Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: vJBZItft+cZ2ufzEv184kAoe+Oh94M8vrE6OFg9nsYg=
Subject key identifier: 37:E9:05:10:5D:F9:E2:57:8E:01:D5:C9:5B:04:D1:0C:B3:24:32:E1
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 019D25BA34E0F72BF17C588DE5B27ADA72CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 09F6
Signing time: Wed 25 Mar 2026 16:00:53 +0000
Manifest this update: Wed 25 Mar 2026 16:00:53 +0000
Manifest next update: Thu 26 Mar 2026 16:00:53 +0000
Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: EMU6lvhCoWrM4NvtrtaOns8kbCq+aRZCuI8PBE/VzRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:34:e0:f7:2b:f1:7c:58:8d:e5:b2:7a:da:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Mar 25 16:00:53 2026 GMT
Not After : Mar 26 16:00:53 2026 GMT
Subject: CN=37e905105df9e2578e01d5c95b04d10cb32432e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:16:f6:69:4f:2b:e3:e3:23:bf:4d:6b:12:
3f:b6:c3:c1:2f:34:1d:65:36:7e:0a:a2:ee:36:0e:
79:c5:ca:21:fe:82:03:b5:35:f5:d7:fb:77:02:47:
26:f0:ec:db:a4:5d:c5:f5:c3:07:13:63:c3:ff:17:
14:26:45:c1:e8:f9:a7:d6:17:39:3b:72:74:3d:bb:
95:76:2a:67:60:55:c0:8f:20:1e:95:7e:e3:b5:a4:
86:28:b9:33:69:80:c3:b8:58:60:42:bb:c1:10:61:
01:cc:2a:fa:e9:cc:fc:37:29:27:24:5a:ee:f1:41:
0e:94:21:81:94:ba:71:5a:c2:f9:5b:42:49:2c:e3:
13:36:c5:2b:fe:ee:8a:81:39:88:11:77:bf:5f:0b:
c3:51:33:6f:43:c9:72:b7:35:92:88:4e:a0:8e:67:
b2:cd:42:b7:91:3a:02:62:54:9a:e0:1c:cf:76:b3:
a8:c1:c8:64:9c:76:e9:86:fc:02:8f:4c:97:c6:2a:
c1:c2:6d:0f:02:e5:06:b5:45:b5:49:e1:89:c0:05:
a3:5e:9a:92:49:dc:e1:da:7b:41:b8:7e:fd:d6:09:
e2:fe:e2:2f:74:8d:cb:ca:9c:cb:35:22:b8:7d:32:
11:9c:8a:c0:a7:d2:0a:17:b5:2b:02:ab:93:6e:cb:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:05:10:5D:F9:E2:57:8E:01:D5:C9:5B:04:D1:0C:B3:24:32:E1
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9f:0e:c4:9c:03:10:3d:f8:7a:ca:40:50:80:29:c5:43:09:
ed:83:97:c0:0e:88:1a:ce:5b:84:a9:cd:7b:d3:f1:73:6c:29:
4f:92:a5:bb:c1:38:18:5b:b4:4f:db:9e:d8:6d:3b:5d:f2:95:
9e:2f:9d:4d:e4:10:df:41:3e:87:f2:e4:08:ba:42:1b:17:a8:
1a:ea:c5:08:7b:d0:1b:89:6f:6b:6a:5d:2b:e3:cf:34:b3:5c:
03:8a:dc:56:e2:93:71:60:db:06:b3:8f:ee:03:9b:00:88:9d:
91:eb:25:7b:d1:74:be:c5:b1:d7:d9:9a:0a:88:de:73:3a:d2:
be:57:10:45:d7:f7:87:2d:34:1e:3b:41:c0:5a:99:42:f3:42:
c9:67:8d:5b:31:54:6f:6f:9a:ae:da:85:93:e1:75:e1:38:dd:
2c:53:5a:8e:97:4b:07:2e:af:11:01:87:06:c2:08:16:bf:f5:
23:e2:ee:e1:e0:86:e5:e7:57:20:f9:91:1d:73:c8:73:3d:54:
be:99:e2:1b:3e:31:18:39:91:57:e2:d4:96:d6:19:07:cf:75:
cd:a1:67:d7:50:40:83:3d:37:47:a7:b1:2b:16:88:c6:44:66:
a0:50:91:59:7b:32:d0:85:58:18:79:f3:c9:ba:33:8b:9d:18:
e5:da:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:43 2026 by rpki-client