Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: LGNbL1n/I2/4XhPu5tD/Op13pgmBJhXhfVnshbjWREQ=
Subject key identifier: 77:AB:0A:2D:3A:87:DA:85:3F:A6:AC:17:C5:FB:72:88:F7:DE:15:07
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019CACEBA5A52A3D93446C81E79E20DC22F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1787
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: 1p6N-kK_4V3GFKcMeMBC634qt2Q.roa (hash: TSyzIZ76W8e8kErWqZwdXl64ZiwUdxKLNAqgp6ToAQQ=)
2: 4WvNG4qNCW2EFlj86dJTOuveJH8.roa (hash: oJyVY5B1qiE0XMrui4EotkBx3jXoI+Z2a2bCSywanP8=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: gJFPfK2fBKoh/OhP/c9aL7bP8qTAmAOoRmmzsosPyq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a5:a5:2a:3d:93:44:6c:81:e7:9e:20:dc:22:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=77ab0a2d3a87da853fa6ac17c5fb7288f7de1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ff:a2:fd:d0:86:8d:15:7d:ef:24:c4:c0:16:
5b:65:9b:63:69:ad:24:9c:c4:d5:65:54:a6:65:48:
4f:ce:74:87:87:ce:77:dd:f5:da:04:e7:29:cb:cb:
ea:1b:83:46:ad:d5:bb:76:ed:90:66:17:45:9c:a8:
65:3e:24:92:76:df:86:24:f9:3f:24:5b:0b:b0:6f:
ad:e5:6c:a3:67:f7:cf:c6:4e:f8:ad:25:84:41:dd:
4c:8f:77:b2:fc:fd:5a:15:ec:c4:98:0b:6d:27:b8:
50:c6:1b:8c:22:94:00:c2:8e:85:3c:c9:32:a1:7e:
48:bc:cf:da:27:63:1e:90:26:d7:8b:d1:93:1f:7e:
65:4f:79:f1:d5:7f:59:7a:24:b0:a2:ed:71:21:45:
df:d9:d8:d4:06:1b:96:f5:c7:d8:4a:91:8d:28:96:
dd:5f:20:7e:1b:12:23:b6:e9:0b:02:78:8e:fc:9f:
40:b8:04:fd:0c:d1:a6:51:65:21:58:f1:3d:53:e9:
36:40:d8:a1:df:cc:0e:25:6c:9d:6e:de:f2:ec:2e:
46:d8:17:d9:f9:e1:c4:d8:cb:52:71:78:bb:ec:82:
18:79:cc:9c:3e:06:65:cf:26:5f:f3:86:25:68:97:
f0:aa:e3:69:eb:43:d5:92:89:e8:8a:78:26:a7:11:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:0A:2D:3A:87:DA:85:3F:A6:AC:17:C5:FB:72:88:F7:DE:15:07
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:13:57:1e:c6:ea:35:b0:53:66:61:ad:52:86:0f:9c:a9:
59:9c:16:29:ba:ea:04:53:d6:cd:5f:b0:6e:d0:63:f3:b2:68:
f6:a1:f0:14:94:8f:1a:b7:69:96:f9:69:72:05:66:af:3d:ee:
74:65:b4:f1:30:34:01:f9:6d:53:d9:95:3e:e5:2d:3b:29:30:
96:2f:68:d8:3c:23:11:32:ff:d0:33:e5:da:b8:28:2d:b5:09:
b4:00:05:35:cb:5b:df:d7:a7:4c:01:a1:5f:0b:2c:f5:14:7a:
ef:c4:a4:f1:1d:43:5a:bf:ca:71:8d:2b:5d:2f:87:38:e6:69:
1c:24:1f:9e:80:94:11:69:32:e9:ef:34:eb:ba:36:b8:8f:8e:
b8:ee:58:b9:29:b0:f5:1e:a3:7a:e1:ca:d6:42:97:5f:fd:a9:
06:7c:bd:3f:20:36:de:c7:42:cb:5a:ae:45:ab:20:87:2e:aa:
b4:18:67:b9:b0:db:68:ee:11:36:89:76:3c:4a:bb:83:49:d5:
7c:06:39:2a:00:12:49:27:17:ed:35:d9:9d:d7:e7:d4:52:1b:
53:5b:dc:2c:c2:44:c7:77:50:bc:12:15:b3:1f:5e:73:ef:c2:
60:c8:1a:7d:8c:4d:92:b8:e2:29:0f:43:da:6f:9c:72:63:55:
83:07:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:59 2026 by rpki-client