Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: f97sQuQ9TtAg5kT+zYM94gkZ78+OL1HRtRXWQGTK5m0=
Subject key identifier: 7B:7A:6A:B9:8C:87:1F:33:A7:4D:88:D7:0D:F4:4E:A9:0D:FE:DB:D0
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019D265F357E1B6DDCCE96691CF40659A939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0F16
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: IpVy21aKXqVDLikIolregJ0QnwZlrQU6AwXr4H8+zvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:35:7e:1b:6d:dc:ce:96:69:1c:f4:06:59:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=7b7a6ab98c871f33a74d88d70df44ea90dfedbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:03:9f:8e:64:bd:38:03:11:e7:4c:17:be:
b1:b1:74:b0:7f:94:9f:b5:0d:d9:49:58:36:03:33:
7f:ce:29:df:d7:18:6a:63:7f:62:c8:e9:1a:12:15:
97:f7:ad:03:ec:be:23:e2:0f:40:a5:fc:5b:f7:d9:
10:bf:df:2e:33:a9:10:42:f4:5e:2a:eb:ff:09:69:
6c:70:ff:36:11:10:47:c3:a1:13:08:78:54:f3:aa:
2e:c0:f1:7b:85:f1:93:5f:ca:19:07:bf:5d:f8:e5:
7f:81:3f:1d:c5:0b:62:01:02:c8:f6:db:22:ea:81:
47:c0:a4:1e:ff:3c:bf:59:f3:33:8b:70:6f:ea:3f:
52:32:9e:98:c6:38:3c:fe:af:38:f0:7b:4b:40:f2:
93:e1:66:20:d5:04:27:99:05:dd:f8:a3:a6:fc:2a:
9c:95:8f:c6:af:c4:03:96:41:b6:7c:07:da:ef:45:
39:87:a8:1f:6c:4c:35:4e:51:da:ff:38:eb:0b:15:
0e:78:9c:d3:a1:24:ce:92:46:b4:dc:5b:36:99:31:
3d:13:94:ce:da:b0:d0:2c:65:9d:0d:91:2b:f4:4f:
91:8b:89:94:ef:87:59:36:d9:a7:d5:d7:b2:c7:10:
1d:31:b2:43:cb:fb:22:05:a1:e8:d4:18:f7:90:6c:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:6A:B9:8C:87:1F:33:A7:4D:88:D7:0D:F4:4E:A9:0D:FE:DB:D0
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:96:61:e8:42:bd:72:54:36:49:ce:00:45:7c:08:e5:a7:1e:
f1:c9:55:0b:a2:bb:c5:64:c3:fe:77:7c:a6:1d:41:d5:ec:42:
f1:8c:91:67:dc:cf:37:9f:09:40:8b:72:e4:a0:e6:87:88:43:
20:f5:2a:14:91:d3:00:65:30:b8:ec:88:75:35:ef:0d:99:f5:
1b:85:3b:93:0a:53:2f:5a:f4:81:9b:a6:b8:c3:47:b5:4d:a8:
25:fe:df:23:b2:6d:74:a6:31:06:1e:62:2c:ac:bd:3b:16:51:
2d:2b:25:2b:0e:c1:69:76:33:f1:03:80:08:7c:ec:17:49:96:
1d:a9:08:c6:cd:e6:5d:5f:a4:15:05:e1:ca:14:ae:22:23:f0:
49:74:63:00:2c:43:bf:47:3a:5d:c1:be:ec:a6:7b:43:20:02:
2d:59:60:44:10:30:81:09:64:b8:29:80:16:87:45:b1:7c:8c:
b0:a6:f4:e5:5e:4e:a3:62:88:96:ee:27:77:9d:f8:81:2a:94:
d4:f5:03:84:3e:a6:fc:32:be:4f:e6:a2:b0:a6:55:3b:65:e1:
d4:13:01:45:98:d7:d1:89:16:87:04:6e:31:bc:71:cd:d7:3b:
48:54:f1:ec:b6:da:ee:83:ea:15:e4:dd:a5:16:12:e2:a9:d4:
bd:51:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:25 2026 by rpki-client