Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: hdiVTq4SVwoPDPMQln8WwJl/L3T84uRl2UW17rge3kM=
Subject key identifier: 58:6F:74:55:2E:1C:70:B0:6C:D0:58:8B:2C:C5:F7:56:EE:F7:7C:14
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019CACB4C53F28741078FAE5B421D56E659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=)
2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: i1Zi1kr4IIvwkAAGrHtWvMwiyCjLNJ8xcQBndn9Uc5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c5:3f:28:74:10:78:fa:e5:b4:21:d5:6e:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=586f74552e1c70b06cd0588b2cc5f756eef77c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:ca:f9:07:64:fc:4e:8a:ba:68:53:be:30:
af:6b:d1:36:bc:f5:51:40:0b:7f:42:21:60:5d:26:
d8:13:37:75:c3:c2:24:52:a5:fb:33:96:2b:08:b3:
82:3b:a6:86:ca:13:9b:6c:03:e9:b1:a2:22:fc:1b:
74:0d:72:86:b8:67:df:66:10:7d:e1:7d:a3:7d:82:
ab:fe:68:c8:84:9b:8d:25:38:ef:4d:2a:8b:c1:3c:
c6:25:91:04:fa:e5:e9:1c:23:68:95:8e:66:fc:e8:
03:95:98:75:d9:da:66:00:6a:07:fc:5a:7b:84:4f:
0f:ed:21:80:d3:54:74:08:45:8a:53:d0:4a:a4:49:
04:74:8d:af:ee:12:88:d9:89:53:6a:f0:eb:cd:f9:
ea:2a:7b:3c:8a:7c:e2:4e:97:91:1d:31:be:25:3b:
8f:76:5d:bd:1f:13:ca:56:de:0d:c3:a4:9c:f2:37:
98:21:f8:87:42:31:c6:01:b5:f1:54:16:0f:cc:5a:
a7:75:e2:e9:47:ce:ac:29:1d:70:49:b4:db:f5:28:
c6:4b:1d:bb:30:40:42:44:49:8f:54:1b:b9:c6:87:
ce:89:d7:f2:1d:2e:7b:a6:8c:9b:50:ca:43:a5:2b:
74:1e:f0:4c:77:2a:f5:5c:cc:57:96:f3:70:8a:b6:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:74:55:2E:1C:70:B0:6C:D0:58:8B:2C:C5:F7:56:EE:F7:7C:14
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:00:d3:5d:79:f9:96:ff:f1:34:2e:2c:da:fe:9a:8b:56:
31:28:8f:72:4f:5b:8d:2a:d1:67:39:06:8e:77:ea:fe:eb:4d:
a7:87:08:d6:34:be:50:41:fa:92:ed:9a:eb:3b:5f:6b:68:aa:
8b:9f:ff:77:95:cb:f3:c6:44:76:e6:ca:bc:5f:4b:c2:e4:00:
c3:c2:94:ef:47:7f:b1:3f:16:34:d3:e4:a7:f0:62:b1:46:08:
3f:49:27:ef:38:45:0a:8f:19:24:bb:91:e1:8c:11:66:ca:fa:
3f:75:06:ec:ff:26:6d:0e:71:2a:40:fc:eb:57:5e:33:89:88:
a0:db:cd:9e:8d:91:a6:33:1d:f9:13:c6:71:93:3c:73:10:76:
37:32:27:07:75:6d:c1:27:59:12:75:e7:63:72:8c:73:d3:d7:
5b:2c:8f:81:5f:1a:d0:cf:b5:51:ee:df:91:99:00:70:e7:07:
3e:82:db:e1:15:70:cf:8a:9c:54:63:26:02:3f:15:52:ab:a3:
61:c2:a5:cc:d0:d1:f9:2e:eb:40:b0:58:db:f0:ce:c1:df:7f:
05:72:ac:8d:41:55:07:eb:9f:fb:44:35:6d:a4:d0:a1:56:ce:
31:1d:3c:d3:66:d3:c2:99:65:47:d4:1c:d8:ca:72:27:45:d0:
81:14:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:34 2026 by rpki-client