Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: CkstKlbfFtKcwjMgrmVURMLTynGse9me0FH8+cERFVI=
Subject key identifier: D9:73:8D:A8:33:95:04:24:6D:25:A2:E2:80:C2:40:8C:22:5E:DE:72
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 019D382E1CF86C3B612FF2FB3D62EA5AC08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 154E
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: jPFGqsU9p/J9c/1VzJV1tsXf0/4pxpKH9pu5twWKUME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1c:f8:6c:3b:61:2f:f2:fb:3d:62:ea:5a:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=d9738da8339504246d25a2e280c2408c225ede72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:0e:dd:e5:32:72:95:62:9e:88:a8:04:e0:
ae:86:88:57:28:6a:08:1a:76:a1:88:e9:8e:58:7a:
82:c3:98:34:41:14:e6:33:26:22:08:e5:72:3a:a7:
9f:5e:22:f3:db:cb:a0:da:5a:f1:fa:4c:92:19:73:
91:b8:5b:40:a9:28:a5:5c:98:24:2f:3e:d7:8a:4f:
5e:4c:17:6e:b9:ad:46:90:59:21:75:4a:7d:fa:dc:
ff:7b:82:ae:d6:a7:e0:2e:b4:32:89:ac:93:73:14:
1b:17:3b:c3:eb:de:b6:b6:68:19:e1:af:c3:09:8a:
90:94:fe:30:47:de:3e:09:8f:6a:a1:9c:9a:83:4f:
be:25:b3:c7:b5:bb:70:7c:bf:ee:46:b5:4d:0d:2c:
fe:9f:92:c4:fc:08:07:d5:3c:f0:56:e0:ae:57:9a:
f3:21:a9:a3:5c:3b:48:2b:dd:a7:5b:ea:8e:79:68:
59:a0:c1:66:a2:06:c6:f0:d6:d3:fe:d1:78:b9:b3:
37:33:22:27:82:83:1c:51:74:a3:9e:5b:a4:27:6c:
bb:4b:09:e7:57:78:19:09:2e:09:f5:5b:6f:e0:4f:
d9:4b:ff:c7:25:a5:bf:8d:da:b0:bb:19:47:1a:bf:
52:33:d2:aa:4b:ea:bd:bd:45:74:f4:97:6c:35:f7:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:8D:A8:33:95:04:24:6D:25:A2:E2:80:C2:40:8C:22:5E:DE:72
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ec:a1:92:e9:70:5c:ee:b9:2e:13:6a:6f:e6:e1:6f:97:26:
83:a4:a2:b9:09:52:a1:7b:a1:36:39:71:1f:a4:95:b7:43:44:
0a:4f:c1:14:bf:17:b8:64:ee:6f:5e:f2:e0:61:3a:cc:4c:46:
79:81:f1:84:17:4b:d6:5b:f9:bc:4c:22:86:cb:c3:95:9b:f2:
17:5d:68:e1:fd:39:73:44:f4:1c:01:57:e7:d3:14:e8:9a:fe:
67:81:33:7c:8a:19:0f:51:35:cd:45:6b:98:05:12:21:6a:a1:
10:7b:51:41:41:2d:09:b7:6d:84:52:b8:c4:3e:17:f0:68:47:
5c:b4:8a:42:83:5e:aa:a5:3a:a8:c2:8e:4f:91:ca:be:d8:f3:
6e:43:06:50:12:ff:b4:6b:b8:9f:4c:b3:c5:1c:c5:a8:86:dd:
31:7a:2f:ce:27:21:e2:48:81:ca:09:0d:61:07:93:9e:01:78:
67:e5:c6:06:f7:83:c9:3e:db:f4:15:98:10:35:88:db:5e:78:
e2:52:6b:31:97:f6:21:58:47:f0:9a:43:71:41:c0:b7:73:be:
ed:2f:c9:6b:04:1b:5e:27:f5:b5:87:5e:e5:58:85:6a:04:92:
dc:6b:ad:c1:1e:72:d3:b2:ec:54:39:a7:75:0e:13:df:13:98:
82:9b:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:16 2026 by rpki-client