Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: AJrdtB9JXlMHLv7wqB086BdbwaANDMAHBGqRmXVw3EY=
Subject key identifier: F9:7A:B8:1E:A3:B7:26:ED:BC:3D:4C:0C:AB:7F:98:B9:94:9F:9F:7C
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019D27723255737C541CD317C4A6E393F354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:28 +0000
Manifest this update: Thu 26 Mar 2026 00:01:28 +0000
Manifest next update: Fri 27 Mar 2026 00:01:28 +0000
Files and hashes: 1: Utsq8tMmY3izY1fN7UB7ffBp7M0.roa (hash: kD7h2+kSGCGsnzgnalUMgkhy9wvQ1pxuWkQeWsMBxuE=)
2: qm3Y1xRAyMug1o4ZkPIWA5TQn1A.roa (hash: ah0q5b8U5QR+bHmaVCJCImjUhbJsUIFGC+OnAqXZW1w=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: icL1CsTE/ZTQl+NlFv+NBT6KisRg0OfcnAPXkOHITTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:32:55:73:7c:54:1c:d3:17:c4:a6:e3:93:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Mar 26 00:01:28 2026 GMT
Not After : Mar 27 00:01:28 2026 GMT
Subject: CN=f97ab81ea3b726edbc3d4c0cab7f98b9949f9f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:12:76:2a:e1:62:36:09:b2:ef:3e:83:81:
91:da:85:9e:1c:b2:2a:27:02:50:b7:22:d1:50:08:
de:a3:89:1b:39:76:c2:f5:f3:93:60:80:05:ed:6d:
f9:a9:2b:fe:14:eb:e4:3f:96:42:40:f6:5d:26:d2:
bc:7b:39:b8:dd:b9:cb:e4:27:e7:43:84:39:c0:4d:
f4:9d:d4:ec:17:59:2f:41:41:6a:80:3c:e0:69:ae:
b7:5b:42:26:c6:fc:8f:ef:5c:ca:33:5c:8b:73:ce:
5f:20:85:8b:fc:f7:ae:25:a8:1d:6c:77:a3:bd:45:
3a:15:56:5e:7f:d7:8f:2c:af:79:83:63:8c:d5:21:
e6:eb:c4:0a:d4:6a:44:74:1f:55:bf:e2:60:bf:ee:
75:e8:0c:d3:e9:06:89:51:02:a0:c0:11:85:9f:1d:
6a:a5:eb:56:34:a7:c3:c3:67:2e:07:6e:30:6e:90:
56:6c:ca:24:94:30:51:84:44:30:5c:3c:59:48:bc:
1b:20:a4:fd:71:ae:05:79:3d:80:72:a8:4c:fb:d4:
3d:a8:c0:39:c9:47:6b:f2:02:b6:f1:f5:28:e5:bb:
69:41:87:ba:45:98:f5:da:d7:bb:8d:f6:ac:13:db:
9f:88:94:fa:f4:0b:eb:84:14:f4:b9:f4:83:e8:84:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:B8:1E:A3:B7:26:ED:BC:3D:4C:0C:AB:7F:98:B9:94:9F:9F:7C
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:20:c7:3a:0b:56:a2:a7:f1:6c:3e:fe:9e:8d:94:04:48:
6a:7c:a1:ad:48:c7:8b:fd:bc:8e:aa:c3:16:53:0d:08:cb:18:
75:22:d6:a9:e9:89:df:be:c3:48:0f:8e:34:1e:61:9c:ed:4c:
cb:59:e9:25:41:85:0c:82:98:ba:4d:1a:4c:aa:48:47:b9:d4:
cd:a9:80:dd:8c:d2:c1:86:7e:70:cc:73:3e:b0:11:13:ab:23:
3a:90:ea:44:8e:3b:d7:06:c2:e7:1a:9b:1e:34:08:4a:7a:d5:
d5:fe:75:f0:27:0f:9c:e8:c9:9f:0e:6d:90:02:80:d9:e5:0d:
3f:ab:2d:65:92:a1:a4:b1:e1:1b:e4:53:c2:b3:d0:ea:45:a9:
c3:99:7d:ee:04:51:fe:de:f6:2e:c7:b0:71:65:62:8a:c8:fc:
3d:c9:22:c8:be:4e:c7:e0:96:1f:86:61:0d:6a:4b:a4:fb:80:
d7:7d:74:a3:e0:f3:24:68:52:66:e6:2d:d1:2a:1c:55:d5:db:
17:b3:05:a1:9d:f7:0b:f8:18:1c:7a:30:7d:55:7b:be:f0:d9:
97:69:b2:4e:5c:d4:d6:b9:8e:a0:a9:23:cf:d7:ab:08:b1:b2:
6d:59:d4:1d:99:44:16:8a:27:83:f9:8e:c7:1d:96:cb:7b:ec:
14:57:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:53 2026 by rpki-client