Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: 8JLl/TOc2NTpyF2cW2M/zErX5+jchl1sTwzBcAeCg4E=
Subject key identifier: F0:FA:F4:C0:DE:C2:D4:75:40:26:17:74:5E:78:19:A5:72:95:16:2E
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019CAC475690A3355D200A9276EDC0B5AEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 11B3
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: fUo2n0ObSyDEhry4vd7jMPhYeZIq0R0ihfgK8Y8BKAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:56:90:a3:35:5d:20:0a:92:76:ed:c0:b5:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=f0faf4c0dec2d475402617745e7819a57295162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:5a:ca:71:fa:6f:5f:a5:91:87:52:42:b9:
dd:87:d0:71:71:f5:19:0c:1f:c1:01:54:72:bc:65:
6e:95:26:c6:54:e3:c6:64:82:c5:85:09:b6:4a:3e:
8a:c9:67:09:b8:58:cd:54:2c:ae:a0:26:65:c7:6d:
3e:14:0b:6f:5f:02:34:4a:f4:46:90:38:79:06:f6:
c9:dc:7f:6c:ff:c6:ca:dd:03:b4:8f:51:b9:84:ea:
98:ce:3c:05:76:7f:d5:2a:fa:37:1c:27:8f:1a:21:
7b:04:d8:b7:79:bb:09:3d:ed:40:4a:0b:97:fb:54:
79:1b:fa:33:43:92:c5:18:c9:57:b6:59:dc:a7:f8:
f3:d4:cf:51:aa:e6:9b:e7:c0:f8:32:3a:a3:c8:65:
da:e4:27:be:2f:f1:c6:aa:61:c1:e7:d5:f2:11:1f:
f8:e4:e3:2c:20:ab:6c:84:42:59:5b:29:60:fd:c7:
41:cf:9f:f3:81:c8:32:37:52:11:30:48:9e:64:f2:
07:9f:91:ca:b8:b0:f8:4a:6f:f5:48:ea:f5:9b:b2:
87:d5:96:c2:42:38:81:50:9c:db:b2:d0:8b:9b:9a:
98:c2:f5:4c:03:7e:b4:3e:0c:3a:f5:58:52:df:4b:
7d:4e:ff:34:96:38:69:e5:27:56:42:6a:f7:fc:2a:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:F4:C0:DE:C2:D4:75:40:26:17:74:5E:78:19:A5:72:95:16:2E
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:fa:f4:d4:7c:1c:d8:cd:87:e7:d1:22:aa:ce:5a:90:df:
a2:51:cb:ba:c2:98:78:33:bc:01:f4:94:84:fe:15:82:0c:b2:
09:03:7c:b6:de:da:a6:3a:32:b8:19:8c:ef:25:0b:c7:2a:f1:
95:bd:00:70:75:0d:95:40:5b:b7:3e:18:f7:f8:45:ec:69:d7:
4a:ab:fe:5d:b7:0e:c1:96:e6:b9:10:03:c7:5b:2c:d2:28:8e:
be:c5:c0:04:4c:48:f0:42:bc:ba:8a:b0:75:40:46:de:4f:86:
d1:fc:86:46:c8:b3:75:76:b8:26:d0:5f:0c:4e:77:29:46:9c:
7d:98:fd:24:7b:c0:4c:63:32:a1:b9:39:73:1c:0e:32:ff:dd:
e1:78:c7:d0:e0:a0:94:10:96:da:1a:e8:ce:6e:20:5b:0b:a6:
a5:1f:82:c8:98:45:e8:8f:4d:db:af:55:18:0c:86:dc:8d:3b:
dc:f1:0c:02:24:01:59:7e:27:38:85:2b:af:0b:03:77:ae:e6:
d6:40:6c:c3:d9:ee:98:0b:60:88:ac:ee:8d:2a:4d:05:e5:bb:
8c:6d:98:20:4d:73:9e:c1:73:57:e4:ec:26:b3:56:02:89:5e:
34:ae:d0:0c:c3:93:52:6d:12:23:c1:82:f9:83:20:50:8a:27:
e0:d9:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:01 2026 by rpki-client