Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: Sd2NVmSFUkQ9yT6H1IzzsRzx0DtdrJha1RVn9rSj/OQ=
Subject key identifier: 06:F1:32:A4:B8:EA:1B:E7:CC:7A:7D:00:1B:73:6D:36:94:32:0B:D6
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019CAC7E07A2C5B678A5D5F3FF187D5AE2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 11
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: htMYBheR6+VcR/yz0LduQUlg3tlEH7cjsTLb6QSUAtc=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:07:a2:c5:b6:78:a5:d5:f3:ff:18:7d:5a:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=06f132a4b8ea1be7cc7a7d001b736d3694320bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:fd:fe:d8:b2:71:01:75:69:4c:ca:f6:5f:
a7:7c:96:5b:6d:44:82:ee:d1:19:cd:b9:0c:66:df:
0d:ed:c7:8c:c4:2c:7b:56:91:70:81:7c:11:1c:a0:
e4:f0:95:7b:db:32:ad:df:83:0d:48:21:d6:e4:45:
8e:9b:f2:17:1c:0a:14:5e:60:f3:9b:f0:62:3f:09:
1e:4c:dd:a2:c3:ee:a8:22:c3:82:be:ff:24:2c:8b:
b8:f4:b7:34:f9:77:6b:13:58:4c:76:35:23:a3:4c:
7d:a6:fc:29:1e:52:5e:90:42:94:a1:27:c0:dd:11:
18:39:a7:56:3e:a6:7d:59:0c:47:f3:a0:d4:e1:b4:
fd:86:f4:ef:a4:5b:78:90:55:86:74:ea:4d:92:38:
7c:b4:6c:24:18:49:9c:e2:96:c9:a7:33:84:ee:00:
c0:24:93:20:73:1b:f0:8a:7f:e5:c6:7b:75:84:01:
b4:cf:bf:b1:b7:4a:66:24:1a:16:76:d9:39:48:c8:
d1:df:2f:3b:8e:9c:a7:5d:75:7a:d4:50:8a:c9:ba:
64:6d:9f:48:98:a5:06:06:6c:84:dc:3e:33:56:17:
80:03:87:ce:0d:0d:72:ed:8d:2b:71:58:8b:86:8d:
4d:c3:4b:d6:f8:ad:a9:d0:1d:e9:49:12:63:cb:4f:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:32:A4:B8:EA:1B:E7:CC:7A:7D:00:1B:73:6D:36:94:32:0B:D6
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a9:39:e7:9c:8b:6c:be:00:db:ee:9a:2e:e3:ed:5c:ca:9a:
e3:3f:31:e1:e4:4c:e5:78:89:fb:ee:73:fd:04:1a:30:a0:2e:
ec:77:70:3a:78:22:76:81:6d:4c:c5:fa:fe:83:77:79:67:c3:
ce:6a:7e:5a:5d:72:64:89:66:b2:40:83:58:b9:78:d2:76:c1:
2a:61:f9:e6:3e:ac:8e:26:58:73:7a:21:37:af:02:48:ba:90:
b4:9d:29:bf:67:70:37:2d:36:6c:91:8b:ce:46:1d:77:01:7c:
ae:17:99:b7:c9:bc:18:2a:a3:92:59:fb:ea:5c:cd:20:6c:fa:
fe:56:b0:c9:90:b4:2d:6f:74:8e:93:0b:30:35:88:0b:29:55:
b4:b0:f0:71:86:33:fc:aa:a5:c7:54:41:ad:0b:7e:4f:77:0f:
63:d4:c8:9d:a6:81:6f:09:7f:75:a7:60:b7:dd:97:05:29:fa:
26:9c:c7:99:ac:3d:8e:19:47:ac:9b:b8:a7:ff:13:01:ec:e4:
5e:f9:0b:ca:cc:b1:66:f7:b2:15:e7:ed:15:0d:cd:3f:a1:b7:
62:ff:ad:9a:15:39:0e:29:0e:36:3f:32:93:27:02:7a:56:3a:
98:75:c4:f4:6c:89:d4:de:2a:1f:c9:96:c0:c2:19:30:12:00:
f9:5c:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:28 2026 by rpki-client