Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: OvuFW+sAP/NvuPKNlQ82V2eU89TlCGNi3P6ENxYsc5o=
Subject key identifier: 64:7E:35:BA:AB:77:4B:6D:64:DF:49:A3:97:33:03:4E:8A:67:58:65
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 019D25F1A858410B0152130BB930F60962BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 14D9
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: XTmvlmaqkM6whHSwQf7BQPGiplA.roa (hash: Nf/8r39zOVnhoPLQElZaNoaDoUFyf9MQSIS344w93fg=)
2: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: xfomUJp4gZdDyJdy4Um9e5EcYW2phb85/7N2pErS+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a8:58:41:0b:01:52:13:0b:b9:30:f6:09:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=647e35baab774b6d64df49a39733034e8a675865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:82:a3:80:ea:58:2f:d0:93:d1:c8:38:dc:
fd:10:db:74:d2:68:47:53:28:c4:8f:ac:9a:ab:6f:
66:07:0c:34:92:14:a0:08:0d:b6:f6:5c:2b:4a:ce:
e3:0d:d1:8e:51:aa:8c:de:22:28:63:86:af:16:71:
f0:c9:f1:93:06:66:23:3c:88:9c:53:68:20:5b:f4:
4d:99:0e:f4:37:8f:fe:df:50:eb:44:a2:56:e8:8c:
aa:8c:37:4d:0b:1c:3f:bf:56:f8:b7:c3:51:8a:b1:
a4:35:a9:f8:2b:18:3e:ec:09:9f:01:56:eb:aa:3e:
59:de:bb:a8:26:57:4e:1b:96:4e:53:10:2d:d6:32:
27:51:5c:73:39:4b:b0:93:7a:2c:7a:65:21:c7:dd:
7d:a4:d9:1f:80:14:a8:a6:67:b6:0b:bb:4d:a7:fe:
a0:f9:91:e1:44:78:2f:24:fe:43:8d:d4:2c:0c:fb:
f5:4e:13:28:ca:29:cf:b0:c2:53:8f:eb:80:6c:a3:
9e:8e:8a:96:99:34:5c:75:56:91:a7:a9:c6:e0:cf:
21:ba:cd:00:9f:7a:99:4c:9a:c2:d3:7c:93:e1:08:
65:25:74:50:74:c0:dd:f0:a9:77:38:a6:dc:26:9d:
5b:08:73:b6:ab:88:b9:48:3b:54:31:84:f6:2a:97:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:35:BA:AB:77:4B:6D:64:DF:49:A3:97:33:03:4E:8A:67:58:65
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:0e:53:c1:93:83:97:36:8a:51:54:c3:3f:7d:bd:42:87:
1e:53:10:88:82:4e:6c:7b:a6:e1:56:28:67:46:ce:4e:a2:eb:
8f:2f:e4:bd:ab:18:69:34:a1:3e:98:ee:57:6f:5c:0c:0a:04:
3f:82:5d:54:ca:eb:6f:c4:9e:fc:c6:a0:92:29:54:95:00:6b:
96:2c:a1:c5:3b:18:1a:c5:45:a1:22:64:37:6f:1d:d4:a1:04:
84:84:93:b4:91:31:9a:36:d6:ba:b8:c3:8d:94:56:fb:33:ba:
14:78:28:1f:07:50:e7:15:39:76:2e:54:b8:3c:90:a6:27:fd:
2c:12:86:15:08:44:f0:54:da:53:a9:67:df:ee:70:ea:ae:fc:
f2:f1:38:f3:4e:09:bd:1c:80:d8:3d:b0:df:62:d2:d8:52:0c:
8a:d7:2e:fb:9f:68:ea:52:a1:60:c5:59:0f:13:d1:a8:3b:0d:
2e:8f:96:61:bd:01:03:5c:9a:3f:85:ef:8c:71:e4:f9:06:1b:
31:5f:e8:f8:39:55:57:c8:a5:e0:18:51:e6:b1:ee:c9:fb:01:
86:60:43:72:3b:cf:ae:51:df:c1:44:bc:04:ae:f5:8a:8d:4a:
79:f1:f3:c3:04:e5:2c:38:5d:05:f4:b8:5b:76:25:5f:07:54:
88:b7:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:47 2026 by rpki-client