Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: oCAfl/9aJJH2V1t916xyX6GBLWzh45j2UwEqbNkCMoI=
Subject key identifier: BF:72:25:B0:F4:3B:F5:F0:53:3A:81:EA:AD:D1:54:EF:46:02:78:E5
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019CABA23FE39715D88253B29DDC5D9CB442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 1479
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: IWn1UMM2IIn0xIPOBRglYtsJaoieWsaMCs179uX5bDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3f:e3:97:15:d8:82:53:b2:9d:dc:5d:9c:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=bf7225b0f43bf5f0533a81eaadd154ef460278e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:6d:3e:c2:9a:a0:1c:30:dc:14:81:85:95:
ef:44:e1:30:50:b9:fb:80:07:32:88:2e:bd:f9:a7:
b4:40:d3:f0:3b:94:c3:7e:40:85:1b:bb:7b:8d:2d:
e0:b1:64:eb:86:8a:90:93:a9:00:20:45:d9:1a:1c:
e3:3f:6b:26:15:fe:de:06:71:d8:9f:bf:d5:67:a0:
0b:a1:16:56:48:23:91:d1:1e:59:c8:26:a1:5b:80:
07:99:5d:ee:17:f6:f1:e8:ca:74:5d:ca:ff:73:d8:
a1:3d:16:a8:b0:00:2b:f2:4b:33:9c:d2:76:07:85:
37:52:5e:74:74:c7:77:eb:13:0c:bd:90:e9:ac:ad:
37:45:96:48:e0:4b:34:19:04:07:8d:51:61:f9:74:
53:79:db:46:ce:c0:0e:02:76:41:4d:f6:26:6c:78:
6f:87:18:48:ad:0b:a6:73:ca:df:15:88:0c:dc:c1:
f0:f3:7c:94:b9:3c:3c:35:6c:ca:35:4f:d1:aa:d6:
7e:fa:7f:cf:20:63:b3:48:74:54:39:39:fc:7d:60:
34:3e:5f:f8:9d:2a:6b:9f:40:58:9e:26:d9:d3:c5:
fa:ee:7d:3d:2f:3e:48:21:5b:12:70:ca:08:cb:7a:
7b:fd:7f:f3:d0:03:ce:53:b0:fd:ad:fe:39:8d:44:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:25:B0:F4:3B:F5:F0:53:3A:81:EA:AD:D1:54:EF:46:02:78:E5
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7a:60:85:45:16:5f:dd:7e:67:48:c5:12:86:e9:5c:46:f0:
7c:03:f2:7b:08:1a:e4:3d:c3:6b:2b:75:25:1f:e5:91:72:9a:
bc:5b:a9:06:6f:66:82:52:28:82:27:ff:a8:52:9a:3e:70:bc:
91:26:1e:6e:a4:4e:83:9d:56:06:5b:6c:6c:1c:3b:16:73:02:
7f:c7:ee:25:06:a9:d1:19:9b:f9:ad:e1:ad:17:4e:26:cc:29:
a2:3c:20:2f:ba:30:ea:76:ac:eb:6c:db:d8:de:e9:6a:0a:f6:
cd:87:7b:22:5d:bc:d2:12:05:d9:46:75:27:b5:b7:04:3c:75:
58:c5:28:fe:6b:71:0e:dd:d6:33:b3:de:16:30:5a:cc:28:96:
2b:39:90:bc:de:7b:90:84:f2:fd:2c:b7:ae:f4:5b:7a:92:d0:
a0:5a:22:c6:3c:c4:16:db:c0:95:ba:57:3e:df:da:7d:3e:db:
5d:aa:b3:07:81:60:a8:c7:8d:72:74:e1:c9:e4:29:b0:1a:51:
33:cf:41:98:6d:62:ab:c2:e6:6f:c3:d3:9f:fd:0d:cf:fd:ee:
c4:d7:04:eb:5d:6e:4c:81:d2:c6:52:08:fd:38:88:cb:ac:86:
92:96:11:b1:24:47:ab:d7:4b:ef:1f:18:66:20:66:bd:0e:0a:
8c:fa:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:19 2026 by rpki-client