Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: cNT2/5XZQCd3JlIgxzbkLY9OdaRmstAGTwA9MDbOfQw=
Subject key identifier: F2:BE:E4:93:6B:CB:2D:A0:74:8B:B9:1F:2C:4A:59:0E:89:70:EB:1A
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019CACB5131E0DB6338AD2D4579C5AF4D648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1689
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: 6pbBvFKsGWSVoQkkXzciex4xejrWk4zy3+Zi6RNEwbI=)
2: q07ydXKNCfhsxkbz0OLUwwXQNww.roa (hash: WGl6n1WY5g82kxAJzk5G8tAK5EnNCEBo+zn2QvwiGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:13:1e:0d:b6:33:8a:d2:d4:57:9c:5a:f4:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=f2bee4936bcb2da0748bb91f2c4a590e8970eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:44:5d:a0:f7:80:76:9d:09:8b:35:c2:50:
a3:74:84:e7:6c:af:87:eb:e9:03:bb:c5:82:bc:5d:
fa:49:79:5e:07:04:5e:fd:77:b0:d3:d0:52:08:41:
1e:9a:f7:e8:13:38:d4:cb:77:75:0c:10:4c:c2:23:
8a:45:86:e5:d2:ca:95:99:81:9a:c0:7f:ec:e1:4d:
ca:66:6c:f5:41:e2:67:69:35:3e:ea:f0:5f:81:da:
a7:64:8f:ca:c2:20:c6:a2:63:18:e8:af:c5:92:b6:
88:0d:c4:dc:ae:93:99:ed:43:dd:6b:22:c2:78:97:
51:2f:ff:f9:f0:d0:06:a6:54:40:5e:ae:8a:80:36:
fd:93:78:c6:2f:53:81:ae:24:48:8b:06:5c:65:74:
78:d3:c9:eb:5b:b5:3c:1f:5e:5c:38:28:bd:5d:9e:
d4:74:03:2b:a0:5c:d3:57:28:4d:ce:13:7e:2e:69:
fd:1e:01:ea:0d:58:81:59:e8:fe:57:a4:a9:25:02:
9e:ab:57:66:50:bf:2f:55:7a:3b:78:9a:a9:df:36:
1e:0a:29:5e:37:93:01:82:51:55:ae:88:65:42:73:
17:48:83:0b:bb:4b:ff:95:ec:36:d5:b0:c2:d1:96:
20:1b:21:5a:72:61:96:75:80:e7:01:63:7c:45:33:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:E4:93:6B:CB:2D:A0:74:8B:B9:1F:2C:4A:59:0E:89:70:EB:1A
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ec:fc:a4:fe:fb:99:25:61:ee:32:e2:44:dd:6d:9e:81:6e:
18:3c:33:f2:ce:40:93:f2:47:02:b7:e7:c7:1a:d5:99:62:ce:
eb:ee:ff:e6:3b:37:59:a2:44:0e:a3:70:4c:ef:b2:8d:6c:a7:
b9:da:28:ee:76:f7:7d:01:88:f3:98:8a:4e:64:a2:36:59:99:
4d:2a:43:87:4d:22:c8:a1:18:c3:13:97:ba:49:e7:af:a6:fe:
7a:b7:4a:da:26:d2:95:10:96:8b:c4:1d:e7:6f:1b:85:2d:07:
23:dd:35:7f:0b:8f:63:a1:be:25:4a:ed:33:ed:fe:24:01:24:
c3:20:00:41:82:52:ba:db:4f:17:e4:6c:68:4c:98:2d:6d:e6:
c0:8b:48:63:97:6a:50:6a:3b:10:25:b8:0d:5f:c9:e8:56:cf:
a8:f0:fb:13:a4:0d:bc:fb:98:ef:cf:e3:13:eb:f5:8a:89:0b:
c6:f5:35:e8:02:77:85:c5:f7:90:fa:cb:6e:59:3e:a5:20:a5:
5f:08:0a:7c:96:77:8e:10:c4:d3:16:73:d2:2a:f4:f9:0b:93:
a0:70:27:18:a7:25:73:89:68:8a:b3:0e:94:90:e9:a8:00:2d:
1c:f5:7a:36:bf:ac:98:d9:81:b1:c0:b1:8e:64:e6:da:bd:21:
3d:be:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:06 2026 by rpki-client