Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: rmCxAHF+fKmKjLE39McvD3KsjaFzRrAwTKlpOCVO6/0=
Subject key identifier: B6:EF:68:16:28:89:1A:C3:37:BF:9E:7C:4E:99:6E:13:09:DA:32:CF
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 019CAB342F465DA1D4EA43EE6A27531B201E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: iWAvTOQmICmBQrfudqprpBE/q3tHCtz4lko3gTIbRqQ=)
2: x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa (hash: 7vnEm2NdMdejMyVEM/bfqmw0nAnwn/zb7nuUX/UxYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2f:46:5d:a1:d4:ea:43:ee:6a:27:53:1b:20:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=b6ef681628891ac337bf9e7c4e996e1309da32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:d5:96:68:5b:1d:65:e7:8e:b3:36:ea:01:
86:fd:35:59:2e:e1:9a:f8:79:30:c8:bb:43:c7:89:
8a:52:77:50:e3:e7:a8:83:50:67:7c:3d:50:1b:c7:
db:fd:6f:67:c7:83:bc:76:30:ef:da:8c:57:8f:90:
27:a5:d9:f5:c5:6f:0a:6d:2d:26:d3:af:07:87:fb:
a8:d8:e8:b9:e9:49:df:fe:8c:3d:7e:7f:98:b3:a2:
3f:1a:9a:b4:0b:21:ff:c3:2e:ff:45:df:c3:15:fd:
29:8e:9b:22:d2:74:76:79:a0:d7:e1:e7:53:b1:c9:
6c:c6:b4:06:77:f9:de:59:1a:2f:1e:83:c1:20:d7:
12:b3:64:55:d1:f0:5b:32:56:59:fb:e7:65:0c:15:
21:ad:53:47:3f:08:40:e0:a5:6a:85:95:c7:57:bb:
93:9f:c6:d1:02:5d:00:5a:c7:8b:ff:f2:d6:55:fa:
bc:4f:1f:69:a6:1a:0a:8c:4d:9f:23:07:30:fc:8c:
1f:c6:88:0a:32:0d:11:76:83:3a:73:9a:7c:c6:93:
e6:fa:11:16:f6:3c:1d:c3:fb:80:fa:a3:67:16:62:
f7:f3:65:78:a5:bb:8d:8c:a3:af:e0:af:6f:58:df:
f8:c1:ea:14:f5:78:ad:03:0a:b5:fb:d0:87:0b:97:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:68:16:28:89:1A:C3:37:BF:9E:7C:4E:99:6E:13:09:DA:32:CF
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0d:b7:b0:7f:88:ff:5c:50:30:74:91:8e:4b:66:15:8a:be:
16:ff:5d:55:d4:ce:41:e9:57:64:33:ed:81:fa:79:f0:d5:6f:
23:e6:79:7a:bd:71:89:ed:71:33:4f:f9:13:7d:c3:63:ab:0b:
3f:13:85:e0:17:80:2c:db:08:9c:04:42:dd:51:f6:05:64:0d:
4b:18:a9:96:a6:87:fb:50:da:2a:51:78:4f:1f:18:ab:b8:c6:
bf:9f:1f:df:9a:e5:7b:83:b8:9f:c9:ac:7e:e1:39:11:3b:69:
6f:f7:88:92:80:86:de:b5:ff:96:37:96:73:6e:98:11:c4:fd:
8c:58:ba:9d:92:8c:1d:df:d9:eb:e7:72:89:37:ff:c8:7f:97:
ca:a3:53:6f:b0:9f:2b:44:c8:e2:92:c0:19:c9:6e:b7:30:90:
f8:be:fa:7f:02:64:a3:a6:61:99:c8:5c:98:3e:12:7b:ef:b7:
2d:1d:e4:f0:d0:ca:cc:0b:35:af:00:2a:f5:f3:ce:49:b9:45:
af:0d:a0:25:39:dd:56:12:22:9a:f0:14:91:af:18:79:34:8d:
8b:0f:8d:80:16:c8:1e:39:55:9b:f6:a1:36:d1:97:e2:8c:ad:
92:4f:62:ff:67:e5:68:da:9d:26:df:e2:2a:8d:38:ab:9b:44:
e9:41:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:38 2026 by rpki-client