Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json)
Hash identifier: VrRt0UVKLNq/lje4NLYBQmB0m98ZroCx1xfcwUd5/vI=
Subject key identifier: B9:87:6A:73:8F:1A:D8:01:89:77:9B:BC:82:72:99:4A:19:96:A4:7A
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial: 019D273ADCBCAB08BA4C61B32541DBAE8347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: WUUFBQU2GFvKD3Kjb7e_9mOXlXI.roa (hash: dUL3FBjXZ15WKpY0NyPgPU36mDmvrzxulVkA9UNYoaw=)
2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: f23UHOy/Ic6faZkpUP+JdQc9fc5LZbozp1/cHk/PN8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:dc:bc:ab:08:ba:4c:61:b3:25:41:db:ae:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=b9876a738f1ad80189779bbc8272994a1996a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:7c:35:a5:48:ef:d1:4d:7f:5f:4e:51:d5:
0a:1d:6c:ea:b7:cd:29:11:9e:fa:98:5f:d4:70:03:
09:fb:05:cb:2f:db:ad:98:7a:b8:d4:dd:2e:60:4a:
da:cf:65:0d:fd:b5:e6:cd:59:05:c7:14:81:63:0f:
74:7a:24:4a:b9:fb:e8:c4:cd:24:0f:9f:ab:7f:65:
d6:68:84:12:08:a6:c6:5d:3b:64:98:16:0e:1f:19:
c2:b6:4e:5a:49:b5:2f:81:01:68:2e:57:82:e3:66:
9e:d7:32:00:f9:71:6d:d1:03:e3:4c:71:bb:e8:6c:
3e:c8:26:4a:d9:f2:4e:99:38:a3:81:ad:ab:cd:60:
b4:73:1b:f7:08:66:7d:12:00:15:82:96:26:07:1b:
25:c4:23:74:8e:86:49:2a:39:0d:2a:f3:80:65:61:
43:db:12:42:cb:b1:25:94:10:57:b1:16:17:27:b3:
72:7f:0f:83:b5:15:4f:44:8e:e4:7c:2d:c8:69:a6:
58:a4:70:05:bf:bc:8a:89:e6:98:da:54:1b:6d:5b:
17:3a:7c:dc:73:58:4d:a9:90:c5:68:b6:8c:de:3a:
e5:b3:17:2a:1f:19:89:6d:47:dc:06:90:7f:1a:0b:
a3:aa:2c:0c:92:7e:85:8b:fd:29:20:8e:24:f6:f7:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:6A:73:8F:1A:D8:01:89:77:9B:BC:82:72:99:4A:19:96:A4:7A
X509v3 Authority Key Identifier:
keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:d2:d6:91:15:04:f9:5e:88:c1:ba:2e:03:51:45:c6:c2:
34:e2:be:61:0f:c2:74:96:c6:d3:c0:c7:80:24:9e:80:02:39:
80:ed:94:37:f3:6c:6b:da:54:c0:44:42:3d:c0:52:b4:51:f7:
ba:d8:00:18:53:58:e3:35:4d:c0:94:6e:0c:fa:00:b7:7e:9c:
70:ee:d6:d2:c5:34:65:4e:28:10:25:25:a4:67:e3:34:9f:f0:
12:45:0d:2c:2e:b7:bc:e8:ac:99:94:a3:8f:cf:e7:68:1f:39:
d3:9b:d7:14:a7:42:b9:c9:2b:a7:21:8b:7b:09:42:e8:32:57:
39:f6:a1:4c:8a:86:49:5a:98:61:85:54:af:d2:d8:8f:6a:70:
46:b4:03:96:d7:2b:80:b6:4f:73:0b:cc:aa:69:a3:38:cc:ea:
90:c6:ff:03:62:ed:33:a4:85:02:c5:3c:cd:65:35:37:0a:a0:
b4:35:fd:8c:a0:74:53:bd:32:d5:2d:f5:4e:76:67:3b:11:cb:
1a:d9:94:f7:29:5c:61:4f:fd:ea:dc:ff:ff:fc:77:2c:6b:27:
7f:46:0f:7b:f1:6a:00:e3:09:00:b7:d1:94:bd:6f:90:e2:e2:
d3:b0:c4:3d:57:ba:d6:ba:7e:68:da:af:24:c4:2a:a7:78:37:
3f:99:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:02 2026 by rpki-client