Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: gZdIv1d0EwoS1qKPDmoueFxMPQBdHGBBKGrl+10+7Io=
Subject key identifier: 53:86:BF:96:35:27:9F:C2:85:EF:04:77:C8:7A:AB:48:15:02:82:23
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019CABD933D6BFB514927970D4A57EED505E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 06C2
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: pOMh6E59bT0QeriBjsdc/9ZzbAJu+jc7ntitbHLHHYs=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:33:d6:bf:b5:14:92:79:70:d4:a5:7e:ed:50:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=5386bf9635279fc285ef0477c87aab4815028223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:d6:11:53:8e:0a:d0:6a:f7:bf:27:db:20:
bb:27:09:fc:20:00:af:31:56:6a:65:1b:35:28:80:
78:76:12:17:c9:a9:66:6a:8d:a1:59:4c:c5:1f:e3:
e4:95:d1:3b:1b:0e:a9:66:6c:55:09:2b:8a:0f:55:
06:c6:d6:38:b1:d4:00:da:26:01:3c:a1:eb:95:35:
8c:d0:02:41:aa:ef:08:5a:78:15:55:e8:9a:56:48:
e2:56:f1:45:34:bf:27:aa:ed:44:a3:84:f8:3c:9b:
35:c4:21:44:e5:2c:c8:1f:5f:25:ee:e3:79:5e:b8:
73:b2:8d:cb:bd:5a:90:8a:a5:60:2b:67:d9:ee:c4:
46:ed:c4:18:59:ac:ef:29:3e:d0:24:df:44:55:5e:
97:59:68:6f:f3:67:b6:a6:20:e5:19:10:2e:62:55:
47:df:9e:52:20:33:6a:83:f9:50:7a:b4:ee:17:52:
b7:e9:d0:9c:e1:b4:e5:59:51:50:1f:40:1b:c2:52:
09:01:de:11:3a:be:1b:1c:1e:26:5c:30:26:60:66:
a8:e7:3a:d8:f7:09:8f:7d:db:42:66:40:87:2a:c1:
9f:64:e3:14:78:9e:d1:25:3a:37:6a:1c:25:83:17:
8b:9c:26:78:d2:29:6b:9e:8e:79:26:21:6b:ee:a9:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:BF:96:35:27:9F:C2:85:EF:04:77:C8:7A:AB:48:15:02:82:23
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d0:d7:e3:93:cc:79:37:ce:39:28:50:b7:4f:31:67:33:42:
74:22:31:4e:39:9d:1e:a3:44:f4:e9:80:e6:2e:50:68:15:2a:
c4:c0:aa:eb:ae:82:fe:db:1c:a3:78:0c:2e:8c:15:15:d4:9c:
aa:3f:b8:18:61:00:5a:8d:24:97:b5:fc:fc:eb:88:e0:0f:41:
6e:34:56:0b:a0:6e:13:82:b5:a8:51:a8:44:6e:55:c2:63:c9:
51:64:c1:4e:95:19:d4:0e:50:89:80:bc:cf:0e:5e:05:5c:41:
05:70:c8:fa:f4:04:11:39:73:16:60:e3:81:2b:ec:aa:6f:6f:
bf:a8:d4:86:90:f6:44:1d:b1:36:80:d4:dc:bf:0d:fe:2d:a1:
c7:81:a4:1e:64:27:09:0a:e8:f6:8d:1f:fc:ca:c7:6f:5d:66:
52:6c:fd:4e:7b:37:86:32:62:e1:08:2c:00:ae:e6:db:8d:83:
2c:e3:f7:7b:8b:94:ba:7c:81:55:6a:f0:98:35:8b:3d:f0:26:
b6:83:e3:c8:83:02:2b:d1:3c:9f:3f:69:75:ea:6c:6a:ce:f2:
e2:08:c9:1a:df:e6:f4:05:11:a4:2c:e8:15:06:04:28:97:0b:
6f:20:de:23:63:77:c2:5b:90:79:65:0a:dd:df:2e:f0:00:c6:
08:82:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:43 2026 by rpki-client