Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: QVKaPWID3PYtrys1qmRXTwygxlop3KNF6jwMRKwG9Sg=
Subject key identifier: 25:38:FB:16:FF:82:5A:DC:02:C4:60:84:E5:95:21:A1:E4:4A:C3:FF
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019CAAC681ADE604BCCB812E45D93D659CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 1586
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 3fIUt/3unIhHA0pCDrKhe4iO4tqzBxJy3vd4cXH7Eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:81:ad:e6:04:bc:cb:81:2e:45:d9:3d:65:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=2538fb16ff825adc02c46084e59521a1e44ac3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:88:09:a3:f5:7e:8d:24:c3:1d:e4:63:1f:
f3:c3:f6:ff:03:88:80:2e:fb:2e:43:5f:95:79:fe:
7b:f1:00:78:c6:75:63:c4:36:68:ad:6e:c8:b8:7f:
86:e6:40:d5:3e:be:6e:a3:e8:eb:9d:3b:64:db:56:
fd:1d:50:ee:d3:31:24:33:92:b4:61:bb:cf:ae:08:
4d:55:4c:cf:48:b0:30:7e:a0:21:6c:1a:06:d4:57:
eb:d4:22:ce:03:a7:fa:2a:a6:b9:ad:f7:50:2e:b0:
fa:e0:26:43:72:38:fe:5d:03:19:96:82:0a:5b:43:
c5:ec:a7:e5:d4:d7:c2:aa:bb:57:47:9b:16:58:af:
8b:9c:fb:c2:e4:e0:fa:42:97:ca:fd:c9:43:ce:fc:
af:10:24:2c:2a:75:cd:87:6f:44:42:40:aa:ba:0c:
9e:e2:93:1e:de:03:1c:6b:e2:3d:d7:d2:ed:d1:f9:
5b:27:51:54:f7:3f:39:d6:3a:f8:c5:df:ca:24:15:
81:d8:2c:0f:4e:d6:d9:07:33:48:42:bd:a5:4c:21:
f4:ad:74:b1:f4:96:92:26:2e:2a:55:78:c9:44:9f:
10:08:92:d0:3d:f6:29:28:38:a7:dc:a8:d3:e8:8e:
42:9a:38:57:33:ca:13:71:86:49:e3:4e:27:75:a3:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:FB:16:FF:82:5A:DC:02:C4:60:84:E5:95:21:A1:E4:4A:C3:FF
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7d:42:1b:30:b8:54:1d:5c:fd:d5:44:9e:f8:30:40:77:a9:
e9:ed:7c:aa:92:f2:f3:70:46:e0:46:40:d4:4e:c8:69:fc:eb:
eb:f2:d4:26:87:ef:6b:df:fa:22:17:18:95:e1:ba:1c:b9:c8:
bc:33:38:eb:29:4e:09:10:7e:4c:fa:e3:4b:ec:be:4d:4e:57:
29:8c:f0:2a:ec:f7:5b:07:4e:6c:ea:93:ea:ee:1a:b3:54:27:
d1:22:94:7f:d5:ab:21:61:f3:d8:9e:25:08:f2:60:d6:47:2b:
3f:03:32:1f:02:50:7d:5d:14:6b:17:69:d1:9d:ab:32:2b:c5:
db:b2:bd:48:0a:2d:23:fe:f2:60:89:9e:91:54:18:40:a5:d4:
e5:e0:98:57:4c:72:43:87:02:5f:fc:5e:4c:2f:8e:d8:63:79:
49:df:e7:94:93:a6:9b:7f:45:d7:15:bb:e9:bc:86:39:1d:5a:
a6:ea:e8:ca:93:b1:10:f1:17:47:7b:1a:cd:3d:4f:63:10:06:
91:3b:62:f7:21:e0:fc:28:a5:45:92:5f:ce:b7:24:d5:54:d4:
ed:d4:30:79:79:93:20:49:f3:52:a8:da:7a:0b:34:e2:2c:96:
1c:22:53:d3:3e:8c:42:0e:51:88:d2:63:f7:ac:d5:72:fa:f4:
1c:70:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:05 2026 by rpki-client