Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: 42VmF1P7CUdOZyGhMjojSF89rIV1Ozsje7dY6RJPJxw=
Subject key identifier: EA:64:6A:3E:73:AA:0C:B8:AE:C3:FD:1E:8A:E9:CE:33:E7:BB:B2:80
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019D27A8EF636E3D538C978F116C327DF007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 043C
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (hash: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: ZIvSoGBLmtll/IKNE40rlKgCiVmJ9jWUY2HSRGyfHjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ef:63:6e:3d:53:8c:97:8f:11:6c:32:7d:f0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=ea646a3e73aa0cb8aec3fd1e8ae9ce33e7bbb280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:14:73:b5:d0:f3:1b:67:be:fe:39:41:e2:
54:ac:25:ad:da:e7:63:cb:ce:b6:33:69:a6:f0:fe:
6f:31:2c:75:d9:79:5f:7e:0e:07:0b:09:d6:a0:ea:
74:c4:42:bc:f7:2d:37:42:eb:f4:b9:69:be:37:68:
28:1a:42:5b:a5:a5:5f:48:fe:00:de:ff:7f:1e:31:
3a:32:0c:77:25:18:04:ca:4f:97:f8:8a:12:d2:f2:
dc:db:92:9e:56:d6:09:72:25:f2:a0:8b:e8:4e:7d:
9a:03:fa:89:ca:02:d5:cb:3d:1f:37:01:95:82:c9:
5b:2f:7f:b0:3a:41:8c:f6:35:47:ea:34:06:8c:2d:
27:d1:db:85:ac:f5:e0:82:58:ef:3c:0d:db:e1:8c:
df:8a:01:d3:dc:7e:e8:14:84:9f:80:9f:49:25:62:
41:00:ab:e7:2b:a7:73:64:f3:69:1c:f9:84:7b:9c:
6d:61:2c:44:46:8a:28:b9:e4:b7:a3:10:45:79:95:
3b:83:b7:b0:42:9a:7f:e6:f8:89:8e:44:7b:90:7c:
3a:9e:42:18:00:99:7e:07:f3:bc:6b:78:b5:0f:ef:
99:df:d7:3f:47:01:e6:e0:d2:bc:d1:fc:3f:7f:4d:
5f:c9:d1:79:31:66:72:9c:ee:03:8b:0b:29:22:b5:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:6A:3E:73:AA:0C:B8:AE:C3:FD:1E:8A:E9:CE:33:E7:BB:B2:80
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:ca:c7:a4:07:2e:43:fe:7d:dd:f2:6c:a0:0a:39:22:b9:
e8:bd:64:0d:b0:20:dc:e9:f4:ed:6d:24:23:09:ff:84:25:b3:
53:45:38:42:7a:ee:31:e6:79:f6:19:22:27:09:5c:6a:ae:94:
ff:d4:d1:37:34:df:4f:01:ae:25:23:03:59:2e:6e:c1:37:5f:
de:ea:01:5c:77:46:2f:be:e2:16:9f:20:8b:b0:9f:05:5a:d9:
af:44:43:13:7c:db:73:8f:89:e9:8d:dc:ba:7d:40:6a:06:ba:
31:69:93:dd:f7:aa:16:4a:40:27:8f:43:b5:e5:f3:f5:38:63:
29:1c:65:de:5b:a4:98:b8:b8:e4:a9:db:2a:b6:b7:47:63:60:
0e:00:f1:73:ef:af:58:55:a7:e1:af:c7:dc:79:1b:5a:c7:5d:
cd:72:61:86:d1:bd:4a:17:93:36:1b:85:9a:50:46:6a:1e:71:
08:2e:89:f6:78:8e:27:bd:77:2f:d7:ba:3a:14:9c:18:77:7d:
8f:4d:3c:6a:b9:c4:eb:30:46:47:45:67:86:f9:f3:ef:08:4d:
dc:36:ce:ff:ee:dc:56:9b:54:8e:f0:a0:6a:a3:0b:7b:d7:2f:
59:05:2d:14:71:f6:45:7d:0e:19:b3:dd:db:24:79:f7:91:60:
6c:08:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:23 2026 by rpki-client