Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: BLWZtpplgqKeW6pUekSYo6K7iVAAAGZjlkjl8Sk7RrM=
Subject key identifier: 25:7A:30:05:AB:D9:A1:BA:CE:DC:2A:13:B5:B5:29:B3:08:8D:10:58
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019D130F4E878A22EC375C68E5310A92DEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0707
Signing time: Sun 22 Mar 2026 01:01:03 +0000
Manifest this update: Sun 22 Mar 2026 01:01:03 +0000
Manifest next update: Mon 23 Mar 2026 01:01:03 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: GoPDCfUE2taYwM3SKDhy8KBxGLWqtAoVKI9yvsdn8U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:0f:4e:87:8a:22:ec:37:5c:68:e5:31:0a:92:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Mar 22 01:01:03 2026 GMT
Not After : Mar 23 01:01:03 2026 GMT
Subject: CN=257a3005abd9a1bacedc2a13b5b529b3088d1058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:f7:8b:9c:3e:de:ef:c8:93:15:80:e5:85:
c5:fa:6b:ba:06:32:3d:25:02:90:da:89:36:70:22:
40:b3:63:3c:40:af:d4:1d:1e:bc:a6:54:de:c0:76:
72:15:0b:f7:48:27:94:18:75:dc:33:49:c7:3c:41:
cd:4d:3d:b5:1d:24:00:d6:e8:b5:51:11:73:fb:f4:
3c:51:fd:fd:40:bc:ce:46:7b:0a:86:b0:0d:ba:fc:
be:43:21:24:ca:85:f9:f5:bc:9a:df:b5:e6:f5:e1:
a3:44:bb:86:04:b5:02:92:c3:fa:82:cf:cf:2f:ab:
66:2d:76:b2:1c:9f:4c:c8:d9:3b:db:77:1a:ea:20:
8c:d8:c6:b6:2e:0f:ac:05:15:46:b3:41:dd:de:90:
00:be:ba:1b:d1:c2:fa:23:84:47:a7:08:c8:7d:3e:
2f:61:30:0e:7a:ca:43:c7:c6:f1:47:b6:07:2e:a9:
24:eb:b2:71:36:95:19:92:3d:a1:4e:16:ea:6a:c9:
26:8b:43:92:3c:6d:de:08:79:54:c1:0a:6f:f4:df:
33:02:ce:4a:0b:ae:06:4c:03:18:b3:2f:34:f5:b0:
83:a7:01:86:b7:83:89:04:c5:96:37:46:70:ab:42:
2a:f3:81:dd:31:5a:d4:6a:c9:99:1d:fc:a9:d9:d3:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:30:05:AB:D9:A1:BA:CE:DC:2A:13:B5:B5:29:B3:08:8D:10:58
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:55:05:ec:cc:9e:db:2b:d3:21:7f:dc:fd:0c:62:a6:dc:
d7:76:ac:b0:be:ec:03:67:2e:c2:18:ff:ae:f9:b2:d8:f1:16:
90:bf:b5:91:d8:6d:f5:1c:ae:3d:cb:73:e2:08:16:d7:f3:97:
53:1e:c1:ca:3c:58:20:ed:64:9e:e7:8a:7f:5a:07:3f:3d:4c:
01:db:2c:d7:e9:27:db:20:2b:93:96:ab:ef:f4:18:af:b6:c1:
29:3a:9d:59:f6:17:88:85:d2:36:82:bc:4a:ba:52:0b:97:71:
5e:fa:7d:08:60:f8:f8:48:eb:5b:5a:f1:2d:ac:c2:6f:d8:6e:
99:67:d8:2c:2a:b2:9f:8b:0e:36:1c:d8:a5:67:c7:e3:b9:82:
7e:aa:6d:13:37:87:34:42:92:6b:54:b3:a1:01:3c:86:5b:90:
fb:ce:70:36:88:ef:44:fc:f0:e3:c7:ce:f7:a2:63:74:4e:a4:
6c:9e:43:a1:38:89:5d:47:32:b2:0f:e9:83:eb:df:a3:f8:c0:
de:a5:74:79:7f:6e:c8:b9:48:38:01:78:71:35:fe:5f:12:23:
62:74:3f:e2:38:59:9e:7d:d0:df:e9:93:dd:e8:4b:70:e2:b6:
cd:52:07:a1:28:ef:3e:ad:2d:14:29:c4:32:69:fc:37:26:11:
a8:c1:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 07:02:50 2026 by rpki-client