Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: 4InhquZm1ITi6re3aW4Ny+jc0tboG906jSTqMRGmG9Q=
Subject key identifier: D6:30:B5:7F:9B:29:B3:FF:18:8A:0B:5E:CA:90:84:0F:EE:A8:28:F5
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 019D25F184A4C694B59F6A3E9F36108FCCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: 7Mk8bUflIxy9W2jZPrC9JwGSc2ges2mHtX4BNqf7sYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:84:a4:c6:94:b5:9f:6a:3e:9f:36:10:8f:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=d630b57f9b29b3ff188a0b5eca90840feea828f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:86:9a:73:85:1e:ad:de:85:c1:01:4f:3b:
cb:ec:f7:10:4d:6f:5d:09:fd:3e:cd:5c:55:86:26:
89:ca:ec:19:6d:60:01:16:40:06:5b:61:25:19:92:
44:c6:98:27:fd:c1:7b:f2:b4:98:7a:09:5e:e9:9e:
ad:73:f6:85:48:a2:a2:72:73:08:cd:68:f7:be:29:
24:4d:17:19:6a:ed:e2:85:d1:39:ad:6e:db:31:8f:
d9:0f:2e:c8:26:31:94:12:0e:0c:e0:7a:97:8d:c0:
1d:cc:0b:db:b8:3f:d3:8f:03:48:e1:3a:61:4e:80:
52:38:fb:1c:ac:76:0e:96:87:20:20:65:10:97:db:
e0:eb:18:8d:2b:09:f5:3d:a7:51:ab:58:e4:38:96:
3f:58:53:e6:77:36:e6:fa:17:fa:53:02:34:e4:10:
4f:20:81:2c:ae:4a:ae:8d:29:8f:9e:40:f1:a2:6e:
ff:80:29:65:44:9b:47:8b:ff:fc:89:bc:2a:ba:23:
05:c4:4f:2f:d8:3c:75:99:08:2a:df:c8:4d:94:c6:
63:37:ad:d1:fe:5a:46:af:bf:32:7e:7c:a2:e9:0c:
54:0b:3c:fa:56:83:ff:59:8f:4c:fb:2b:5f:36:47:
06:40:77:b3:25:7d:ee:52:0a:ea:1e:6e:78:a8:4c:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:B5:7F:9B:29:B3:FF:18:8A:0B:5E:CA:90:84:0F:EE:A8:28:F5
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4a:6c:5b:9e:c7:87:32:2d:dc:01:2e:99:b9:16:4a:bb:23:
45:e3:01:9a:47:e1:c2:64:3c:1a:c1:74:90:86:7e:b9:2d:f7:
f8:34:59:d4:d9:f3:1c:aa:83:28:00:47:74:1b:e7:ca:ea:0b:
48:ef:3b:ba:60:92:65:93:f5:60:9c:9b:a4:5d:73:84:9e:04:
57:48:16:9f:23:9a:3e:f6:11:d2:97:03:10:0e:40:40:4c:0c:
e7:2d:73:cc:78:39:e2:a8:70:86:7b:83:bf:ea:e4:43:fd:b2:
4d:c9:4a:be:f4:e8:e3:2c:28:01:5a:38:46:dc:72:d9:ea:ff:
bb:72:67:89:8a:e7:93:e3:7c:18:e3:12:e2:78:8b:a9:76:4a:
0b:e0:5a:f3:24:6d:25:a2:2f:4c:65:e2:64:21:24:91:da:42:
32:99:b8:68:37:71:5b:34:b0:8e:fb:3d:e0:12:6d:fe:41:21:
7c:40:0a:18:5f:06:ce:34:55:1b:12:ae:61:cf:f4:6b:18:16:
c2:dc:c8:fb:00:35:45:99:27:26:51:6a:83:bd:e8:23:b1:3c:
22:4d:5c:fd:ce:86:43:58:dd:c1:f7:08:60:3f:31:9a:d1:57:
a0:f0:f5:6f:f1:c7:16:77:75:34:49:5d:b3:72:f2:6c:4c:25:
ab:94:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:52 2026 by rpki-client