Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: o4XlonnW9HeK2ChPGxuAJQEsTmiwp/W3uxB0tX1BRfA=
Subject key identifier: 62:16:38:CA:D2:8E:C4:2D:04:6A:4F:8D:0E:4C:60:62:50:9C:C8:69
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 019D2704B4201B685633E580BBBDE5FF021B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 0396
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa (hash: TYha/rKs1ePCSrjre9LK7iVoQd2uvPGLNTbl1Ahn9QU=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: TqpZdJrU8qRqb7Ac4UdEV80zFDGD/CtGw7OYHf2T+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b4:20:1b:68:56:33:e5:80:bb:bd:e5:ff:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=621638cad28ec42d046a4f8d0e4c6062509cc869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:39:a7:da:e4:ab:a2:04:3f:5d:a6:97:fc:
ad:ab:79:06:49:84:3d:c2:42:41:b9:4e:7a:c6:86:
dc:a9:d6:70:50:28:59:8f:e4:c9:f5:34:4a:8c:c0:
d6:74:0f:69:26:85:53:8b:66:16:66:c5:86:57:10:
b5:49:d4:f6:43:3c:4e:6d:53:77:ec:ae:69:ac:45:
4f:bc:b4:3b:a7:51:8e:68:dc:73:2a:9d:d0:e6:51:
b7:d4:88:1f:5c:07:f5:13:29:65:0d:1d:9c:3e:bf:
89:75:d2:35:67:e3:d5:a7:77:08:62:a3:ae:b8:77:
14:d9:45:17:0d:ec:8d:80:34:bf:8d:ae:84:20:73:
72:5d:a2:c3:69:9c:dd:55:5f:bd:10:e0:e6:7a:08:
41:8d:e6:63:b3:62:b4:79:b0:e5:3f:c6:1c:9d:54:
83:f9:06:63:1b:2b:f5:e9:86:79:3b:91:24:09:01:
7c:7a:c6:9b:32:34:6d:c1:bc:6a:51:42:86:9d:33:
02:e6:f4:85:37:0c:8e:81:4a:dd:7b:1d:f2:b1:89:
79:d5:38:9c:bf:ec:e4:2c:28:8f:c8:99:22:83:39:
56:90:2b:22:18:a9:10:5c:04:84:78:84:22:68:a3:
e1:96:11:ea:b8:6e:2f:c3:78:44:76:73:4f:f4:0d:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:38:CA:D2:8E:C4:2D:04:6A:4F:8D:0E:4C:60:62:50:9C:C8:69
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:ca:43:4d:77:73:78:8f:b3:b7:a2:3a:f3:cb:c8:93:c1:
19:36:6b:7f:66:b6:48:53:be:bf:90:e9:14:76:a5:e5:f8:fd:
ba:11:d4:d4:b8:de:2a:bc:90:ec:b4:25:cb:12:d2:e3:0f:b7:
3f:54:ac:5e:12:2e:e3:24:0e:47:c8:67:16:a5:71:e5:29:c6:
6f:49:6b:46:ea:34:93:3b:6b:fd:f1:2e:2c:91:b6:ae:cf:82:
7c:ce:07:bf:76:94:4d:87:e9:69:d3:fa:e2:b2:31:4e:00:df:
10:c8:70:ed:3b:d8:91:79:72:52:3b:e0:86:27:ef:55:f2:c3:
59:10:eb:18:98:38:af:61:4b:e9:61:dc:29:c8:80:26:54:42:
6e:3b:3f:93:a3:e7:62:8b:e0:6b:3f:40:e9:1f:a5:11:88:f3:
39:e7:55:c4:d3:ea:c3:e3:a1:7d:e9:18:e2:3f:02:fd:04:1a:
4b:79:81:ac:30:6e:77:85:01:ca:d1:fb:80:0e:9f:ed:a0:49:
24:a3:21:70:0e:fe:78:5a:bf:39:b6:82:26:b4:5b:f1:31:02:
3e:75:10:fb:87:10:2f:ae:2a:75:6c:46:8b:ac:1d:93:e0:6b:
1a:ec:6f:e3:f8:c4:c3:5c:8b:b8:2b:de:37:89:f7:71:0d:d9:
7b:36:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:29 2026 by rpki-client