Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: q/uJKpsF3f4dCao4mwRZR6iPlXw1gRckzxTwfIgpiXI=
Subject key identifier: 0C:23:DE:DB:75:8D:8A:08:3C:07:35:E6:1C:7E:A3:58:D6:6B:03:9F
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019D2696686201E63EE5C642E762F23EDFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0F22
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: JBGVuhUTG1uAdA7PJ8q3Bl_1zg4.roa (hash: ivCG2MEHaxXIQCRs1tmfeUJ68Epqw/GmvfL4Qq82QIM=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: R6Zsp27tx78g52xQ8ANK6NzMCaOOxxl8VJSXvcKNQ48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:68:62:01:e6:3e:e5:c6:42:e7:62:f2:3e:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=0c23dedb758d8a083c0735e61c7ea358d66b039f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:a5:db:d5:53:a6:63:57:0b:b7:6e:0d:8b:
f0:cd:e2:66:7d:ac:a4:16:fd:fc:94:b1:c8:c3:bb:
24:a9:4e:9a:62:34:52:e7:99:da:fe:45:db:5c:bb:
40:26:b6:27:30:b2:fe:61:44:02:54:e0:78:1c:40:
08:33:44:b6:56:b3:d0:a2:45:d6:82:0b:0e:db:5a:
1d:e9:14:34:75:88:d3:73:98:de:8b:94:75:f7:bf:
85:f5:70:d9:5d:0d:77:e7:df:ea:0e:ac:c6:dc:0c:
2b:f8:39:43:79:66:1c:09:b0:5b:ac:68:29:be:9c:
eb:d7:a7:a3:bb:c7:ce:29:c8:d1:c9:fc:e2:e2:83:
7a:28:b0:c7:3b:89:4d:34:db:f3:dd:2b:65:ac:93:
a3:37:8d:0f:5b:d5:4c:45:a5:51:be:c5:be:34:6c:
65:f7:16:3c:95:55:c6:18:96:73:7d:71:cd:bc:8f:
d9:3d:73:46:7f:68:d7:7a:f2:58:7a:10:f4:78:5a:
8c:fa:7f:39:bb:20:61:3b:18:88:4a:10:4b:fa:04:
3e:8b:0b:11:34:77:e3:b8:a8:e2:2b:ea:77:fd:cd:
ee:d6:ac:d5:01:cf:53:ff:35:e7:60:94:0a:85:4f:
f8:6b:2f:57:4b:8e:17:2e:6d:98:df:67:9b:c1:ce:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:23:DE:DB:75:8D:8A:08:3C:07:35:E6:1C:7E:A3:58:D6:6B:03:9F
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:db:6c:98:95:61:f5:a2:af:b5:13:ce:c5:1e:da:98:a2:
68:73:7d:11:7d:3c:94:42:b1:ac:8f:a2:31:61:bb:34:77:ba:
c8:7c:05:a1:7a:50:84:7b:87:16:6f:0b:6a:57:f3:e1:69:fb:
fc:98:b9:e1:36:2e:a0:18:3d:cf:52:f6:cb:65:84:92:dc:6d:
3b:fc:d3:10:ba:f3:a5:30:ee:06:b3:ac:85:1b:a3:d8:de:21:
60:3c:77:f7:ff:2b:61:89:b5:78:c3:9d:9f:2f:d5:a1:66:30:
4f:ab:4c:aa:ab:ca:f5:9b:76:0f:d9:dd:54:a4:32:ff:44:7c:
f1:bf:cd:a1:3e:af:b5:27:06:27:52:36:2f:fe:1c:6a:ab:a8:
1b:37:27:fc:f3:cd:cb:05:1d:c6:a4:3e:7d:d7:44:36:db:fe:
15:76:f8:70:26:1e:94:2e:39:76:9c:cf:01:a1:33:4b:6f:77:
be:19:77:2b:bf:b7:2f:79:90:7d:a1:8a:12:1b:a3:52:93:97:
85:ef:06:08:9a:0c:f4:5d:30:03:49:88:57:01:53:d3:e2:cd:
f6:5a:4c:52:2b:b6:3f:c7:db:d2:ff:31:5a:64:95:12:a8:7e:
74:49:20:e9:e5:5f:26:49:ec:6b:44:78:f9:43:dd:3b:85:97:
2a:94:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:43 2026 by rpki-client