Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: 1qB+qxYrDl6cT40+a72g2CrxVQr1LbyJ7s4Qc/ZjjpU=
Subject key identifier: 63:0C:1D:07:85:A2:6E:0C:94:3F:BD:E7:2E:3A:F7:36:71:4D:40:93
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 019CAE6C63C5BBEB1B018A4ECA2902031316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0EA4
Signing time: Mon 02 Mar 2026 12:01:04 +0000
Manifest this update: Mon 02 Mar 2026 12:01:04 +0000
Manifest next update: Tue 03 Mar 2026 12:01:04 +0000
Files and hashes: 1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: 2lhrjvPHd7OaM63osLIy60AYcCEPI1fNOBMA4ghwh3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:63:c5:bb:eb:1b:01:8a:4e:ca:29:02:03:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Mar 2 12:01:04 2026 GMT
Not After : Mar 3 12:01:04 2026 GMT
Subject: CN=630c1d0785a26e0c943fbde72e3af736714d4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:29:02:07:70:2e:97:14:28:f3:7b:50:3a:
bd:58:d1:9f:fa:21:b2:5f:6c:16:b2:fe:1a:be:cd:
36:90:e6:9c:44:e7:84:59:c6:20:c9:f5:0a:a3:37:
f0:6b:19:21:fe:6d:82:ac:cb:02:86:90:09:77:10:
24:2d:6c:6a:52:2c:13:3f:53:d2:d5:3e:65:91:67:
0d:47:31:14:de:80:cc:b9:df:76:c2:fd:2b:82:a0:
b3:f3:23:84:63:6b:a9:e0:8f:ee:0e:0a:0f:d4:ae:
11:03:71:60:a8:f5:f1:e0:31:36:d1:62:8e:51:ba:
bc:2c:fd:cd:a4:a2:c5:3f:32:7c:7d:1f:78:2e:92:
12:f3:58:19:0d:88:47:37:ea:bc:e6:09:eb:3d:dc:
8c:a6:35:66:e6:e2:e5:9a:d9:f8:7e:da:07:07:18:
c1:2b:43:1a:f2:05:bc:4c:43:5c:fa:2e:e0:c3:de:
f4:30:b6:ed:fd:b9:f9:2b:67:86:7a:07:91:7b:a6:
84:6e:55:70:70:32:dc:35:21:46:7d:eb:5b:6c:8f:
f9:9f:06:5e:b0:16:da:a7:55:23:39:1b:3f:b9:99:
fd:2a:73:ff:00:4b:3c:79:b4:18:d0:bd:8d:15:c9:
ce:d8:6f:09:51:07:c4:9d:97:c7:2a:d0:04:7d:7c:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:1D:07:85:A2:6E:0C:94:3F:BD:E7:2E:3A:F7:36:71:4D:40:93
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:77:10:19:12:fc:77:e1:61:62:c9:23:57:aa:74:33:dc:
98:de:d4:62:89:f5:98:e2:ec:06:ed:44:2b:ec:9b:31:e3:6c:
be:78:18:83:ac:19:e9:3d:e1:8b:d2:d5:7c:f1:ba:50:51:c0:
26:06:6e:1b:ce:2e:05:de:e0:58:45:60:a1:f1:98:a3:e2:3c:
4e:3d:4a:72:26:7c:44:ad:3d:c7:f2:d9:64:91:17:54:39:03:
18:05:fa:c2:55:6a:15:77:23:e9:0a:b0:ec:07:8f:f3:3f:43:
d2:d6:ac:08:9c:f1:be:2a:37:b1:33:6d:18:5d:71:52:9e:3e:
fe:57:e4:74:7d:20:9f:ba:75:77:e6:c3:de:25:6c:76:05:58:
50:8e:9c:74:d0:6e:b3:cc:c4:61:b2:59:77:49:0a:27:0a:fe:
f5:13:6b:78:36:7f:ff:0b:bf:3e:de:c1:f7:e8:01:47:0e:e8:
a8:88:cf:8c:84:b3:5e:6f:07:4e:d2:16:25:90:a6:39:7d:29:
c0:9a:b8:09:13:73:25:ab:6e:d5:4d:06:c9:e7:b6:73:98:20:
ff:f7:3f:98:0c:25:54:2a:f8:6f:ad:15:d7:be:98:54:99:1b:
5a:c0:6a:a2:08:21:52:ee:2b:b0:96:ac:c8:c6:d5:70:39:17:
4a:b6:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:28 2026 by rpki-client