Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: BVYOuqV69f1qRhslNIwLcSGaOoj/bqdFv1K8WH0ZWjQ=
Subject key identifier: 21:65:C1:30:84:D1:59:48:ED:FA:F7:64:0C:23:66:B4:FE:C6:0E:40
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 019CF9F47AA7CB9602BD7B047291DD798756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 1873
Signing time: Tue 17 Mar 2026 04:01:14 +0000
Manifest this update: Tue 17 Mar 2026 04:01:14 +0000
Manifest next update: Wed 18 Mar 2026 04:01:14 +0000
Files and hashes: 1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: 0zxNmJFHuvXS3SwrpLkUcTmTSY1ZSN+9rsandokJYco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:f4:7a:a7:cb:96:02:bd:7b:04:72:91:dd:79:87:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Mar 17 04:01:14 2026 GMT
Not After : Mar 18 04:01:14 2026 GMT
Subject: CN=2165c13084d15948edfaf7640c2366b4fec60e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:e9:47:3d:e2:38:10:bf:da:1a:e2:9c:ad:
15:ad:46:a5:19:45:e9:66:ac:dc:30:b2:1e:51:18:
f2:8e:9d:55:14:82:52:66:18:76:f8:92:a6:b0:80:
15:3a:20:ec:d3:3c:f9:42:9c:bf:2b:c4:4b:1b:3f:
d2:7a:e7:e6:a8:43:af:a0:a1:d1:fc:fa:fd:6f:8d:
29:71:4d:7d:15:c0:58:b2:d1:f1:db:56:8e:db:95:
85:c0:d1:a4:59:b0:31:74:47:03:71:d1:1e:14:21:
51:06:8a:1e:28:54:27:5e:a9:78:0e:be:7a:5c:cc:
de:4a:7d:24:8e:7a:c7:ff:be:00:2e:6d:8b:b7:3d:
2b:72:0f:0a:69:ec:9f:1c:54:b3:34:bc:5e:8d:00:
67:57:94:51:2b:c1:68:49:2d:f3:27:75:85:bf:2a:
d2:16:de:98:f0:d8:8e:d1:34:c8:e6:5b:7a:cc:e5:
92:bd:f8:1c:1b:46:e3:ab:82:e8:44:07:cd:c3:5d:
25:af:03:2c:63:a3:b9:dc:6c:39:dd:73:cf:a1:33:
f0:a8:a9:b1:59:49:6c:76:a6:30:c9:1e:79:65:37:
97:cb:62:15:43:5d:dc:60:07:38:c0:9a:f8:d0:26:
29:d3:ff:d8:37:3f:e8:9f:6c:72:4f:07:5a:26:e6:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:C1:30:84:D1:59:48:ED:FA:F7:64:0C:23:66:B4:FE:C6:0E:40
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:97:9d:02:77:e1:a9:9d:ef:ea:7d:1d:7b:3a:1a:eb:0c:
03:7c:d0:85:5c:f8:dc:e8:03:58:4a:1c:e9:b4:b4:f2:05:10:
87:14:70:b4:18:f1:27:f1:79:57:dc:18:e9:93:3d:5d:a9:9f:
e6:87:3d:dc:df:23:6c:4b:af:84:44:5b:a2:8b:93:5a:98:34:
1f:69:8e:26:00:63:b9:14:1f:c1:9c:47:31:41:ec:1b:db:54:
bb:b0:cc:7f:2c:15:a3:66:41:5a:c4:ce:03:13:97:e0:92:2c:
71:42:8c:c8:27:e1:cd:c5:0c:d7:37:16:41:1a:97:09:92:9c:
7e:0e:c1:e8:f2:ec:56:6d:7e:62:36:8e:07:44:f9:87:71:1a:
b1:a5:4a:f8:56:9a:98:44:3d:63:fe:dc:62:01:47:1a:d3:a2:
bb:88:07:a1:9a:12:e0:31:3f:d0:89:0b:5b:99:2b:56:cc:0e:
e8:be:63:e7:29:be:22:f8:16:e1:ae:4c:49:08:72:cf:90:e0:
bf:c6:0c:4a:57:20:7d:11:38:22:c6:ae:af:2e:ea:c5:18:f2:
33:d6:9c:4a:2e:03:87:4f:f9:fc:c3:f7:2e:23:60:26:54:d9:
de:9b:80:cb:b7:17:7e:e3:89:be:3c:87:52:2c:38:bd:95:40:
bf:ce:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 06:39:52 2026 by rpki-client