Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
File: zH_FX_DsJGI0pOPK_maqzyg6j2k.mft (raw, json)
Hash identifier: PVk5ySKsjT6xY36PxNhkgIg/ZxuwIBofRkrMr65Ko2s=
Subject key identifier: B3:55:02:75:CA:31:33:FF:5A:40:B2:60:EB:09:02:C6:65:83:D9:87
Authority key identifier: CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
Certificate issuer: /CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Certificate serial: 019D25BA57B4506E80338A965885A9A862B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
Manifest number: 0104
Signing time: Wed 25 Mar 2026 16:01:02 +0000
Manifest this update: Wed 25 Mar 2026 16:01:02 +0000
Manifest next update: Thu 26 Mar 2026 16:01:02 +0000
Files and hashes: 1: 4tHXUju7_s3qjkQe4-NIpaYhAJE.roa (hash: vN0diyZ4e6V+TpP4bUpaYl39s216dCxvp13J59q3eqM=)
2: zH_FX_DsJGI0pOPK_maqzyg6j2k.crl (hash: jnvfsl5PvED8ZCd5/svtMHL2bE++6NGW9nR4AfvK35E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:57:b4:50:6e:80:33:8a:96:58:85:a9:a8:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Validity
Not Before: Mar 25 16:01:02 2026 GMT
Not After : Mar 26 16:01:02 2026 GMT
Subject: CN=b3550275ca3133ff5a40b260eb0902c66583d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:67:ca:d4:16:09:57:89:48:ed:8e:54:d2:
12:b9:07:d3:60:39:d0:5d:b6:3c:36:e3:5b:82:8c:
58:13:b1:bb:c8:a1:5f:17:41:c0:82:db:24:59:59:
24:a1:da:cf:90:e3:9c:e8:81:86:19:1b:c9:1e:79:
51:ad:80:19:5b:17:aa:3b:26:9b:04:e1:3d:75:35:
6b:df:3d:17:2e:ed:bd:de:5f:2c:4e:28:e4:28:3f:
91:b9:bc:01:39:8f:be:41:7f:2e:84:2b:af:a3:5b:
1b:c7:3f:bf:6a:18:c3:21:94:4f:4f:90:40:15:ac:
ad:72:a7:7d:a2:aa:7d:50:69:1b:14:8c:e2:df:50:
6b:87:d2:f1:0b:a5:db:90:3c:c7:f3:86:66:0f:4c:
f7:39:a7:74:c7:ba:71:6a:50:ac:49:3a:fc:9b:c7:
62:7e:05:c5:34:f8:3d:44:0d:bb:c9:4a:6f:19:7b:
6b:63:18:18:59:d6:75:45:f7:55:78:c4:3f:8a:b6:
4e:e7:5f:3a:a8:a4:d1:63:bf:5c:67:ce:3c:c7:bc:
c1:c0:33:e8:be:ab:e7:4e:53:3d:3f:78:e1:0c:2a:
b4:18:8f:89:df:32:e9:28:80:92:67:fd:93:0f:a7:
cd:ea:3e:73:d5:e2:91:bb:6a:5b:c8:09:f1:1d:9c:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:55:02:75:CA:31:33:FF:5A:40:B2:60:EB:09:02:C6:65:83:D9:87
X509v3 Authority Key Identifier:
keyid:CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:9b:bb:e9:0c:50:0a:bd:31:14:07:4e:53:a9:50:a2:f1:
20:fd:2f:d8:df:ce:f8:5a:46:c2:67:38:23:cf:ed:f9:4b:f8:
86:49:78:5b:2e:18:76:cf:58:34:a6:a5:c4:c7:26:77:ec:b1:
5f:a8:b4:1c:80:6d:08:e8:aa:fd:30:14:a0:c8:a0:7a:dc:a8:
44:4a:f2:c1:ba:19:d0:57:db:81:9e:b4:d4:47:bf:6c:fe:f3:
bc:db:14:5f:83:df:79:17:10:ad:cc:ea:e3:45:d8:d2:25:0f:
e1:de:11:12:62:0c:1c:f0:d4:a5:cf:49:6e:4a:78:0d:38:03:
62:78:41:98:00:e4:40:ed:d5:db:5c:ec:a8:d7:fe:eb:5f:47:
df:e1:66:32:aa:d1:2d:8c:6c:f9:52:2d:8a:fa:8f:d8:41:6b:
9a:fd:22:47:44:de:47:b7:18:49:28:97:f2:62:b6:aa:7a:bf:
f5:34:88:81:0f:86:de:b0:a1:11:a7:a6:0d:59:70:0e:49:68:
9e:97:f8:bc:2c:8a:b4:a6:ea:72:dd:80:25:e7:91:97:db:1e:
60:36:69:d7:62:03:9a:3b:14:04:f3:f7:b1:34:3c:0e:cb:d7:
17:60:86:ef:17:d3:66:5f:2e:a9:3d:94:39:17:6b:a7:fb:1e:
7c:2a:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:23 2026 by rpki-client