Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: IxUEludnWyoL+H29//AG+TmQjMyzVCo+xYe720Dm+AA=
Subject key identifier: 72:9F:63:CF:14:49:48:4D:BD:58:E7:A8:DC:AB:FE:9A:9B:B2:E9:80
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019CAA58EB9DA38B8500D9C3464A0A9B1671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 043E
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
2: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: QtTpkC4YFw7/BdONI4erq6I15Q1at0RkxfI7deP8AxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:eb:9d:a3:8b:85:00:d9:c3:46:4a:0a:9b:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=729f63cf1449484dbd58e7a8dcabfe9a9bb2e980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:4b:ca:e7:55:f3:85:4a:a4:66:22:cf:4e:
f3:ab:60:69:b5:89:5a:36:69:cc:af:be:a9:3f:a0:
9b:7d:d7:ab:2f:ea:73:cd:88:40:b8:c9:1c:f9:21:
05:9d:c5:65:a6:46:fc:e5:65:54:3e:14:24:3f:cf:
66:6d:80:db:c0:0b:9e:20:27:d0:c9:ff:57:ee:b5:
ef:62:8e:71:21:ca:dd:53:7f:25:77:ed:27:b0:e2:
0a:89:14:15:24:c5:e5:86:91:2f:2e:c2:d9:2f:d4:
4b:dc:d4:ee:2d:41:d5:c1:a8:02:aa:48:55:a5:7f:
8c:f5:32:4f:f9:26:75:ad:5a:a4:62:64:ec:e5:c0:
71:f0:5c:05:0a:71:8d:f4:93:73:14:50:5b:27:ca:
ac:24:ce:02:b8:08:76:b0:74:e9:d4:f5:bf:23:81:
8b:84:a0:ff:b0:fd:f6:8d:b6:56:5d:e3:d8:f4:bf:
03:1f:e7:cb:fd:3e:b0:6b:fc:d2:4a:ff:b7:fd:64:
66:bf:61:d3:ad:f8:71:19:2c:a8:93:a9:db:fb:94:
a8:06:e2:41:70:8c:34:65:31:9d:22:5c:e3:f1:c2:
41:c3:72:8b:07:9c:08:c8:d6:6f:a6:bb:a9:1f:73:
2e:1b:cc:b2:90:d1:40:dc:72:99:cb:c7:6f:fe:79:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:63:CF:14:49:48:4D:BD:58:E7:A8:DC:AB:FE:9A:9B:B2:E9:80
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:e2:19:76:44:6d:06:6a:d7:ca:fe:33:e6:4d:90:3a:32:
87:a5:a5:95:b1:f2:fa:c0:b3:9d:6a:52:b2:eb:22:d3:f3:c0:
43:e2:3b:34:2f:b7:50:8c:5a:15:9e:4f:3f:79:74:bb:3d:1d:
04:81:ca:77:c9:d5:d9:9e:76:07:70:9f:ae:8b:a9:b7:55:05:
c2:0b:51:6b:f7:f4:ea:d3:70:5d:f8:24:c1:db:35:2a:7a:14:
d7:f9:e6:82:e7:35:6a:e2:36:51:2b:68:79:0a:17:b4:1f:c8:
77:21:ec:42:ec:51:fe:a9:d5:93:ed:99:33:90:d1:25:69:da:
bd:28:06:23:5d:5a:eb:c2:26:74:72:b8:1d:75:dd:ee:92:a0:
1d:d1:fc:dd:0a:ca:2c:45:9a:8b:b6:28:c5:0d:24:13:ca:fb:
71:b9:6a:85:d8:21:a1:86:75:ce:f3:84:88:36:d9:be:b1:a6:
83:f7:73:30:50:6c:4e:a6:1a:97:07:d3:1d:62:1a:eb:e5:ef:
fe:33:c9:1f:d9:65:46:b0:d3:f1:ba:d4:cf:b3:69:72:74:db:
4a:9a:da:0d:0d:46:63:42:cb:34:9b:81:4d:63:28:8a:b6:53:
da:6c:e9:93:08:1e:c5:3b:ec:65:c1:46:81:1b:58:80:40:26:
40:7c:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:06 2026 by rpki-client