Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: 7heEw7aUbKd4RJpxnyKnYocr9YhCRXkvOkB9D42yEL0=
Subject key identifier: 4D:CD:79:57:B8:0D:8F:21:17:A9:18:4B:AA:42:C6:82:19:16:05:A6
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019D2816C30E72D85CB5EE51263D89FC6D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 049A
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: dvwMKx2SA3lWQPR9n5sGeNZhnS5OsCIW1AmaeXH7l/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c3:0e:72:d8:5c:b5:ee:51:26:3d:89:fc:6d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=4dcd7957b80d8f2117a9184baa42c682191605a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:db:e6:dd:42:64:36:44:99:ee:f7:54:d8:
df:fe:bb:67:5e:0b:85:03:39:e8:b7:26:a0:30:b1:
c2:45:eb:c3:81:7a:69:27:a7:57:4c:b4:32:0c:46:
35:d8:68:e5:5f:3c:45:7e:de:14:c6:78:e1:d1:ef:
89:c1:89:9e:f5:e5:56:7d:94:92:66:b3:3e:6b:85:
70:80:57:96:66:61:40:6f:36:c3:4f:f4:07:1f:dd:
14:b3:b8:e1:7f:59:ea:ae:69:85:c6:aa:6e:8d:e5:
ce:05:e8:38:4b:a2:82:89:33:82:c1:54:91:66:53:
54:9c:cf:1c:fe:39:ef:39:68:a5:c7:74:53:08:ce:
5c:e9:d5:cc:a2:a0:ef:53:60:75:f6:24:f2:04:7c:
0f:7f:bb:b7:8b:0b:af:27:8f:12:10:1c:59:fb:4b:
9b:58:b8:41:f5:89:14:8c:d4:de:73:ba:f6:86:86:
4b:8e:aa:37:15:49:6d:c3:90:7f:29:0e:cd:49:73:
82:10:17:b3:31:f2:65:82:95:c8:83:a8:9e:8f:99:
22:55:3d:52:cd:99:61:43:13:aa:ea:b1:c9:75:ee:
72:07:43:ca:2a:7f:e8:95:3d:4d:b5:11:4a:b9:9d:
9f:3d:44:01:f6:c7:7a:11:f6:6a:57:c6:85:56:96:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:79:57:B8:0D:8F:21:17:A9:18:4B:AA:42:C6:82:19:16:05:A6
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d3:fe:fc:3a:dc:cc:7d:77:f8:7d:a3:59:4b:00:84:aa:ba:
81:a0:a6:5b:ea:7f:1f:87:4a:64:49:42:b5:e9:ec:a0:81:dd:
c9:c5:03:42:b4:7c:33:3c:ee:33:bc:18:0c:e7:02:0d:1d:55:
df:14:23:e1:54:a5:11:73:56:3c:82:25:b9:c2:8e:ea:6c:e0:
0d:54:a6:1b:f2:f7:54:e9:c2:18:a4:6a:e8:fb:f6:40:ef:32:
e8:0a:99:0f:27:64:ef:ec:f7:ab:07:1b:5b:95:d7:52:c7:c2:
eb:79:42:ce:c8:8e:e6:0e:2f:ab:83:cb:55:24:de:20:b2:43:
6b:f9:31:78:2d:02:85:76:f0:1b:07:72:f9:ae:21:c3:c5:54:
26:a0:b1:6f:56:ea:c6:7f:7c:12:99:d7:f9:f9:45:f8:75:a8:
36:16:5f:6e:9c:6c:b6:b0:ce:f3:9e:bb:55:f8:f4:7b:54:7f:
24:55:39:33:f8:7a:98:10:a2:12:fa:9c:7e:4c:f9:de:d1:04:
5a:df:42:02:b4:c0:53:d7:b2:c1:fe:2f:ae:f7:39:fc:8d:cc:
ab:0e:31:43:59:5f:4d:09:d6:5c:0a:41:f4:4d:00:a5:58:e4:
29:3f:dd:2b:96:58:e4:e9:a7:94:70:a4:37:04:9e:e3:d1:a9:
a1:67:57:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:33 2026 by rpki-client