Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: ZYlfSrUfXXXLZVTx0LirgWNBdY50b0SsvBJglhWPOQY=
Subject key identifier: D7:98:7C:55:0A:EA:E9:CC:5D:AA:18:CD:8A:82:E6:12:C8:E8:68:93
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019D299756467EE6F3D35C314EF8AE6DEFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 11CA
Signing time: Thu 26 Mar 2026 10:01:16 +0000
Manifest this update: Thu 26 Mar 2026 10:01:16 +0000
Manifest next update: Fri 27 Mar 2026 10:01:16 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: qf4Bqtp8p353WmNWPM70wiCgJJaAgHSh5RZUhPcdJgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:56:46:7e:e6:f3:d3:5c:31:4e:f8:ae:6d:ef:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Mar 26 10:01:16 2026 GMT
Not After : Mar 27 10:01:16 2026 GMT
Subject: CN=d7987c550aeae9cc5daa18cd8a82e612c8e86893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:ec:cd:d4:dd:27:8b:3b:19:5c:3a:a9:0b:
69:12:dc:d0:6c:9b:ca:4e:f9:09:02:64:a8:e8:79:
b5:51:0c:74:4d:d7:8c:82:6e:29:2b:c4:fa:c8:fb:
77:c5:8d:60:17:03:3f:84:a7:1f:96:4c:ad:33:5c:
52:d8:c4:9e:aa:b8:39:df:6b:bb:1f:c8:bf:89:fa:
8c:b6:5b:c4:a0:f4:5d:7e:01:f6:0c:48:4e:51:45:
1e:75:9b:20:c6:9b:91:de:30:c9:04:57:90:39:8e:
2d:e2:fe:0b:d0:9a:04:b9:91:a2:42:4e:0e:14:a2:
1b:11:a8:0a:73:12:2a:95:43:6a:a4:51:b4:a5:3a:
1a:23:b9:d9:3d:24:94:e7:ec:88:b0:d5:30:9c:c8:
37:3f:f3:39:a3:c2:0a:8b:ff:fd:c4:f3:b7:a8:cf:
41:34:8a:2c:52:3d:c9:10:8c:bb:70:b1:e1:30:28:
22:7c:40:32:ff:8e:c8:33:86:d8:c9:d2:db:0f:8a:
5e:b2:db:07:fb:57:13:31:29:01:96:b7:5b:9b:24:
1d:10:cc:bd:9b:5a:a9:78:95:04:b6:90:3a:f8:6e:
21:10:d3:80:bf:4d:17:a5:4a:d5:25:e3:02:46:73:
98:46:9e:c2:10:48:45:42:55:ca:70:19:81:bb:5a:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:7C:55:0A:EA:E9:CC:5D:AA:18:CD:8A:82:E6:12:C8:E8:68:93
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:8a:53:3f:f5:b9:ea:dc:ec:1b:c3:24:64:f3:f7:6c:87:
87:23:49:ab:2f:34:08:34:68:ab:50:38:81:66:8f:2f:b5:6c:
c8:12:f1:42:94:f7:df:b0:51:45:6d:c4:3d:2d:b4:ff:05:e4:
53:53:88:be:22:d0:be:33:07:ac:7e:15:48:44:c0:25:20:f9:
4a:c7:a2:69:94:6e:74:4b:25:48:77:2c:dd:55:56:80:7c:64:
83:3d:74:68:70:70:38:a2:17:87:fb:49:c6:24:5a:8c:7b:bb:
4e:04:4a:8d:84:47:05:3a:17:0e:92:76:24:28:10:da:9e:12:
3b:6c:ee:c8:06:3a:0a:2f:20:ed:80:d5:68:bf:53:77:ac:65:
aa:57:3a:d5:8c:c9:1d:c4:af:66:ed:5a:4f:6b:0e:81:bf:61:
15:11:90:cf:12:29:52:bc:5a:13:6c:31:37:c4:8a:8c:1e:9a:
0e:72:7e:77:8d:fb:30:7b:0d:57:c1:18:40:79:2e:e4:d8:82:
29:f7:b0:1f:50:59:f4:b7:c1:15:0b:a3:c8:e1:9a:56:4d:84:
7b:e3:72:b3:6e:0b:a4:8b:d8:f2:62:ba:84:43:26:98:12:2a:
3c:7c:ef:08:09:5b:3e:b7:3f:81:71:e9:3f:18:1f:37:dd:0c:
32:8b:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:54 2026 by rpki-client