Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: /TTF+w7pD4t0Qr/V5e7E+N9daPEZY/hxbCDmnB/GnEc=
Subject key identifier: A2:6C:8E:F8:D9:96:F3:85:EF:FB:A4:46:34:DC:68:D9:D2:9B:31:27
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 019D28166E9263D7B011B44DFE811542C9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=)
2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: X14aog6H3uIN7wEc0pc+LHwtv9KR9Vxn03SnzdxAFZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6e:92:63:d7:b0:11:b4:4d:fe:81:15:42:c9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=a26c8ef8d996f385effba44634dc68d9d29b3127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:b4:24:31:70:a7:64:86:a6:73:a8:15:e6:
92:d7:52:aa:0d:49:5e:77:67:62:6e:b7:17:a3:25:
0e:c2:bf:1e:f6:f2:c9:54:34:be:27:45:77:e6:89:
16:8a:ff:39:4e:bc:c8:4b:62:70:0d:d7:f5:d0:5f:
d4:9c:f3:b7:b0:57:50:78:a8:53:ee:38:ea:40:5d:
63:c5:54:f0:29:4c:2d:c7:6f:2c:d8:1e:0f:a6:8d:
8a:14:67:a1:3b:dd:3b:bd:a1:f6:3d:08:e5:e3:39:
4a:d1:39:39:2c:e4:55:5b:49:2f:bd:d5:46:96:15:
95:7e:84:f0:a4:a2:02:93:e4:c1:ba:5a:af:07:22:
f1:a9:28:9c:a8:bb:a3:3c:99:5b:8c:e7:f4:25:f0:
a9:9f:f6:fc:e0:9c:d4:a8:16:a5:34:72:bb:2b:11:
93:ef:c6:6f:bb:14:a2:5d:69:6d:da:8e:cf:92:ad:
21:1d:74:22:04:f5:e9:8c:07:dc:87:e1:ea:14:49:
aa:4e:93:c9:32:9c:77:f1:10:fe:c0:d5:90:5b:2f:
00:38:18:e9:e4:af:5c:4c:b9:e1:5c:d4:7e:db:40:
b1:ea:6f:68:92:f6:c7:75:42:97:af:20:04:dd:ca:
f0:b3:ca:f0:fc:eb:e5:b9:d7:bc:9d:7e:15:e6:55:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:8E:F8:D9:96:F3:85:EF:FB:A4:46:34:DC:68:D9:D2:9B:31:27
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:2a:9a:60:be:f2:62:30:e5:44:5c:f8:eb:d5:30:29:cc:
70:a2:0a:10:22:1f:c6:f1:64:9d:c1:89:f6:61:42:56:1a:64:
57:b2:80:5b:79:c0:e9:bd:d7:67:80:1f:27:58:7d:0a:c5:1f:
cc:6e:e0:36:b7:0d:a9:63:d3:56:31:67:d6:54:ba:20:15:ba:
20:c7:6a:3e:b9:9d:d2:e3:4e:7f:e9:a6:e4:71:57:24:ff:cc:
24:b2:e7:85:9f:ba:07:fd:6d:9a:6d:f2:11:c8:1f:e1:f0:1d:
73:8a:4a:1d:d3:71:b2:86:75:3e:b2:f2:70:a0:35:3d:b8:59:
1c:ec:a8:fb:12:a3:8f:9d:1c:20:c5:55:cb:48:63:d4:22:c9:
94:1f:d2:a3:d3:91:8f:50:d7:b0:c3:06:7b:aa:65:58:9c:17:
c5:b1:8a:73:2e:0c:5f:c8:ba:ef:d1:e3:0c:ad:0c:67:dd:17:
2c:84:d1:72:11:33:ac:5e:5b:cc:48:9c:41:86:93:9a:7b:83:
0f:33:13:10:39:0c:72:5a:19:18:71:51:87:ae:5a:da:31:d7:
e1:8b:8c:1d:ac:1b:76:08:09:8a:e6:f6:66:d6:1b:e9:9f:b2:
87:33:b3:e6:9a:90:1f:ac:40:4a:a9:31:de:b0:55:d8:f8:cb:
07:31:f5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFm6SY9ewEbRN/oEVQsnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjYwMzI2MDMwMDUxWhcNMjYwMzI3MDMwMDUxWjAzMTEwLwYDVQQD
EyhhMjZjOGVmOGQ5OTZmMzg1ZWZmYmE0NDYzNGRjNjhkOWQyOWIzMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjK0JDFwp2SGpnOoFeaS11KqDUle
d2dibrcXoyUOwr8e9vLJVDS+J0V35okWiv85TrzIS2JwDdf10F/UnPO3sFdQeKhT
7jjqQF1jxVTwKUwtx28s2B4Ppo2KFGehO907vaH2PQjl4zlK0Tk5LORVW0kvvdVG
lhWVfoTwpKICk+TBulqvByLxqSicqLujPJlbjOf0JfCpn/b84JzUqBalNHK7KxGT
78ZvuxSiXWlt2o7Pkq0hHXQiBPXpjAfch+HqFEmqTpPJMpx38RD+wNWQWy8AOBjp
5K9cTLnhXNR+20Cx6m9okvbHdUKXryAE3crws8rw/Ovlude8nX4V5lUVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJsjvjZlvOF7/ukRjTcaNnSmzEnMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3kqmmC+
8mIw5URc+OvVMCnMcKIKECIfxvFkncGJ9mFCVhpkV7KAW3nA6b3XZ4AfJ1h9CsUf
zG7gNrcNqWPTVjFn1lS6IBW6IMdqPrmd0uNOf+mm5HFXJP/MJLLnhZ+6B/1tmm3y
Ecgf4fAdc4pKHdNxsoZ1PrLycKA1PbhZHOyo+xKjj50cIMVVy0hj1CLJlB/So9OR
j1DXsMMGe6plWJwXxbGKcy4MX8i679HjDK0MZ90XLITRchEzrF5bzEicQYaTmnuD
DzMTEDkMcloZGHFRh65a2jHX4YuMHawbdggJiub2ZtYb6Z+yhzOz5pqQH6xASqkx
3rBV2PjLBzH1iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:33 2026 by rpki-client