Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: V6ZQTLTSQNXVYOyUa3YvwYuiMBu/W7dcsPIU90FXRdM=
Subject key identifier: F1:2B:67:B6:3B:17:67:7E:3E:8A:60:04:0D:CE:BD:4C:E8:5E:55:0B
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019D288484464AF807B3F2533878D81FA64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 05:01:06 +0000
Manifest this update: Thu 26 Mar 2026 05:01:06 +0000
Manifest next update: Fri 27 Mar 2026 05:01:06 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: Biap5TzKrKV+fBUkzm130yhXduC9AscedzX9YoWL6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:84:46:4a:f8:07:b3:f2:53:38:78:d8:1f:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Mar 26 05:01:06 2026 GMT
Not After : Mar 27 05:01:06 2026 GMT
Subject: CN=f12b67b63b17677e3e8a60040dcebd4ce85e550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:52:b6:a4:c4:72:c1:f5:05:16:c8:96:c7:
11:00:ba:4d:ab:25:96:62:e6:71:91:ad:cd:59:19:
0a:12:6f:61:c6:9f:ec:b8:f8:17:7d:04:22:6b:25:
0b:f1:22:ea:6f:06:14:cc:bb:71:e4:4a:3a:cc:01:
f9:44:0e:73:76:73:7f:32:15:b7:7c:25:87:a5:7e:
61:9f:d9:d7:06:83:ac:05:bd:04:3d:4d:41:83:3a:
b8:a0:a9:aa:50:d3:82:f0:1d:c8:14:8a:71:b5:f7:
04:ca:cb:4b:f1:26:8a:8d:8a:6d:54:af:3a:b9:c2:
cf:36:b7:76:fa:6f:37:63:ac:61:20:3d:fa:8c:a6:
45:61:8d:05:0a:a7:45:29:90:96:a7:e1:b9:62:a0:
c5:aa:28:bf:d0:84:cb:c5:71:79:22:75:14:f3:d7:
43:0c:dc:bb:5b:7f:33:99:99:64:31:65:89:a6:3d:
6d:e8:be:48:86:3d:94:b9:a6:2c:26:6b:df:7c:05:
e4:23:51:70:46:ff:86:4b:eb:29:0d:51:5b:e0:9e:
29:90:cc:81:35:1d:c3:8b:76:7d:5c:4a:7a:db:98:
57:09:e3:0f:22:db:80:bf:09:47:80:68:1d:26:6d:
83:cc:b1:09:39:d1:9d:4b:3a:d5:44:6e:1c:87:32:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:67:B6:3B:17:67:7E:3E:8A:60:04:0D:CE:BD:4C:E8:5E:55:0B
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:40:06:b9:17:a8:da:f0:f6:a0:d0:36:69:17:ec:51:36:
fb:1d:df:2e:ac:4b:6e:32:e9:c3:ab:d8:e7:78:0e:d2:bb:f5:
09:9b:96:8c:6b:25:2a:4e:d3:3e:07:a5:66:f4:4e:da:c7:aa:
fd:8c:29:7e:55:09:b2:5b:2c:ea:b3:08:fa:e1:14:d0:f1:c8:
07:a0:90:ea:95:15:f1:bc:f2:b7:c3:98:ee:e0:12:62:c1:a9:
e1:1a:9e:a5:88:81:2b:57:1b:c4:4a:3e:1c:1c:95:1e:17:2c:
77:13:ed:08:50:d9:11:2b:b7:16:34:5a:8f:32:9a:7e:21:b4:
ce:c6:81:03:0e:cd:78:5d:ba:ee:77:15:94:ac:cd:a2:bb:ac:
b4:14:22:6b:0c:3e:7a:f5:22:22:2d:dd:6f:24:62:a0:17:c0:
be:0d:f8:4e:de:57:00:76:ab:f0:0a:0b:5c:f9:57:72:33:29:
f1:3e:51:67:f1:2e:84:ea:a8:24:9c:d3:52:e2:c1:fd:db:3c:
19:f8:cb:53:e3:c3:fa:e2:ca:8a:ff:b6:5b:a7:a0:a6:63:fc:
cb:5d:13:05:cf:43:64:f4:e5:10:04:3e:3e:96:9c:f8:ff:ae:
6a:d5:6b:59:47:6e:e5:fe:b8:66:d2:0a:1b:45:29:95:55:cb:
4b:e1:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:31 2026 by rpki-client