Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: eZRPh895h+cFVmyCI+60KmNu61phaxdDJGJOgqby29g=
Subject key identifier: 5A:AD:2F:A4:62:35:AF:BF:16:59:A7:14:67:0A:C5:9E:98:08:3B:84
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 019D2B4EE590326547EBD6439D9EBCD47895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 1823
Signing time: Thu 26 Mar 2026 18:01:23 +0000
Manifest this update: Thu 26 Mar 2026 18:01:23 +0000
Manifest next update: Fri 27 Mar 2026 18:01:23 +0000
Files and hashes: 1: _c_Ge4KlyXooIVPQ3URHN_DCCOc.roa (hash: zZr72d4ktyBj5RLLYIViykO4UzrMMtJKZidkjGHFvsc=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 6WiGeJro+EJ3/6e6Z7vicvre8qs1eRYk5K59bMh+AXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:e5:90:32:65:47:eb:d6:43:9d:9e:bc:d4:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Mar 26 18:01:23 2026 GMT
Not After : Mar 27 18:01:23 2026 GMT
Subject: CN=5aad2fa46235afbf1659a714670ac59e98083b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:9f:d6:78:49:e7:21:07:d6:87:1e:03:55:
6b:b3:e3:44:4d:6d:6b:37:48:af:51:46:1e:f7:88:
1d:cb:5a:f2:db:8a:cf:73:75:e3:7f:bf:c0:84:80:
a8:cf:99:e8:d6:cb:71:f8:98:3c:b8:e3:33:01:e6:
0d:e4:83:c2:54:ae:0d:01:8a:6e:87:9c:88:e1:31:
7b:f6:15:8d:f8:7d:5b:e9:43:ba:76:3a:43:9d:eb:
7e:9d:69:f8:d2:62:ae:2d:5b:ed:f2:ac:b6:3a:f2:
78:84:29:a1:5a:db:99:7c:81:dd:12:81:11:18:1e:
42:7d:60:ab:41:6c:64:0b:48:d9:25:0d:7f:cf:71:
61:fb:0e:2d:05:cb:d3:2a:64:a1:75:c7:c0:b7:49:
90:7e:91:7f:21:39:68:f0:00:8a:9c:83:9f:5e:44:
26:0b:e0:84:96:e6:25:e4:18:6a:cc:90:ba:09:2d:
2f:2c:59:22:4e:e0:7b:2b:3c:59:da:c0:f5:99:fa:
20:9a:29:fc:23:61:94:e2:be:e6:2f:2b:ed:8d:a4:
a8:0f:70:c9:ae:c1:cf:f5:b7:30:95:93:d0:b0:92:
28:80:20:c7:27:66:70:5e:85:03:9b:2f:58:2d:a3:
3a:59:5e:ff:80:8a:49:1f:42:6d:df:a4:8f:1e:83:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:2F:A4:62:35:AF:BF:16:59:A7:14:67:0A:C5:9E:98:08:3B:84
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:56:3e:94:2e:54:d2:28:86:f7:e3:d3:e0:dd:f6:5f:2c:
13:34:90:37:a2:f0:3e:21:3b:81:73:0d:fc:20:db:b1:0f:40:
8d:20:f9:ff:cd:d0:80:df:bf:02:34:b2:f5:1f:99:68:e9:eb:
44:47:ad:f4:6c:6c:ee:9c:3b:4d:68:cc:86:a1:2c:0e:4f:02:
f5:88:64:4a:de:43:a3:ba:e9:c1:4b:d5:21:26:fa:05:8b:b8:
6a:a8:b8:1c:08:aa:01:42:ce:1e:c7:0c:2d:7c:a6:71:f6:11:
3c:7d:a1:c8:0c:7e:eb:9b:c9:c0:37:c0:5f:48:b0:bf:9f:10:
a6:f6:bd:7e:03:e2:f0:ee:ba:ca:f8:27:ef:3b:bf:f0:f8:a3:
09:da:48:19:ce:92:c0:4b:f5:a3:dd:23:25:56:a6:e7:9d:61:
0e:d6:4f:b8:3c:1e:61:42:13:9a:94:ae:d1:03:35:86:66:e2:
b9:95:7a:6a:56:51:f4:3c:5b:6f:97:20:93:4c:c1:ef:89:a7:
bd:fb:45:11:02:d4:c7:82:c0:41:a0:ed:84:2a:c5:8d:3c:ff:
34:79:45:83:97:c4:66:f6:be:e0:e8:a2:f8:b2:f8:34:57:c5:
0a:78:65:53:e1:3e:64:f0:27:1f:76:00:bf:2d:af:d9:4a:e5:
5c:24:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:50 2026 by rpki-client