Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: gbBrPvKyO8oa6jxnQsbltFVD5KPTCZalmMnG031Kb+4=
Subject key identifier: 75:E2:48:A7:EB:04:35:65:DC:90:50:0B:65:69:98:D3:D1:24:74:21
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019CAA8FCD062FB1B02A3156A79BAD88AA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 09BD
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 6/VnY7VtKwatRldEiDg4kJmaW9SWaQVkCwB0rPRYxv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cd:06:2f:b1:b0:2a:31:56:a7:9b:ad:88:aa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=75e248a7eb043565dc90500b656998d3d1247421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:63:60:b2:a6:1a:0a:a1:0a:61:cc:64:e6:
0e:f6:18:80:76:bc:53:07:d9:95:15:a0:5f:3e:7e:
c4:b5:59:d2:2c:53:df:a1:87:67:e1:23:ff:a8:b5:
cc:ed:e5:01:56:5e:1a:54:40:97:30:02:ae:75:ea:
52:e4:ee:41:6e:fd:94:99:9c:4d:79:93:8f:ee:e1:
58:10:ee:dd:38:ce:f1:fe:08:cd:67:c7:46:ac:3b:
26:1b:6c:b7:2c:0f:db:71:0b:74:e8:64:18:b6:f6:
13:70:38:9f:2a:63:41:78:6b:59:61:20:39:e6:2f:
8d:d6:c1:85:93:8b:43:e8:94:d9:48:1f:61:00:16:
ec:70:31:87:47:bf:2d:1a:cd:25:a6:7e:f7:c9:25:
98:4d:be:23:db:12:f2:aa:19:24:9d:a7:e7:67:5b:
40:43:a7:06:79:8a:a4:72:76:70:05:57:2e:77:ff:
8f:69:d3:2f:74:5a:a8:6f:b1:88:0e:85:3f:f0:36:
df:d7:21:30:4e:d6:02:8c:68:ec:09:6e:88:f8:2b:
6c:a5:b5:12:65:ee:90:3e:d7:35:12:29:8f:10:49:
c5:1a:fa:7b:80:ce:45:0c:0f:42:67:e2:c4:f7:d9:
f2:a8:f9:a3:f6:29:3e:ab:26:f8:97:e1:2f:82:b7:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:48:A7:EB:04:35:65:DC:90:50:0B:65:69:98:D3:D1:24:74:21
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3d:59:48:47:7b:56:f7:24:60:a8:94:d1:a2:4a:72:6c:03:
bd:78:0f:10:f0:65:17:ea:7b:fb:56:87:bd:9a:ee:74:b5:89:
da:23:7b:ac:6c:90:89:51:14:de:e8:4c:29:f1:a9:6d:53:d5:
a3:79:0d:27:d4:c1:af:96:5a:d8:01:3c:6b:14:a1:e4:29:73:
1e:f0:a8:29:40:9a:e4:03:a8:93:44:4d:06:f6:81:35:d6:9c:
fe:4e:7f:60:e5:60:ab:d5:da:0d:3a:73:41:de:ff:c6:5c:05:
4b:f4:cc:63:78:d9:73:52:b6:03:f0:9c:12:d2:34:93:41:27:
57:51:48:93:09:5f:22:50:56:50:2e:09:7e:1f:64:b2:72:1c:
0c:ef:70:ce:da:1a:59:ed:b3:a6:c9:31:c9:28:c6:a0:7f:46:
23:22:53:51:90:93:f0:d1:7a:35:a3:a7:b1:35:b8:1c:36:d6:
74:27:47:79:9d:e2:ff:15:73:1b:d2:66:99:e1:63:42:c8:c7:
c4:33:9f:7c:4b:91:9d:34:ab:ad:65:5d:d6:44:a6:f8:dd:01:
c0:af:db:9a:7c:17:db:05:50:73:3c:13:1f:f5:4d:c5:ab:99:
0f:8b:57:ba:34:cc:2f:21:52:b3:ce:d8:d6:96:c9:d8:ce:9c:
a7:e7:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:09 2026 by rpki-client