Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: x1fU5dwtZPeEWa0lHBnRODP2MAMN9XJxrIAbIeOHKtI=
Subject key identifier: 85:38:97:EC:C3:B9:C2:64:63:F7:4B:27:96:3F:8F:C3:BB:A6:CB:C0
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 019CAA5831595D55182C2F6E78E3CB18852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 175C
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: l+TIBdNZdaUnvlkVLYEOH/PJJUnQ7R2/i4egAGhHdws=)
2: kdynGbVCfrX7taXPDAQYXxgdJOc.roa (hash: LcVr7TXvsztqYmXz4cnlZ4MErzCnE6APP7PbSjuF4fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:31:59:5d:55:18:2c:2f:6e:78:e3:cb:18:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=853897ecc3b9c26463f74b27963f8fc3bba6cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:8c:4d:b5:31:26:8b:57:4a:1e:ee:1b:fb:
36:3a:51:f2:fb:f1:d4:04:a8:13:7d:a9:12:d6:fd:
f0:b9:2e:89:4f:88:6c:e6:29:e3:59:87:98:37:43:
6d:a5:8e:9f:cf:3d:73:73:7e:e0:f4:a2:06:b9:3f:
d0:1d:c5:57:0b:5a:16:fe:4e:f4:b9:53:e6:4e:b9:
9a:63:1d:82:2a:79:61:02:d4:80:8d:93:5a:85:a9:
8b:42:a3:5e:df:32:49:b0:03:47:76:43:8f:9d:7f:
65:13:a0:81:22:1e:d6:08:91:f6:cb:53:44:e8:6a:
45:91:a6:1f:a1:f9:44:ff:ba:26:fe:f2:f8:01:a4:
3b:c2:3f:50:60:fd:d3:db:a7:a4:f4:b4:13:39:43:
18:cf:c1:ea:82:88:b5:69:79:55:85:15:ee:df:19:
9e:d6:59:ac:54:3e:0f:a3:8c:75:95:57:ba:68:8a:
0a:d7:41:51:85:78:f0:41:b3:7d:8e:22:25:26:6a:
27:87:27:b1:5e:02:10:cc:2f:f5:0c:81:16:cb:a2:
1a:00:58:5d:28:a7:24:a0:a5:6c:49:a6:42:6f:36:
2a:bf:69:b5:ec:7a:ec:28:c6:be:af:20:66:74:3e:
5d:7a:ca:bc:dd:9b:0b:dd:d4:b0:2f:a6:5d:2f:06:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:97:EC:C3:B9:C2:64:63:F7:4B:27:96:3F:8F:C3:BB:A6:CB:C0
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:a5:a1:32:47:d3:8e:e4:9e:a5:c0:2a:fe:85:a0:5b:3a:
d4:0f:bb:17:12:4a:38:3b:d1:06:fb:18:5b:f6:6d:ed:07:39:
82:a7:40:9a:f0:f8:df:a2:ab:a8:78:9b:61:b1:24:e0:82:a8:
a2:48:f4:c6:b6:83:1d:a3:ac:f0:b6:6b:83:d3:c7:3f:28:75:
34:3d:37:ae:10:c6:87:8a:c5:4c:a0:e8:30:b7:14:9e:de:52:
b6:e3:df:e7:b8:ec:bc:ca:42:12:ca:10:5b:8a:08:78:d6:9e:
c9:a6:5b:5c:00:fd:0b:64:38:a1:5f:83:95:24:ac:62:d7:e2:
c6:7b:5b:62:91:12:58:87:c2:66:38:1e:20:3e:22:5f:5b:91:
4d:4b:09:03:f4:bb:95:07:87:17:02:12:71:1f:9d:e9:81:cd:
09:72:dd:39:97:ba:4f:d5:2b:62:78:43:e4:6b:47:47:b4:8a:
2e:2a:1b:2f:2f:ba:00:a1:bb:a4:51:05:b4:fb:4a:52:4f:f6:
48:bc:14:22:0b:b1:19:05:e5:ca:15:02:f8:d2:8f:05:cf:5a:
55:f8:54:25:1c:fd:8b:91:07:d6:ec:b5:1d:92:5a:e3:20:a3:
8e:71:78:8f:6a:7f:c5:97:2b:66:49:14:ad:63:5c:18:c5:94:
72:ef:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:26 2026 by rpki-client