Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: bfhxReW5T0ac0EOrg24TArB2o8WxijG7RRaW7N5yg0M=
Subject key identifier: CD:0F:A1:E6:F8:24:24:47:B0:39:90:EB:12:80:6B:EE:3C:A3:8A:D5
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019CABD97AEAE461793079F7C56E7AACBC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1626
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: 61vHhRq+ujeSCLzvZPOVED+kbcwBRr+xuStT6thxajc=)
2: hRarERDoAYiUF5L6tILZ5NKtnbA.roa (hash: BMiUxVpImWSX01DGsmdsHNUIwRwgueagWkBF6bRntqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7a:ea:e4:61:79:30:79:f7:c5:6e:7a:ac:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=cd0fa1e6f8242447b03990eb12806bee3ca38ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:c0:a3:07:38:6c:87:55:65:d4:5a:4d:21:
15:0a:47:58:57:2e:af:21:2c:88:33:d8:74:35:c3:
76:a3:06:17:c0:26:09:e4:6d:ee:96:63:06:11:d5:
9d:38:ed:17:1a:ed:36:0a:d5:ce:5f:dd:eb:4a:7c:
b9:b6:fc:51:19:58:0d:f9:92:8e:10:46:b5:89:58:
d1:94:fc:51:1e:e4:b7:85:6f:b6:14:3f:ee:db:fe:
a7:6d:84:61:98:d8:d8:86:08:7f:13:ca:ff:b0:66:
84:b4:e7:48:51:8e:33:82:d3:b1:2a:f7:42:2e:ad:
cf:98:b3:aa:d5:eb:2b:a5:4e:41:05:91:1d:c6:9a:
5a:ff:c5:1b:86:ca:16:2d:56:d4:b8:5c:58:83:b6:
c8:08:d6:31:7d:d0:29:2f:71:50:4e:bf:1a:de:56:
b1:9a:55:3f:ff:2c:ef:db:d6:97:09:a7:f7:ec:14:
27:8c:3e:b2:9e:5d:0f:6e:0c:5e:de:e1:d9:bb:60:
e2:95:59:b8:45:3f:9a:a6:ca:b1:b8:b5:cb:7c:cd:
b2:90:b1:62:f9:49:2e:0a:2c:69:1f:6b:72:d7:11:
32:a2:e4:26:1a:74:9d:8f:83:32:f6:60:7b:bf:1f:
f8:59:1a:51:fb:11:c3:d9:5d:ae:9f:1f:8d:24:1a:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:A1:E6:F8:24:24:47:B0:39:90:EB:12:80:6B:EE:3C:A3:8A:D5
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7d:17:cb:80:0f:35:f6:6b:1c:79:c7:ae:fb:48:45:1d:34:
c8:5a:62:b1:d4:8a:6d:2c:1d:ad:7f:58:6e:84:22:6f:61:1d:
7f:29:9b:dd:77:a5:9c:ae:f8:66:bd:06:81:fa:3b:df:f8:44:
f9:5c:00:4c:65:7b:38:97:40:c5:50:c6:2e:d6:79:98:bf:a9:
7f:b6:4e:54:8d:12:c3:19:f3:ac:c4:5e:c9:1b:36:f3:f7:97:
86:74:dc:20:b3:20:e6:e4:7d:6e:7b:e7:e2:6b:ba:ac:68:f4:
ec:fe:3c:cc:ed:8d:38:2b:b8:49:ee:57:a1:9f:3f:87:51:6e:
ce:63:19:b7:56:19:1e:d7:c6:9f:b7:7b:7c:1f:c6:75:83:64:
cd:97:91:c9:05:97:fb:6a:92:f8:95:06:1b:b1:3f:6b:13:b4:
3f:8c:bb:19:69:bd:7c:40:18:e9:d6:b2:1e:2f:1d:f2:cf:85:
dd:53:1e:fe:ba:1c:a9:5a:a4:8f:13:94:8d:bc:60:8f:f9:f7:
62:d9:c3:ee:1f:b8:fa:33:27:9c:7f:da:a0:21:f6:e9:41:d0:
f8:4c:7d:86:7b:e9:1e:c1:6f:6a:20:67:40:f3:60:99:59:62:
fb:06:2a:8c:35:84:a1:25:3c:7d:22:c5:26:3a:c1:44:0b:ab:
a7:cb:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:03 2026 by rpki-client