
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: jcsZEzflh7Yds/OjFKy6MOE3eJuSsKytngddPEpB9MY=
Subject key identifier: E6:94:45:9B:2D:DA:F9:92:E0:4D:F5:93:67:CD:71:16:90:55:B1:7B
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 019D265EC9E138E04C5FB46F5E5C64CFF893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: XDxUv/qpl6yg6oJ3rWVnr8fq3ljaZ5Bsd73TEE8jc8E=)
2: sWEyZCi5NDwyUie3aWYd5IPmfuw.roa (hash: TSCcBZmyzZxP3eOaeaIBX8e9nFHBHGiKk40P3OCJfbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c9:e1:38:e0:4c:5f:b4:6f:5e:5c:64:cf:f8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=e694459b2ddaf992e04df59367cd71169055b17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:5e:8b:fb:52:41:7c:24:20:de:52:1c:8f:
f5:9b:c1:cd:99:f9:9e:3b:e8:b1:87:fe:bf:cc:5b:
14:00:06:a8:31:1f:ce:99:2e:14:94:f6:ec:3c:71:
cb:2b:08:45:6c:d4:e6:68:07:5e:76:3f:55:b1:cc:
74:37:1c:62:0d:51:2c:23:dd:26:05:0b:18:df:cf:
4d:ae:5d:60:38:63:f6:f8:e2:de:e7:78:ea:4f:d3:
22:ec:56:a2:8f:19:dc:db:79:0c:50:c0:05:f4:aa:
04:c7:84:a0:1f:25:7a:e3:09:e6:3d:cd:e6:ff:3b:
f6:28:2b:96:4f:2e:20:fc:5f:05:d8:65:70:56:ea:
c0:21:c8:1d:f0:c1:28:0c:10:bc:d0:b8:1d:1a:ac:
ea:16:79:03:6d:bb:88:84:80:23:96:8c:32:0c:9e:
f4:0e:0f:12:5b:e6:5e:0f:da:1a:49:7b:9b:75:54:
a0:a8:a1:54:d0:f7:bc:cc:07:f8:e6:f9:3d:38:bd:
31:1e:d9:90:03:47:3f:37:ea:54:bb:18:32:ba:f5:
9e:a1:4c:f0:49:e8:e1:9a:58:35:1b:28:e6:5c:f4:
aa:06:05:cc:ad:04:cb:3c:74:14:33:71:db:3f:8b:
aa:c8:58:a2:90:69:0b:21:c0:26:36:cc:94:a5:ae:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:45:9B:2D:DA:F9:92:E0:4D:F5:93:67:CD:71:16:90:55:B1:7B
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:6c:70:00:b1:c3:3b:90:91:48:55:d6:f6:58:b9:79:71:
16:83:f6:0d:58:5e:62:ca:bc:81:2d:3b:e2:73:27:aa:95:15:
30:93:6c:6b:5c:80:b4:4d:8e:22:6b:70:20:03:4c:e8:a2:71:
5d:fd:72:ff:b1:05:74:72:69:01:0e:9f:1e:62:51:68:1f:e1:
99:85:11:e5:55:2d:2c:04:ee:57:44:be:e8:27:77:f3:fb:04:
4e:52:66:23:2a:fe:33:03:88:7c:58:4d:86:78:c1:f4:0b:c9:
f0:02:1b:88:3b:ff:18:10:98:54:51:ef:6e:53:26:62:70:c4:
5e:08:e6:76:0a:95:f8:78:87:ad:fa:46:8e:6c:cf:85:1d:5f:
23:5d:79:34:54:5f:61:b2:2f:81:39:e0:6c:f6:6f:be:ce:d7:
43:ff:de:dd:1e:ee:e3:e3:10:01:14:d8:c1:85:92:57:0a:10:
6b:11:62:6a:90:96:fa:77:e5:40:09:46:75:74:09:80:57:36:
9d:22:2c:99:f7:1b:a4:d3:c9:a9:4f:9b:47:58:78:7b:25:f8:
a5:10:b4:5d:a3:15:25:2d:7f:35:02:59:77:c8:02:2f:ce:86:
76:62:b5:17:cf:ff:fa:de:27:71:a1:f9:92:d2:1e:c0:06:2e:
d1:8b:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:10 2026 by rpki-client