Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: vyO5CWAtCKXeNk7gvTEPjm1doeWWVPFOoF1+L0TYrLM=
Subject key identifier: B5:C2:69:35:11:CE:3F:A7:38:C1:E5:49:A6:B2:E2:D4:6C:A1:43:0E
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 019CB05A99B36CDFBE00299ABD4E18106895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 03E8
Signing time: Mon 02 Mar 2026 21:00:53 +0000
Manifest this update: Mon 02 Mar 2026 21:00:53 +0000
Manifest next update: Tue 03 Mar 2026 21:00:53 +0000
Files and hashes: 1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: XpEBZdvkKfTGKA1yaaz4EZbC0hzWAaM/0POTbgV6cQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:99:b3:6c:df:be:00:29:9a:bd:4e:18:10:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Mar 2 21:00:53 2026 GMT
Not After : Mar 3 21:00:53 2026 GMT
Subject: CN=b5c2693511ce3fa738c1e549a6b2e2d46ca1430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:92:bb:29:ff:9f:64:a4:3d:90:14:54:a8:
cd:90:51:80:f2:53:03:7e:20:c6:e4:c7:be:ae:be:
2e:61:4a:13:3a:60:66:55:92:7b:e8:e9:fb:cb:c7:
bf:68:27:0b:e8:c4:fb:63:bb:a9:b8:9c:2a:1a:07:
38:64:ba:f8:35:e9:da:6f:26:6c:80:e0:1f:c7:ed:
eb:14:f4:e7:2f:1d:64:a0:93:2e:8f:ed:37:50:48:
ec:c8:09:4b:c9:09:68:82:de:20:bf:da:13:5c:10:
95:fc:9c:68:35:88:75:22:a5:d9:d6:63:74:8d:62:
fc:0d:ee:f2:4e:20:c1:b1:c5:e9:25:cb:ba:5a:1a:
e0:17:fd:de:bb:63:63:35:74:99:24:dd:25:da:0e:
ed:a0:26:26:b0:96:05:ec:97:be:69:a6:90:00:61:
fa:cd:e9:0b:5e:72:fa:cf:3b:c5:bb:46:0d:db:be:
78:65:8f:0a:46:f4:28:53:b4:96:22:e1:23:1b:9c:
cf:c5:73:74:46:8d:05:cb:70:e4:21:be:b9:82:05:
82:13:ea:88:68:d7:db:58:df:9b:dd:5e:46:e8:66:
49:0b:65:ae:0c:3f:60:96:b1:8d:8c:44:d7:f6:1b:
04:c1:96:6c:dc:82:37:a8:9c:f6:77:4a:b9:7c:95:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:69:35:11:CE:3F:A7:38:C1:E5:49:A6:B2:E2:D4:6C:A1:43:0E
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:47:bc:71:e7:7b:6f:5a:da:51:72:3f:d9:1f:1e:bd:fb:e0:
5b:0e:35:70:7b:c7:d8:d2:eb:30:e2:2a:79:48:ce:22:11:00:
46:5e:33:55:80:bb:bf:7f:0a:98:c0:02:93:a8:68:dd:16:2b:
85:07:4d:de:d8:5d:f3:70:5f:91:42:4a:36:59:78:d3:0d:d5:
6c:0e:ec:23:19:54:9a:be:56:fd:7c:19:de:40:05:31:f7:ed:
1e:d1:c5:a4:8e:38:f5:c4:75:ba:bb:3a:97:f2:ca:4e:d7:ce:
ed:c3:9f:e5:f0:fb:82:3a:f8:47:6e:bd:f0:9e:ce:23:35:8d:
b3:23:09:97:19:77:b1:39:56:06:c1:61:f1:53:4e:1b:4f:1a:
41:a2:33:31:64:30:99:7f:9a:87:8e:7a:29:be:19:1c:5c:e3:
12:ce:da:45:1b:8f:3e:31:63:f7:00:dd:3b:e0:fe:31:80:14:
02:50:5e:f1:45:e2:67:27:ad:1f:ae:bb:9a:99:83:93:f1:58:
78:8e:23:8f:08:7b:92:dd:20:bc:4c:e0:f5:55:32:bb:6a:1b:
5c:63:47:1c:bf:db:33:c2:26:b2:71:80:5b:25:72:85:5d:4f:
56:5e:88:25:fe:39:ef:76:ed:2c:7d:4e:34:33:73:d8:58:90:
39:c7:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:50 2026 by rpki-client