Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: joGczDHZHd+Uykgm/Ymk9nkUbg9bFYQ9CggZLLAYaH4=
Subject key identifier: AF:56:6C:4D:C6:FA:2E:A3:6F:06:7E:91:0E:85:9D:D6:BB:A9:EA:00
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 019CAAFD64925C7FA2BA8D313A245BB78FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: TZjBq4odAN7upelKgfu1RPB63zo.roa (hash: bR7hMvq2zyGR+w9kpTZrW9dDTe7aMsxdA/NdBaV269g=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: 6q8y8Bru0Z94eXc2NlN5zo4D9G1rb4o15QiwT4TLpK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:64:92:5c:7f:a2:ba:8d:31:3a:24:5b:b7:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=af566c4dc6fa2ea36f067e910e859dd6bba9ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:01:0a:e8:83:de:b2:3e:2b:a3:db:3a:59:
78:36:2f:0d:87:c1:b2:57:11:b3:cf:f8:92:d0:53:
be:b9:b3:72:81:f4:d8:36:3e:f3:1c:b3:6c:36:ce:
50:fe:94:3e:63:47:57:14:74:04:50:4d:49:46:73:
6d:ea:03:f6:4b:e1:e5:20:47:0f:78:71:7a:ec:bc:
5c:1f:c0:11:03:57:f9:4e:10:02:6b:39:b4:50:4c:
f1:75:46:2a:0c:03:a6:a1:ab:23:e9:c8:ef:d4:2f:
b7:e9:49:fd:a7:88:16:47:44:55:0f:57:f2:bd:53:
47:61:0a:c3:aa:2e:9d:a9:bc:3f:d1:34:29:4f:cb:
b4:4a:f8:59:ea:3b:f5:4d:94:89:36:51:2c:f1:85:
67:38:cc:1c:d7:75:c7:f4:24:84:7c:8c:f8:18:c4:
ae:e9:5c:14:66:3a:e5:21:2d:da:3d:5a:f7:49:17:
9c:36:67:40:34:97:b9:73:c4:7a:2d:8a:43:9a:23:
44:08:9d:17:e7:5c:9c:9f:db:ce:da:bc:b1:92:be:
87:bc:e4:a3:7e:70:c3:11:cd:7a:ef:43:89:18:8c:
32:ac:f6:98:d5:e4:7b:40:53:1d:f9:ea:cd:bf:5e:
ee:b4:ad:05:4c:47:8a:8e:13:c9:70:ef:04:26:a9:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:6C:4D:C6:FA:2E:A3:6F:06:7E:91:0E:85:9D:D6:BB:A9:EA:00
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:65:a7:0a:b1:13:e6:8e:c5:3d:58:e1:8c:7a:4b:56:75:
8f:4c:42:a9:1c:8d:4a:61:61:22:13:d3:61:87:c3:64:db:0a:
ef:27:80:cd:97:2d:27:47:7d:11:29:29:2e:93:f3:e3:1e:82:
0b:b8:60:82:55:2c:32:1c:4c:fb:f4:aa:64:4a:b9:3c:5e:2f:
25:49:39:a7:1b:33:c2:91:3a:64:b4:ea:48:30:0f:0f:15:fe:
a6:84:8f:92:86:4c:a6:90:8c:6a:4c:64:3c:87:0f:b8:45:4c:
8b:b1:7b:8d:81:f2:6f:18:75:d4:a2:4e:e5:69:05:52:20:32:
45:f8:82:00:7e:b1:8a:ba:c4:cd:a7:9b:20:6d:c6:42:e3:e8:
fc:96:15:4f:f2:e0:9b:59:e1:7f:01:cf:41:50:17:11:62:c5:
4e:2b:d4:53:f6:35:a4:9e:b8:2e:38:4d:10:03:cc:c9:6f:93:
30:3e:14:34:bf:43:cd:fd:14:da:fb:70:31:0b:cb:f3:4b:ee:
72:7d:82:4d:b8:93:de:ca:12:49:69:95:42:14:c4:97:76:5e:
1a:05:2a:d2:1f:0e:5d:0e:40:77:58:b7:81:c7:09:93:50:2b:
3a:98:01:d2:60:af:49:72:80:07:42:8a:80:3e:4d:67:32:ec:
12:e5:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:51 2026 by rpki-client