Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: 7EvFH7PxJqmHRgqv21AmqEYNWR2Q5F9UzDuM2OrH2Bk=
Subject key identifier: 58:19:41:33:C9:26:BB:5E:6F:19:ED:A5:B3:0B:6F:4C:AE:73:A4:59
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019CAA5914E490E1D7EE6181598AA2FB7AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 13EA
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: jvpcB1SYqMm5pk1vhCczZLPD/DC3iaSMbMU6+6r+jaQ=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:14:e4:90:e1:d7:ee:61:81:59:8a:a2:fb:7a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=58194133c926bb5e6f19eda5b30b6f4cae73a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:52:1a:75:ee:76:e6:82:82:ee:66:85:27:
64:fd:03:b1:1e:45:b5:ae:da:36:7d:df:2a:f4:81:
74:b1:22:2d:09:e6:d4:34:7d:1f:a2:33:d7:ea:e7:
af:7b:cf:49:a5:24:ca:53:76:fa:c2:91:da:69:d8:
e7:da:4a:75:fc:cd:0c:3a:96:02:df:e9:e9:f5:3e:
84:65:b9:68:ff:71:4d:8c:df:6f:21:23:03:8a:17:
b2:9a:fb:4f:07:df:16:8d:e4:ee:a2:c4:c4:5b:7c:
57:46:13:70:5d:eb:a9:be:6f:59:2f:fd:08:4f:55:
70:d9:d6:f1:5d:c4:20:8b:2e:13:09:6e:22:f1:d3:
dd:2b:48:8c:29:b3:b9:47:80:7f:90:20:8d:bf:c1:
d0:a6:f6:eb:30:29:6e:00:e2:3f:c1:78:b2:cb:40:
83:09:a4:58:07:9d:85:15:a4:f1:ff:7c:07:b6:66:
51:b1:e0:2e:93:1c:7c:29:33:a6:ad:bf:db:78:9b:
e6:fc:62:d8:81:e4:90:d7:1e:6b:e9:d1:fe:3e:91:
fc:82:29:1e:dd:54:de:ff:a9:85:de:0c:14:db:47:
5e:17:0c:d9:cb:58:a5:c0:fe:09:eb:24:1d:5c:2a:
04:9a:27:ea:50:dc:7f:f5:5b:4b:78:aa:13:57:bf:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:41:33:C9:26:BB:5E:6F:19:ED:A5:B3:0B:6F:4C:AE:73:A4:59
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:11:c3:74:f5:fe:22:e8:a7:c4:bb:4e:59:ab:78:e2:bc:
a8:ba:2f:ab:69:94:6f:92:50:9d:9d:13:44:a5:a8:e8:db:8c:
32:f9:a4:41:55:c6:22:95:5f:16:51:fd:78:2b:58:fb:49:92:
1c:c0:3f:7d:63:a7:c6:ed:cc:74:6b:18:00:e2:c7:f2:19:43:
86:3d:2e:18:c7:a8:29:c6:67:59:42:2a:f3:64:51:e5:ea:e5:
c5:38:2e:4c:f5:0f:8c:db:1d:bd:ae:0a:af:27:fa:fd:71:7d:
09:6b:a2:b7:43:e4:ab:a9:ab:64:41:50:bf:8d:c3:cb:42:81:
b5:39:14:87:ad:7f:a1:35:0b:01:4a:99:e1:42:80:6d:77:73:
09:21:0f:96:e5:8b:6a:61:92:af:73:3e:cc:6a:dc:f9:53:c4:
88:6d:04:93:4b:e5:81:9d:0c:61:a5:e1:61:11:7c:b0:bc:f0:
a1:18:a1:de:84:4a:5f:0b:c0:f1:b5:72:c2:9e:61:da:bc:28:
df:56:39:c8:bf:64:00:b8:ad:3f:bd:86:18:35:69:df:b1:69:
8e:5d:22:5b:a2:24:25:4e:a0:a4:44:03:94:0d:78:1b:f7:98:
ce:28:2f:55:78:9b:9e:b0:28:fa:1e:48:bd:e1:ce:de:00:b2:
29:d5:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:06 2026 by rpki-client