Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: OpAEWT2fEdPAjHRivxojk0WMO6Ho+vXZMETknKIvoEM=
Subject key identifier: 93:78:76:52:2A:FF:2C:57:65:F2:A9:3C:A3:2A:E6:50:BE:D2:F3:FA
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019CAB6BF3B449506B1CEF7D00455EE5D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 22:01:44 +0000
Manifest this update: Sun 01 Mar 2026 22:01:44 +0000
Manifest next update: Mon 02 Mar 2026 22:01:44 +0000
Files and hashes: 1: 8lyQvVkkT8cJKDB078Bw7EZ1cA4.roa (hash: gveYep3uEwHr6LaxWrdDXfeKga87B02W7vk/P3l0P/c=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: bOrCEf88uAgydTEqa41AC3IB+NWBOvB9cKW13+MoyLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f3:b4:49:50:6b:1c:ef:7d:00:45:5e:e5:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Mar 1 22:01:44 2026 GMT
Not After : Mar 2 22:01:44 2026 GMT
Subject: CN=937876522aff2c5765f2a93ca32ae650bed2f3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:4f:4c:f2:fb:1d:7f:9f:44:11:11:5b:a2:
4e:47:f8:95:d7:d7:6e:13:8a:58:26:ef:c3:9e:63:
8b:d7:78:41:df:6b:4b:ce:4c:c7:5d:a9:54:a0:d5:
37:8d:90:71:6a:ff:42:6f:95:cd:f9:de:06:bb:51:
d5:bb:cd:3c:7f:4f:19:0c:50:84:30:05:05:7c:37:
05:51:fb:ca:8f:79:01:1b:32:a8:d1:83:69:9b:8f:
93:80:4e:1d:c1:62:1a:64:b0:cf:50:0f:19:4a:61:
33:b6:d3:79:56:36:c8:78:f7:77:e4:30:e3:e2:6e:
32:bf:60:ad:37:35:35:ac:58:c2:d4:88:cb:ee:2f:
62:e5:c8:c8:56:45:c5:43:99:3f:e8:78:43:18:78:
e5:76:ee:7e:68:aa:38:ae:8f:68:0d:e9:1a:5d:0d:
0b:f5:7a:e3:6f:c8:63:0c:ae:0e:0b:fe:07:a9:13:
55:08:30:a4:56:70:de:9a:f2:63:50:84:e5:fa:f3:
0f:c5:8b:a3:48:f8:bf:7e:db:a5:0b:a8:54:21:87:
e9:7e:f5:7e:15:a6:f9:92:48:9d:cf:a2:f0:b2:4f:
12:4d:53:09:16:e3:16:ff:59:37:bc:c1:f2:e1:51:
12:7e:f6:48:e0:7f:dd:d8:56:08:ea:db:4d:4d:bc:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:76:52:2A:FF:2C:57:65:F2:A9:3C:A3:2A:E6:50:BE:D2:F3:FA
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:ab:d6:4a:59:57:46:eb:17:62:cf:f6:86:3d:97:93:1d:
6b:5e:4e:89:fe:f8:54:0b:e7:91:77:05:fe:f0:81:87:86:3b:
7a:f5:3d:f7:16:ff:90:26:85:af:49:64:d5:7e:7f:18:9f:c7:
cb:88:ab:55:32:86:86:c9:b3:85:2d:37:89:eb:b4:87:d7:77:
0e:73:a4:10:09:61:cf:87:12:c1:e1:a7:23:c5:41:11:ef:1a:
81:32:a1:34:0a:16:fd:32:c6:98:0d:ed:3a:97:ec:f5:b4:c3:
f9:df:f5:8c:98:a9:d0:c2:ac:9e:d9:b9:c9:f2:12:74:69:a6:
77:10:31:f5:8e:9d:1d:7b:38:00:c2:05:c8:01:57:42:66:2a:
ae:b3:ff:cc:ae:56:59:01:f8:f7:dc:01:dc:8b:05:ea:de:e8:
39:e2:5b:71:99:d2:20:5b:af:83:7f:ae:43:06:a6:3b:79:ad:
42:45:60:ce:6d:7c:8c:4a:3d:ea:a5:be:88:9f:15:dc:77:c7:
42:80:84:cc:fd:67:2b:4c:87:bd:f2:17:96:25:21:ab:a2:ee:
b4:14:05:16:55:d8:c7:8a:56:3c:31:2e:59:47:fa:01:8a:7e:
b8:3e:ba:4d:65:44:6c:bd:b2:8a:f7:54:42:2f:9c:e4:65:4e:
06:b3:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:37 2026 by rpki-client