Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: paHaZdVu4691M2zOGyyVXkCs7Tg8CdKE2H/cEtetiqI=
Subject key identifier: F7:2D:76:12:7F:BD:E0:BD:12:CF:17:FA:D9:05:75:29:B9:E9:84:03
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019CAC47A9C453E632AF3D88E90A6643D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1547
Signing time: Mon 02 Mar 2026 02:01:43 +0000
Manifest this update: Mon 02 Mar 2026 02:01:43 +0000
Manifest next update: Tue 03 Mar 2026 02:01:43 +0000
Files and hashes: 1: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (hash: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU=)
2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: BNZHM/6fId5P5X/M+8yNtA2YIn+bGub8YCM31dfZgWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:a9:c4:53:e6:32:af:3d:88:e9:0a:66:43:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Mar 2 02:01:43 2026 GMT
Not After : Mar 3 02:01:43 2026 GMT
Subject: CN=f72d76127fbde0bd12cf17fad9057529b9e98403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:05:13:45:fc:9a:95:3b:da:bd:23:1a:21:
7d:65:84:7b:47:ac:08:86:dc:81:65:28:71:00:1f:
b2:8a:18:16:65:1b:5d:87:07:09:2f:67:6b:0c:83:
50:5e:b5:1a:1b:df:48:a1:c3:34:f8:ec:9c:30:83:
7e:20:22:79:1a:6f:93:85:0f:c6:fd:59:84:ec:ec:
10:61:ac:54:a8:34:9e:31:c0:fb:9d:46:b4:07:4f:
dd:dc:54:3e:f4:fd:a4:46:c1:ec:d1:c9:25:d4:8b:
b7:ee:3d:64:9c:c2:b4:4a:9f:4b:b4:ef:d6:5f:51:
9f:c6:3f:c2:72:af:0e:7f:38:39:5d:66:88:08:bb:
28:2c:32:f7:73:a1:35:7d:ef:d1:1c:0c:c1:cd:c2:
a7:57:63:51:a7:5b:9f:3e:47:3c:fb:3b:90:dd:e9:
92:36:09:bf:97:b9:b9:73:60:ff:45:8f:1e:91:75:
fe:e9:04:b9:73:9c:69:23:36:91:e6:97:9a:5d:d0:
51:fe:ba:f8:ec:2e:b1:c5:58:8e:06:6a:cf:21:3d:
fc:47:39:c6:bf:a3:8d:7e:5b:8b:64:e8:a7:47:f9:
ef:f4:f3:cf:61:ea:9f:b8:6d:a6:8c:ae:64:63:6e:
7e:4d:ba:1f:9d:a3:a4:af:a7:33:d4:1f:56:4e:f6:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:76:12:7F:BD:E0:BD:12:CF:17:FA:D9:05:75:29:B9:E9:84:03
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:d7:e2:f0:f9:cf:2b:32:26:ed:e7:e6:c3:1c:f5:74:ef:
53:24:7e:16:6f:f0:93:86:73:1c:51:86:e2:fd:24:7b:f0:f1:
97:2b:9b:6d:93:90:62:f3:47:23:aa:8e:e1:e2:dc:aa:b1:fe:
99:76:b3:1c:75:28:75:0a:4b:f7:10:0c:9b:1a:ea:5a:5a:a9:
c9:f1:8d:0f:7d:a3:a2:5b:e8:b5:dc:cc:58:6a:c7:f0:6c:e6:
05:58:e9:2d:cf:a8:4e:2f:06:7e:c7:7d:ba:e0:4f:89:55:38:
2d:e0:70:6a:df:b9:27:5b:d2:e1:07:4d:ba:e2:52:8f:4e:ed:
e0:2c:27:19:ce:25:82:a7:3a:ac:8e:82:0b:aa:fa:59:ed:14:
5d:a1:28:a1:de:fe:f0:ca:06:1a:8b:61:6c:b4:2c:ae:a4:50:
ef:bb:31:ee:8a:16:87:e7:27:97:b1:04:e1:fd:50:80:a8:1b:
10:11:a4:b5:f0:3f:6c:36:2c:7f:9a:8d:af:4f:c4:24:8a:78:
e6:77:7c:24:96:e8:e2:f7:0b:e1:e2:a0:c2:a1:20:6d:11:d7:
f4:a0:09:93:ef:2c:68:e9:5b:8e:da:6f:22:b9:2e:01:1b:e9:
0f:5d:27:ac:d9:02:5a:f3:14:1e:a5:c3:c6:08:04:f5:b9:8c:
d9:60:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:22 2026 by rpki-client