Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: hULPM14d5FArwpkmoTXrn/F/Kj7Yx0f7pyMKeNfA9cA=
Subject key identifier: 22:D5:C7:7F:E3:35:53:A8:79:87:AD:08:C0:D9:E2:8B:A3:F2:4D:D5
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019D29CE552E7CE5E72DC792AFA0D7A7BF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 09BC
Signing time: Thu 26 Mar 2026 11:01:21 +0000
Manifest this update: Thu 26 Mar 2026 11:01:21 +0000
Manifest next update: Fri 27 Mar 2026 11:01:21 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: gBsnxrVk8b/EqhLQTF9wK6Ty+iHjuStt/ehuvmYpNHE=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:55:2e:7c:e5:e7:2d:c7:92:af:a0:d7:a7:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Mar 26 11:01:21 2026 GMT
Not After : Mar 27 11:01:21 2026 GMT
Subject: CN=22d5c77fe33553a87987ad08c0d9e28ba3f24dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:74:0b:4e:c1:9c:60:e4:97:61:e6:ba:a6:
72:6b:d2:be:07:90:19:c4:bc:da:d2:56:1e:74:c5:
d9:40:70:0f:0d:b6:36:41:50:fe:1a:44:0e:ed:12:
41:99:c3:bb:09:9b:83:65:36:33:4e:9d:ff:f2:ed:
ef:ec:bf:43:23:b0:47:bc:1c:81:05:74:4e:9e:16:
d0:cc:8a:79:f7:a0:44:6b:36:62:fc:e0:c3:6a:a1:
87:b0:29:86:91:ca:94:18:33:6e:40:fd:47:7c:24:
3e:ca:b5:ad:dc:37:4b:2b:50:ff:b7:27:a4:a9:6a:
2f:cc:7c:81:74:55:16:81:ad:0c:93:d2:58:73:8b:
07:7f:d0:28:18:98:a0:da:38:d2:c7:6d:5c:5a:10:
e1:09:9c:8b:bb:f9:12:f2:7a:65:02:63:d8:93:bb:
24:9a:a0:cb:f2:42:13:61:8a:13:a6:1f:6c:f3:f4:
6a:09:3d:3e:3a:5b:e5:48:e0:29:6a:9f:90:47:1c:
90:26:51:ae:87:b6:54:47:cc:7e:21:94:6c:75:13:
46:7a:ef:b3:75:f9:13:6b:9b:a2:a5:bb:46:8a:ad:
17:af:9c:c1:f7:ce:89:c9:95:4b:51:91:75:e9:3c:
91:bb:50:07:2a:e0:9d:96:1d:4c:e4:de:6e:d6:6b:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:C7:7F:E3:35:53:A8:79:87:AD:08:C0:D9:E2:8B:A3:F2:4D:D5
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ec:69:3c:fd:68:99:8c:4d:bd:2e:f0:c1:6a:38:da:74:f3:
ee:6b:32:ce:cc:6d:a4:f9:87:30:63:08:6d:92:d3:d8:b3:e8:
8f:01:04:fe:4f:6a:24:09:65:b4:92:bb:0e:78:83:e5:d1:32:
65:bf:74:91:d5:42:f4:b6:4c:a7:34:d4:36:c4:a1:da:98:f4:
8c:f3:f4:33:5e:4a:91:e7:2f:b9:74:64:1c:2b:90:b6:70:61:
f3:97:6a:bb:7d:0b:eb:84:56:a5:4d:98:93:31:d0:94:a9:d3:
61:e9:82:32:92:b6:9a:48:9a:7a:19:21:56:0e:1d:a9:cc:ac:
cc:be:46:db:c8:75:39:43:3a:98:65:14:63:4f:cf:25:71:0e:
f4:11:6b:35:31:38:8b:91:25:71:d4:cc:00:ca:0a:96:87:35:
49:16:4f:46:80:c7:7c:48:ff:86:0d:24:23:39:2d:55:81:de:
64:84:0c:d7:36:ea:61:d9:c6:5c:37:fa:35:98:f0:66:38:bc:
6d:6b:97:92:f6:d1:87:e6:bd:7f:07:05:eb:54:76:0d:6d:26:
4b:eb:50:f9:0e:e0:e9:01:c1:d3:67:0e:78:cf:8b:cb:8e:90:
b9:d0:34:fb:8b:be:b3:82:a2:ce:fe:2a:42:fb:f2:f3:6b:94:
24:89:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:48 2026 by rpki-client