Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: ZE3pEkxeBDT1dyMi4NOMxPTL9vIOVixpG+QIIhVXfoI=
Subject key identifier: F2:42:E3:72:02:4F:AE:8F:59:A3:0F:71:A1:69:35:90:13:EC:66:0C
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019CAB6B9F23EB66F4BC26105BC11D7389EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0FAC
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: r+9qkKMIjhbPEIVotOYwdqt5d1LwvBJvDFzfbE2LuLk=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9f:23:eb:66:f4:bc:26:10:5b:c1:1d:73:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=f242e372024fae8f59a30f71a169359013ec660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:66:92:48:61:1b:70:a5:43:62:9d:05:fa:
01:77:43:d6:24:52:da:92:9d:bc:5c:2e:03:39:09:
07:2f:06:8b:0b:21:f9:68:38:98:b4:1e:b5:d2:d6:
8c:c5:3a:20:0e:86:71:fe:bc:ee:81:a6:c1:ac:4b:
b9:01:d4:1c:b1:a3:f9:d8:9e:1b:a2:c3:d7:26:fb:
e7:fc:af:82:18:f2:d7:0a:76:3e:9f:c8:3f:7b:28:
a9:91:bd:b2:ff:0f:b9:9c:04:34:f3:63:94:2c:cd:
a0:49:bc:ec:4b:78:e9:9e:a0:0f:7a:d1:56:4d:ae:
33:c9:fe:e2:8a:40:db:4d:3f:be:b6:da:94:82:5e:
77:0f:b8:c8:a2:09:b3:7e:01:e6:da:3f:9f:70:89:
97:44:0b:d8:5d:e8:20:b1:26:a9:28:4b:bb:c2:61:
fd:f7:d2:68:fb:b2:91:02:fd:c3:17:ac:8a:21:ca:
27:3c:fb:c6:3c:40:ae:eb:58:53:62:b7:a1:4a:e6:
a3:aa:3c:b0:30:ce:f8:20:5d:6c:be:da:6f:2c:30:
27:33:39:67:f0:22:88:5b:db:fc:a5:2f:79:d0:65:
2f:b9:26:6d:d4:8d:38:0e:a2:b2:30:fa:c4:be:d3:
30:3e:4f:c5:a5:b5:36:a5:23:6e:d8:4e:a1:94:d7:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:E3:72:02:4F:AE:8F:59:A3:0F:71:A1:69:35:90:13:EC:66:0C
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5d:dc:4e:a2:4a:8c:d8:6b:3c:96:b0:e9:c7:d9:e6:b7:ae:
41:60:bd:b7:b6:6b:e6:c0:e7:65:d6:52:4c:c3:ef:0b:b0:29:
c1:20:63:77:51:b0:87:da:cf:8c:b2:9b:46:90:19:93:fc:85:
ce:6f:c5:5d:d3:de:bc:33:2a:d2:66:c0:52:48:ca:d8:4a:fa:
ca:3d:b9:e9:37:4a:ce:c0:ef:0b:62:08:3d:3f:6c:26:7f:7e:
bc:40:69:c9:19:3a:bd:2a:a4:33:4c:2b:32:3e:dc:a7:cd:8d:
a6:d2:2d:d9:d3:9a:d6:d8:10:d9:5f:aa:c0:b6:09:74:2b:fe:
fa:bc:af:a5:38:b4:fa:a5:bb:f7:b7:8e:09:68:b3:df:ac:74:
ea:c1:9f:a4:78:cf:16:03:16:97:4b:ca:20:76:1d:77:6f:84:
b5:a6:b1:3f:38:e3:f7:a1:e9:cd:55:3c:e1:35:8f:15:b8:52:
72:74:3e:10:f0:a8:2f:05:02:62:b5:b7:93:5c:b5:89:d1:ad:
34:0e:10:9b:a1:2e:04:ed:ab:59:ff:31:67:1e:b8:d2:24:54:
d1:97:d9:a9:d1:4f:b6:6a:a3:fa:eb:95:cc:93:e2:7c:7a:2f:
43:d5:ad:ba:1b:8a:45:d6:2b:77:61:ef:12:da:7e:57:69:af:
e5:65:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:50 2026 by rpki-client