Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: uYWhIVrhFMBjsDw2jEHwRtAhIIEqnbo4gV10qc3dbUc=
Subject key identifier: 84:D9:5C:70:B2:AA:B8:4F:4B:FD:D2:D2:1D:14:B8:D2:13:94:00:01
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019D26CD61D9BD8B2A2586521EA27D44E51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 043B
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: f05BYX5xi/HD2f05yoMfHtPflpGFkxa76T3Y/2kFbaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:61:d9:bd:8b:2a:25:86:52:1e:a2:7d:44:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=84d95c70b2aab84f4bfdd2d21d14b8d213940001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:ee:00:23:bb:a8:d3:27:c6:1b:4b:f5:36:
5f:1b:40:51:4e:78:2c:90:fc:f1:50:a9:09:3a:bd:
dc:42:ad:93:e4:a2:cf:cc:6a:ea:70:0e:06:2f:f9:
d9:28:c9:84:ee:a5:63:ba:5c:0f:e5:e9:1a:4c:94:
4a:48:88:c5:4f:1f:e8:ac:46:6a:c4:a8:92:66:22:
2e:4e:d4:43:2d:4c:0a:c7:5c:e3:99:dd:34:1d:57:
e3:79:54:44:13:95:6c:51:d9:d8:65:8d:b9:fb:44:
49:9f:e1:42:c6:c3:fb:10:03:30:26:f4:d4:51:a3:
7d:59:83:54:66:10:66:db:7b:13:f9:5d:90:97:01:
eb:9b:02:82:07:45:0b:da:6f:a8:5b:b7:06:e0:e9:
20:7d:4f:fb:d8:c7:cf:65:7b:4e:30:a7:66:b1:4f:
ce:97:4b:33:49:d1:75:6e:a1:a0:37:ef:a8:2b:58:
ea:5c:ab:60:40:bc:2a:25:a6:8e:fa:43:02:ca:5b:
41:e8:59:c1:29:97:e8:de:81:7d:34:bb:6d:72:a9:
92:95:39:30:70:bf:bd:2e:61:a7:30:03:21:42:96:
ff:55:1c:fd:80:8c:7b:d5:df:7e:50:61:cb:35:65:
ba:12:41:95:cd:7b:59:2e:53:98:cb:3c:8a:cb:88:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:5C:70:B2:AA:B8:4F:4B:FD:D2:D2:1D:14:B8:D2:13:94:00:01
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:fc:49:54:53:1d:ab:cc:23:9c:15:34:6f:a9:7c:05:98:
68:2b:af:25:de:99:13:26:17:bf:a6:8f:05:d0:c7:3f:8b:62:
a9:b7:9f:e0:4f:0e:16:48:08:74:e8:f0:db:7a:2b:f2:3a:80:
4d:71:08:69:bf:9f:b4:94:40:b5:54:db:6d:10:bd:8e:d3:43:
ca:60:da:8f:27:f2:88:51:45:3f:24:d9:ce:6c:69:9b:e8:66:
cc:57:d7:52:8c:9f:64:0c:ed:f6:5f:43:f5:04:10:9c:d7:fb:
8b:bb:44:ff:9f:c8:b7:fe:f2:66:b6:2b:f6:1c:69:b1:ab:41:
94:12:f7:cf:3e:e7:0a:a5:9f:1d:16:85:a3:c4:36:2f:8c:d9:
03:f7:b5:56:a2:a6:49:f4:8a:81:c2:e7:20:43:11:cf:0d:e2:
a3:6b:9a:fe:d8:af:aa:ec:37:1f:df:10:66:45:a8:a8:86:ed:
41:5c:16:da:74:c9:32:7d:f2:b8:ce:ba:d1:c6:5c:e4:09:a5:
d4:62:09:58:a3:a3:d3:88:16:45:ed:7f:fd:47:1a:de:fd:73:
48:84:1d:aa:06:a2:fd:cb:4c:1d:11:b3:39:56:5e:bd:54:8e:
a1:5e:f2:04:6d:81:3a:d6:d1:8c:7d:97:b4:00:ef:91:73:91:
e3:d7:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:42 2026 by rpki-client