:
8d:85:11:9e:ec:95:ed:61:51:53:d3:2d:cd:cf:e0:b7:85:7c:
e8:8d:f0:8b:67:c3:89:67:61:b7:60:90:8e:0c:50:ae:98:2d:
b9:3b:3e:ce:8f:a1:4a:49:b6:4f:75:da:83:29:ed:18:66:48:
af:3d:75:0a:d3:d8:dd:4f:5e:e5:a0:fe:96:a2:f8:af:7a:d9:
42:48:25:ee:4e:33:bb:3f:36:df:96:04:27:3c:a6:f9:17:3f:
b4:0d:2c:49:e6:f3:6e:3c:43:2f:1a:cb:e7:73:e9:90:25:37:
45:19:ea:03:cd:4d:7d:91:e4:74:c2:41:eb:b9:5a:36:08:8c:
fb:a9:b6:90:af:d3:65:81:01:3c:e4:97:a8:b4:9a:fb:6d:2f:
5c:18:6e:13:5a:93:9a:41:fc:72:87:b7:ca:69:0b:fe:23:b5:
c5:28:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 23:17:18 2026 by rpki-client