Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: YcmCLwegbpIGe1ycf7YthsWnoXciPWSPFfS9FpB9ExA=
Subject key identifier: 63:A5:89:AF:59:F9:3B:44:C4:1F:9D:95:62:8F:8F:07:E1:16:4A:9A
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 019CAC469F8962CDC12780919423C6F046DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 175D
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: 4IVh+E9y3OVoupFBRthZ9DxiKcFfWqTxM1TAFLcIBTs=)
2: kdynGbVCfrX7taXPDAQYXxgdJOc.roa (hash: LcVr7TXvsztqYmXz4cnlZ4MErzCnE6APP7PbSjuF4fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9f:89:62:cd:c1:27:80:91:94:23:c6:f0:46:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=63a589af59f93b44c41f9d95628f8f07e1164a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:4e:f5:cf:e0:dc:0e:ee:3d:f3:6d:38:9b:
ed:fc:0b:43:81:73:8b:49:a5:70:1c:fe:16:bf:16:
6e:bd:f8:0c:8a:2c:98:b7:c3:48:fb:87:dc:61:41:
a1:df:4b:b6:f2:21:37:e8:6e:7a:87:9b:6a:26:4c:
dc:28:f7:99:75:96:61:00:97:a0:73:b5:8e:b5:fe:
e5:cc:b8:4f:39:c7:d5:10:9b:52:b3:56:5e:bc:6d:
1e:1b:1e:5e:21:4f:28:36:c9:3e:0e:4a:72:4f:72:
16:27:d8:f5:a5:1b:74:ad:5b:f9:2d:0b:02:62:2a:
6f:2a:04:2b:18:8d:69:2e:bf:36:bf:e5:e5:ef:dc:
53:1b:1a:ee:1b:ab:40:d9:57:83:72:14:85:d0:1a:
5b:92:2c:f8:cc:ad:a8:bc:5a:e7:7e:92:d5:19:39:
b5:7b:ab:7f:a2:f9:77:cb:e7:5b:be:d5:db:9e:a3:
33:a6:c3:3c:0d:2d:d7:12:53:26:52:2c:1a:62:8a:
09:9f:fe:fb:88:ff:06:3e:ba:66:4f:74:b0:f0:dc:
e5:13:a3:bc:1d:6d:a8:0c:35:a8:4a:ab:78:60:b1:
be:dd:98:71:07:09:59:72:e7:bf:df:c2:8b:7d:8f:
aa:4e:a4:e9:23:b3:9d:0a:9f:6c:49:9c:df:1a:a5:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:89:AF:59:F9:3B:44:C4:1F:9D:95:62:8F:8F:07:E1:16:4A:9A
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:73:47:83:e7:38:bf:7e:70:0d:9e:b3:cb:30:c5:6e:65:
a5:9a:14:7a:8f:66:a7:25:6f:d7:06:ba:1b:b7:df:88:94:f0:
26:c2:90:10:b2:a8:9e:87:35:0f:4b:7f:83:78:fc:1f:bb:fa:
4a:3e:1f:6b:66:aa:19:16:72:e6:57:db:4a:94:14:a5:c5:7e:
65:39:ab:8f:70:77:84:61:93:7d:df:44:a4:67:83:62:02:f6:
06:5c:5e:9e:dd:e0:f4:65:08:1c:08:5c:35:6d:39:9f:c6:02:
27:fc:84:81:8a:74:25:59:9e:b4:1a:e6:31:1f:10:42:90:9e:
3d:60:1c:9e:b4:41:58:cb:60:b3:a1:a5:7f:23:03:ca:06:ad:
f5:5d:22:90:a1:a8:1e:bc:f7:55:76:63:83:d0:22:d9:86:31:
73:2b:87:5e:50:49:d6:ae:e0:e2:8e:31:40:39:09:51:1c:3c:
52:7f:48:ff:6e:ee:b6:06:89:59:48:9f:2b:8f:3e:07:a6:d8:
bf:d0:a1:48:d4:cf:b8:e8:e4:f8:8c:6b:bb:73:a6:6e:72:7f:
07:ad:df:73:da:a2:9d:9f:40:8e:ef:51:77:70:06:45:51:24:
23:ec:f2:f4:40:ab:9f:39:e7:0f:8c:1e:64:bd:a3:78:69:76:
17:64:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:19 2026 by rpki-client