Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier: GrOMj71ywKewQwaXEUoSuu1I/LcBbVR1aQU3QRNMM6g=
Subject key identifier: 17:39:BC:1E:D0:78:A8:93:C1:A4:70:50:90:5E:57:4C:55:09:14:8D
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 019D28BB48234A3B73E665C4220F243CF8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number: 13D1
Signing time: Thu 26 Mar 2026 06:00:55 +0000
Manifest this update: Thu 26 Mar 2026 06:00:55 +0000
Manifest next update: Fri 27 Mar 2026 06:00:55 +0000
Files and hashes: 1: v-pMKzPNfy5rtd72CjyjHSP_0fI.roa (hash: EF0zddsGgRS422TMKGAJaOiCyP7MY9L2A1NyAEExYsA=)
2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: CmXKPtkXdiq3StravnRd1G7A5dwVUkHd0Z4m4jLrK7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:48:23:4a:3b:73:e6:65:c4:22:0f:24:3c:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Mar 26 06:00:55 2026 GMT
Not After : Mar 27 06:00:55 2026 GMT
Subject: CN=1739bc1ed078a893c1a47050905e574c5509148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:57:a3:09:13:cd:e2:22:3b:62:66:c6:ed:
71:d3:d2:1b:6a:6e:b1:2f:1a:33:66:01:22:3d:90:
04:d7:3a:d0:b4:cb:11:46:b8:ca:91:7e:ec:b3:9b:
de:95:6c:a8:7c:80:ed:af:e6:a7:45:bd:5e:60:72:
84:82:d3:d4:74:37:10:7e:11:fd:b1:4b:9b:09:7e:
6b:89:1b:d7:0a:43:2a:6e:f2:42:91:31:46:42:45:
d2:2f:97:bf:26:2f:3e:f4:ae:37:42:8c:16:c0:6f:
2f:5c:7b:d9:4c:53:c8:b3:de:dd:3d:f3:68:c2:e5:
50:15:83:a9:6b:2f:8e:be:38:d2:34:62:ed:87:08:
70:53:b9:48:ee:a9:3e:1a:22:84:6b:d6:e7:af:c9:
3b:7a:5a:68:d1:30:8a:a0:c4:c5:2b:9f:54:3d:f1:
98:60:08:ef:93:2a:e4:16:ac:d7:a1:46:cc:c2:09:
58:63:b4:54:c7:b8:35:9c:70:2f:b6:f3:da:6f:b5:
40:dc:34:a8:5c:db:7d:64:b6:1c:85:f2:20:31:c7:
a1:08:20:8e:7d:77:fe:2d:74:cd:bb:ba:43:da:9a:
8d:50:1d:3f:d4:4c:ae:2a:9d:07:6a:fa:d8:eb:d4:
47:d0:82:6d:6c:e8:96:7e:ba:d8:70:05:7f:43:65:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:BC:1E:D0:78:A8:93:C1:A4:70:50:90:5E:57:4C:55:09:14:8D
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:69:30:2a:d5:8a:9e:cc:dd:d9:5f:44:d0:49:4d:11:ff:
11:11:37:38:74:92:ad:24:d0:9c:80:20:e4:48:8b:8e:5b:1f:
25:6d:9e:43:dc:ba:cd:08:ab:32:9a:20:fb:95:6e:6c:b7:38:
db:aa:f4:dc:f8:c5:cd:c4:99:ae:18:72:81:a5:57:05:08:ad:
a6:d5:41:06:10:48:b6:fe:46:54:60:d6:05:1d:01:dc:eb:d5:
f5:9b:b3:07:1d:19:0d:17:b3:47:4e:9d:a1:a0:28:b5:59:22:
67:00:df:dc:5b:6d:3a:eb:8c:ae:dd:b8:c8:4d:58:18:78:22:
ea:b5:1f:83:c9:0d:ad:d6:51:84:e6:44:c5:46:d8:df:ae:e6:
16:f3:26:1c:66:20:eb:bd:c6:b6:83:34:62:d6:0b:e6:04:7e:
48:c5:3b:e2:7c:db:cd:f5:37:ca:07:16:30:9d:ad:62:ad:2d:
e3:05:30:5c:7c:1a:c5:81:5a:7d:3b:30:e4:47:bd:18:6f:50:
2d:8f:93:07:d0:29:2c:d6:8f:28:01:50:dd:85:b1:c0:ea:05:
1e:6d:a5:fd:8b:7f:05:0e:eb:5f:64:9b:3b:9e:17:a7:65:ca:
cf:99:f1:5a:17:4a:5d:eb:80:4f:09:a3:50:3a:f2:d8:29:ef:
7b:90:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:22 2026 by rpki-client