Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: 2I6ySd+19lGIowISfRz5nzifsE9js9Aj2tTgiytg9ss=
Subject key identifier: A3:FB:DE:33:E7:73:AE:F0:3B:70:60:7B:87:2E:9D:56:0A:DF:F4:A8
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019CAD22690AE69D6AD0088C8D95CA1646F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 0138
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa (hash: 1KEdvoLP6yhjWGPI+w0FZQ+G9oJgjKxPQ04M4Cgw2Vs=)
2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: sajZGk+6UYnkW0jMtlyzVDiNjKpOKumwjB3d2kOsX5o=)
3: hB2BZEp3k3snIXX7WqS-RdwWQys.roa (hash: 8rMtnmtq8bnekYwB36ieFLOQVbfHr0cVP7kSuphbKKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:69:0a:e6:9d:6a:d0:08:8c:8d:95:ca:16:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=a3fbde33e773aef03b70607b872e9d560adff4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:77:70:9b:f1:14:98:fa:1f:fc:b1:b2:04:
21:13:fb:f6:60:d1:aa:c4:b8:ca:9b:63:98:c9:35:
ad:12:61:ca:d7:d0:46:bc:1b:8e:08:89:b0:3e:c9:
45:aa:71:04:82:77:9e:83:48:81:59:ca:d0:56:fd:
e5:fb:bb:da:05:39:e3:f0:15:20:1e:b8:18:f0:36:
fa:85:5e:cc:7e:c5:30:dc:80:77:9e:7e:3c:37:22:
ed:50:ea:a8:c8:27:5d:99:2c:b6:5a:58:c8:de:90:
3c:b8:f7:05:98:56:bc:a2:ac:f7:cf:c8:14:77:2a:
9b:33:0a:28:d1:e3:8e:62:c1:d8:2e:ca:3a:eb:a7:
7b:cb:7e:29:40:e9:05:d8:7a:bc:1a:d3:f8:d8:cf:
43:2f:e7:f6:00:2b:9e:17:3c:a6:1e:ca:28:df:4b:
2b:05:af:13:e6:a1:48:9e:11:5d:54:0c:ee:b3:0a:
b0:00:2e:0b:0f:dd:47:b5:8d:db:26:da:5d:51:8b:
e0:aa:ad:c5:18:51:56:d3:80:a3:90:c8:c3:02:89:
0f:31:46:9b:ae:7e:3f:a1:e9:4a:d4:b9:38:36:de:
53:9a:b9:7d:db:91:7c:2b:a7:3b:9c:10:4e:32:97:
7f:67:23:f8:4d:c7:74:de:39:99:5b:3e:68:7f:b8:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:DE:33:E7:73:AE:F0:3B:70:60:7B:87:2E:9D:56:0A:DF:F4:A8
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:21:bb:80:40:f1:8c:91:a5:bb:64:c5:ca:d6:18:f0:12:9e:
24:c5:c1:05:e2:87:7e:21:d5:30:d9:fc:b5:89:9b:c4:01:83:
92:6c:a9:6e:1d:9d:6a:78:28:08:b3:52:31:32:d3:66:02:ab:
64:62:ce:ec:76:a9:64:4f:73:5b:7b:7d:07:2a:73:c7:76:84:
88:c9:78:4e:11:84:09:a3:d5:4d:8b:a1:4f:e8:69:b9:ce:99:
39:0a:fb:76:e0:3f:8c:96:a1:0b:86:e0:3e:3d:7c:4a:e5:38:
83:d4:c2:41:5d:e9:57:b5:ae:e9:e4:ca:5c:3c:4d:41:9e:f4:
89:10:f2:2a:b0:db:dd:50:b5:4d:6e:1f:8b:9d:ec:97:ff:c6:
4f:4d:41:72:0b:d2:5d:95:fb:bc:40:d4:8a:73:f8:3f:5f:b7:
1e:67:02:16:f4:1a:6b:f6:fa:21:87:db:fa:b8:8f:49:a3:4d:
ac:3f:9c:68:41:6b:d2:37:6b:e9:2e:57:ed:a7:23:8e:d9:f2:
b9:f7:7f:da:95:68:cc:20:a2:32:50:eb:bd:7e:ae:e2:1a:99:
cc:f7:42:f4:e2:6e:c8:74:f0:da:33:6c:06:89:99:c1:35:17:
09:8d:67:85:56:09:23:5a:37:dd:bb:53:69:50:a0:a3:50:59:
97:e5:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:30 2026 by rpki-client