Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: KLOYeMVFZzasIqaX4c6IRkBmhhCPSTcGkdJXrrqgKuI=
Subject key identifier: A8:89:63:D2:C7:8E:C0:38:82:8B:CB:C5:43:BC:43:00:F7:07:98:E8
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019D2816DA6692E9246BAFEFBA5C84206FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: fvmS1nVXA8n6YRNUylemMg4PAKSHlOvbwEawOmRO0FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:da:66:92:e9:24:6b:af:ef:ba:5c:84:20:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=a88963d2c78ec038828bcbc543bc4300f70798e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:d3:3a:34:20:6e:04:8d:58:67:5c:63:fb:
1f:79:05:71:08:03:ed:49:10:79:3e:82:e3:eb:e9:
21:4c:f8:8d:a1:2e:7f:bb:1c:50:5d:00:97:85:c8:
1b:08:1f:db:27:90:dd:c0:04:bb:a6:70:9a:f9:c9:
c8:e3:fe:ab:e2:84:e8:13:3e:ca:18:f5:c6:3f:bb:
2a:5e:10:d1:aa:6b:09:a8:1c:00:cf:8c:83:08:02:
33:67:b4:b0:78:40:4b:15:7b:59:58:8e:cf:95:3a:
4a:b8:d2:f1:4a:17:9e:84:ae:f8:91:08:9c:c5:8a:
88:7b:b2:b2:0b:3a:55:d5:a8:1b:f8:48:19:1c:3b:
99:b3:33:08:24:d7:da:8b:99:f9:ca:06:76:71:52:
09:fd:9e:b2:30:9c:5c:d0:d6:3f:00:29:fe:1d:5d:
a1:ad:b6:11:09:50:54:d9:c3:6e:7e:c8:9d:65:91:
90:60:2e:4e:c8:61:c1:47:f7:97:21:68:eb:83:5c:
4f:9d:36:31:0b:60:aa:b9:18:c8:07:91:38:da:49:
cb:4a:81:40:b4:9b:1c:cb:81:fe:4b:76:1e:14:3c:
ff:4c:8e:ca:cf:73:b6:e8:c2:4b:a8:b3:30:3d:0f:
13:27:d5:b4:f7:56:fc:13:82:22:96:e2:cd:1f:60:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:63:D2:C7:8E:C0:38:82:8B:CB:C5:43:BC:43:00:F7:07:98:E8
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8f:9e:d4:dc:0b:2b:2f:de:0f:82:4f:52:30:78:d2:65:de:
ad:84:55:14:07:ce:b8:5d:25:66:ec:93:9d:24:bf:b9:64:20:
b0:5b:af:54:bf:25:a8:0f:01:9e:17:ed:2e:2a:45:ed:14:5d:
cb:a6:60:6d:11:04:19:66:49:66:84:ea:f7:55:21:2f:12:1c:
9f:01:ff:1c:b8:e5:b9:6d:50:d6:e7:1c:25:15:fe:ba:71:9d:
0b:fe:c4:32:70:25:15:c0:6b:44:86:ce:05:06:c2:d2:e7:0e:
52:18:92:66:b4:d9:bf:7d:74:df:54:95:88:64:c4:ba:5f:c0:
54:2f:66:d0:f9:f8:a7:5a:04:86:e7:77:fc:3a:d5:83:51:95:
6a:fe:84:cf:11:d0:8e:b8:6d:28:3c:ad:10:4a:ac:8e:58:d2:
df:6b:cc:9f:26:27:43:95:c2:2b:45:de:f0:38:9e:09:e7:6c:
14:f2:97:39:1c:06:c1:61:79:ed:ae:77:e8:2f:0c:d8:46:03:
38:c8:e5:ce:cd:2c:b9:b9:4e:76:b7:42:9a:f8:ef:17:b1:1b:
b9:59:8c:c9:e4:69:e9:7e:60:05:99:62:b2:3a:50:07:d7:57:
0d:77:c1:de:26:bb:27:a2:3a:cb:74:13:c3:2f:cc:4b:a3:ea:
65:58:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:34 2026 by rpki-client