Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: 6AlMOnuR0sXp7wAyctoAx84FF2HhbswGgGNyUNTxz4U=
Subject key identifier: 13:2F:01:B7:AC:11:06:5B:9F:2F:F0:13:04:98:56:59:8C:6F:8A:7E
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019CAC7E430C85297840E3CA659452A447BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: 8tqDXVylpPS0+mF5mhpVFQFugyKZ5HdKGvVUtP9SIGs=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:43:0c:85:29:78:40:e3:ca:65:94:52:a4:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=132f01b7ac11065b9f2ff013049856598c6f8a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:8f:16:47:a6:94:62:b5:c6:aa:86:15:b2:
83:3b:c3:16:7c:e2:65:c6:3b:ca:ee:95:93:16:e3:
e9:42:d1:13:5e:7e:bf:78:5c:fd:67:71:8c:9d:c0:
27:72:b1:f7:7a:68:41:5d:5b:47:9c:b6:a4:df:a7:
51:bb:2d:b3:ee:89:7f:e7:ae:b9:cf:d0:3e:94:ec:
04:24:f0:97:fe:46:60:09:c8:e1:e9:65:a6:38:69:
22:2c:ab:f6:87:1f:c0:25:c2:6e:9a:f7:1d:9d:77:
f0:c1:77:a2:11:55:b8:1b:0f:b4:b2:5a:8c:ef:25:
f4:d2:bd:05:fa:80:e9:0b:7d:72:a6:76:a0:5c:0d:
60:f7:26:31:4d:af:ba:17:75:24:49:0e:01:41:b3:
8d:62:69:3f:85:6f:cd:da:86:68:49:19:b5:25:62:
fe:a9:f1:ad:bc:2c:36:d3:10:a8:85:07:e6:57:b9:
84:fd:94:69:f9:ed:b8:2c:8b:e5:a3:a2:95:da:09:
0a:2d:9e:21:cb:53:aa:07:92:35:32:cf:39:d6:cc:
10:08:99:c4:14:94:91:d4:2e:f2:b2:4d:60:30:f4:
87:c6:f3:05:35:ff:32:e0:37:dd:fa:a5:d8:05:10:
72:b5:7e:35:0a:c6:9d:5f:6d:e3:42:f2:e4:33:79:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:01:B7:AC:11:06:5B:9F:2F:F0:13:04:98:56:59:8C:6F:8A:7E
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:11:35:c8:c8:c4:b4:0c:fb:ff:dd:05:15:c1:dd:cf:9e:
4e:fc:ae:92:a8:b4:60:e1:8c:e7:f7:51:e5:42:3c:5b:f4:50:
24:25:b4:6d:66:ed:67:5f:ca:71:a7:41:a5:9b:60:53:f4:4c:
2b:06:05:f2:36:ee:c8:13:e3:76:df:7f:3d:20:80:c1:6a:56:
89:78:cc:de:4a:b4:4a:cb:4d:25:9b:80:c4:38:6a:24:70:09:
76:28:7d:8b:0f:f8:83:d8:09:17:cb:70:da:ce:25:86:5c:64:
91:4e:d6:32:37:8b:b6:91:3f:e0:f8:5e:c8:d8:26:6e:f2:ed:
5c:96:88:d1:04:85:aa:2a:90:cb:e8:e1:90:6c:73:9f:72:93:
a4:f6:26:82:5b:bb:61:80:c0:0e:90:15:d2:d1:0b:13:6f:8d:
f1:56:dd:35:96:85:db:e3:1b:1e:33:b6:30:88:02:07:34:08:
75:e5:0e:11:2e:9d:58:99:ba:77:d8:3c:d3:2e:14:38:7d:7a:
86:42:cd:97:ec:d0:3c:55:b7:13:40:4e:c5:e1:1a:11:d0:f9:
23:a2:c5:03:76:1d:b9:de:47:12:d7:5d:fa:be:fe:73:e0:e2:
a1:a7:2e:fb:6f:57:1d:10:6d:f3:3b:97:ab:96:40:85:89:12:
3c:e6:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:19 2026 by rpki-client