Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: mAL8guMPM+gV9tCRN5GcWbpFOA2St+zmRn9hMJf9CrY=
Subject key identifier: 4B:3A:5F:E5:65:AC:F4:A5:5F:BF:3A:3D:BF:79:B3:6D:AD:A2:2F:7B
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 019D2961913E958B188B64C05625297B11EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: 0fMGliU2DY90o-COL7gfsd6xbVw.roa (hash: pyD2slLDpEMFdPN9pfMsq689iSsZ/8LJ4vMycIuRMpg=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: tbJ5AKDy+sKMXj36mkWf8DYgNACA/batTGcmLGqGIfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:91:3e:95:8b:18:8b:64:c0:56:25:29:7b:11:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=4b3a5fe565acf4a55fbf3a3dbf79b36dada22f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:96:ba:c7:75:6e:2c:6c:e6:b9:16:75:59:
aa:99:ec:4b:e8:69:48:39:a2:51:12:e2:6b:a4:29:
fd:63:49:a8:f0:ce:f5:df:ed:1d:af:99:98:59:8f:
0c:52:45:da:64:5a:52:95:13:1a:97:d2:5d:ee:0b:
19:ce:19:12:ef:77:8c:ae:62:43:ce:df:db:b0:0e:
41:cb:31:41:2f:89:d8:8b:54:5a:88:3c:88:42:1e:
68:57:8d:36:7f:ed:61:66:9c:27:08:4f:31:d6:eb:
d2:f3:16:da:e0:58:ce:0a:05:b6:2f:77:84:e1:43:
38:cb:be:56:72:e6:2d:60:b0:1a:d6:ec:99:0b:d5:
1a:db:a3:d3:19:b0:25:15:2b:85:bc:43:9a:ec:80:
4e:3a:b4:9f:d3:ae:75:b0:8d:7a:98:c6:56:b5:56:
40:77:18:b4:98:a9:6f:dc:39:b7:ed:8b:93:30:44:
4d:e6:2d:dc:84:99:eb:98:b3:49:44:90:f7:32:31:
0c:34:f3:b7:82:e2:de:ca:f9:50:53:b0:b7:fa:63:
04:c2:50:f7:98:b5:23:ce:fd:b9:d3:64:0f:d9:8b:
83:66:0a:23:2f:f1:08:d1:30:bf:ad:73:3e:9e:e6:
bc:3e:78:d8:32:43:ac:05:03:5e:79:82:20:b3:82:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:5F:E5:65:AC:F4:A5:5F:BF:3A:3D:BF:79:B3:6D:AD:A2:2F:7B
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f9:e3:d9:1d:a6:1e:00:1e:d5:5e:6d:4d:fc:ac:09:6c:98:
7a:05:48:20:a1:26:ee:7e:a1:fd:49:84:f7:bf:87:10:16:6f:
7c:ef:c1:7b:15:7f:73:b6:94:de:73:ee:d5:3d:1c:90:dd:07:
f6:96:f5:ae:13:69:40:bb:fb:6e:b6:22:be:f7:5a:2e:42:2e:
bb:6d:c3:cb:b5:32:51:82:cd:55:6b:fb:6d:82:1b:2c:04:9b:
1b:2f:de:a6:60:dd:5e:c7:11:97:9f:bd:69:13:55:68:4f:a5:
33:6a:38:00:7e:03:59:3a:d4:6f:94:55:0a:b0:0f:3b:7d:23:
13:d0:6e:90:d5:44:61:d2:71:1e:d8:e5:71:52:92:46:ab:c8:
f6:db:41:2c:12:b3:f8:e2:47:2c:ab:16:0c:a4:a6:ed:d2:77:
82:d1:d9:33:3b:57:22:01:02:45:92:17:8b:a7:55:ff:6a:eb:
4b:6f:7c:27:7c:41:f4:fa:29:78:6c:21:cf:c8:39:1b:07:b3:
aa:e3:0b:e6:8c:f0:00:da:e7:3b:48:62:9a:65:f8:56:a4:4e:
75:52:3b:5a:7a:a3:45:22:01:a8:d0:ec:e4:af:1f:98:f1:4d:
cc:e4:fd:e7:96:40:34:8f:79:29:73:c6:b7:46:51:8b:be:e8:
78:1c:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:43 2026 by rpki-client