Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: uTMOKioBWBwRH2wW+ExxaqNuPuzQDVFWhVGSSsIgOuE=
Subject key identifier: 52:C9:79:F7:29:95:77:FD:A5:62:91:CB:E9:74:3F:C6:34:0B:4E:72
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019CAEA3A6B7CA2456F353A0FBF5831F067A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1288
Signing time: Mon 02 Mar 2026 13:01:26 +0000
Manifest this update: Mon 02 Mar 2026 13:01:26 +0000
Manifest next update: Tue 03 Mar 2026 13:01:26 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: IKL6Lu96Ku8eMyAD2/1aPYhP65VWAnF8FhQl+4yWYEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:a6:b7:ca:24:56:f3:53:a0:fb:f5:83:1f:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Mar 2 13:01:26 2026 GMT
Not After : Mar 3 13:01:26 2026 GMT
Subject: CN=52c979f7299577fda56291cbe9743fc6340b4e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:56:5c:e3:de:6b:44:3c:c2:ff:88:93:eb:
27:3d:cc:c7:54:01:62:6c:dd:53:f5:f6:78:56:e8:
9c:ec:a1:8d:e3:6a:7e:ed:27:52:b8:8d:b2:4d:db:
71:0f:10:fb:1d:66:2a:7b:41:3c:08:85:4a:10:8d:
8f:92:97:c0:ba:47:71:b7:3e:e2:c3:d5:f9:73:0d:
ba:2d:19:5b:62:dc:fd:19:fa:16:b7:c6:01:fe:2c:
46:db:93:47:d9:84:96:c6:1b:29:b7:12:23:50:58:
e1:c7:cc:d3:2b:e2:fb:ec:c9:8d:0a:e2:8e:c2:a3:
3f:8f:2a:83:ce:bd:1a:2c:88:c3:fa:b5:75:a3:fa:
94:e4:8f:6f:25:4b:b9:48:51:70:e8:ff:85:70:38:
69:42:75:8f:4f:b3:f7:8b:e7:96:87:d5:3e:27:b8:
88:d7:35:5a:ba:5f:3e:7d:82:df:a9:2a:75:f6:8d:
1b:d9:13:a8:de:f2:87:3f:26:a1:e6:ed:e9:32:ec:
5b:b9:7c:12:89:6f:f8:b6:08:02:6e:75:3a:03:29:
f1:e8:00:f1:c0:19:2d:d9:73:a0:43:79:55:2f:5a:
81:5a:90:03:f6:38:2f:f3:ad:f3:15:77:d3:91:98:
8b:47:28:35:59:0e:79:c3:d0:08:14:bc:ef:ff:1d:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:79:F7:29:95:77:FD:A5:62:91:CB:E9:74:3F:C6:34:0B:4E:72
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:fa:3b:d2:d9:47:b7:fd:57:86:2c:03:bc:02:97:7a:8f:
e2:9f:be:6f:87:fa:18:d9:4e:f4:c5:4b:a5:1f:e4:8a:91:7b:
cf:eb:2b:b5:e7:cf:75:da:d1:71:79:40:50:dd:21:5d:88:72:
b0:dc:5a:a9:6d:31:28:c0:36:01:53:15:b6:df:03:15:7b:a2:
a5:af:21:de:c1:30:7e:31:b2:c0:82:c5:62:8d:0e:cc:83:b6:
e3:a7:3d:0e:5e:7d:ee:7b:23:ce:6d:33:36:8d:eb:dc:d3:5d:
0d:68:7f:19:1b:71:19:51:5d:71:87:27:fb:cb:14:0a:bf:3f:
88:50:8c:12:a2:a2:13:3c:7c:21:5e:a1:74:c2:a3:cb:3b:76:
45:ed:13:e7:11:18:1d:70:a7:6e:77:4c:92:7a:ae:55:f9:d8:
79:37:4b:4f:26:66:08:55:e6:7d:70:f8:41:a7:91:fc:a8:32:
46:55:53:a4:7e:37:06:15:d5:f3:7e:35:f9:59:e5:8d:1d:6f:
ff:38:ff:87:08:d8:17:c1:ec:ee:61:2e:bc:e7:5a:90:9f:68:
98:1e:f9:1d:1e:84:29:9a:f5:6b:19:d9:62:3a:20:12:0e:7d:
5a:ef:61:a8:bc:3d:c6:31:1d:5f:4f:e7:89:18:68:18:61:07:
03:44:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:19 2026 by rpki-client