Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: 3BCRJ3/ahWXNB+w4HRskLM8142zm2wk9posR5GFPe+0=
Subject key identifier: D9:4B:CE:47:AB:8F:31:FE:0C:61:99:60:30:06:9B:71:89:26:D2:70
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019D273A87066A7E619F8D58D187341F8C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 128B
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
2: JAStZ6A9n9zWvYVE9_qtI3LhQxI.roa (hash: xkXaIWm/m1ovjWJVQKRLwQEY11jjSdg+EpABOd2GRFY=)
3: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
4: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
5: pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa (hash: xUeQdptZzqoAGQubj2MviaZ8/z+Eg6EPbQmMGzslfVM=)
6: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
7: wuu34kfch8KkTT895X4xf1I7R74.roa (hash: Bvnpt4GgpFd/ohLwSF/sF3kAtb+rm2/9b3nvHW+cTLo=)
8: zVdth24X5nqjsfHBDas52yk14is.crl (hash: iKoDLeFu/AUhl3vw5dvJZyr1fqnTttDMwwxHe+eFXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:87:06:6a:7e:61:9f:8d:58:d1:87:34:1f:8c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=d94bce47ab8f31fe0c61996030069b718926d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:41:11:8f:6d:ab:84:01:b2:d4:5f:92:fa:
60:3d:36:7f:a0:08:4a:a1:38:eb:d2:04:2b:b3:2a:
f0:a4:0a:ea:e5:ea:0a:b6:2d:c6:f7:7d:bc:c2:27:
13:b2:1a:6d:db:77:2f:6b:27:ac:33:ef:91:be:f8:
97:93:ab:1f:8f:0c:02:78:04:6d:9b:5b:83:7a:e5:
9d:dd:9b:d7:5f:7f:82:7a:07:a3:7c:3c:ea:90:ef:
37:45:69:6e:46:de:b4:49:77:a3:4a:f2:97:38:7a:
a9:11:e5:69:e8:87:6b:22:47:38:02:b1:07:e0:95:
20:b5:d2:04:b5:2a:0f:c7:96:fb:08:33:c2:e8:df:
e4:35:76:e7:7e:a6:35:32:44:96:78:f6:81:c4:be:
96:dd:24:8b:2b:59:bd:a5:39:45:39:e9:90:88:d1:
17:89:43:b8:34:8e:f8:7d:7c:33:ce:94:5d:dd:d4:
9f:7b:f1:35:47:3a:91:cc:46:eb:41:dd:d9:51:04:
10:3f:9e:a2:87:49:9f:e7:6e:ca:d5:fe:88:fc:72:
cd:87:f1:5c:e2:4a:2d:fd:97:7c:e9:0b:d1:c3:e9:
b7:a2:d9:13:f9:e6:a1:65:e9:be:0d:70:55:15:a5:
53:18:c7:47:27:f4:90:2b:6d:d7:c1:1b:89:02:b0:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:CE:47:AB:8F:31:FE:0C:61:99:60:30:06:9B:71:89:26:D2:70
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:74:e5:dd:f6:00:9f:11:21:05:b5:70:2e:75:a5:2c:04:
bf:fc:78:2a:48:79:8a:f9:bb:e1:51:0e:90:8a:53:a0:2b:7e:
66:d2:d4:8e:17:b2:45:1c:7e:55:92:fe:6e:4b:b4:38:09:72:
11:59:75:bd:60:dc:fc:72:5c:02:01:3f:21:41:8e:41:df:25:
81:0d:63:d4:69:f2:39:b0:51:31:b1:f9:cc:27:d0:48:1b:09:
e7:a6:f2:be:37:0c:58:0b:d1:63:31:a8:aa:8f:aa:80:1b:6d:
43:bf:7e:d2:dc:e7:b5:b4:67:97:fc:18:af:d7:73:19:7d:cf:
f5:6a:64:72:17:de:d5:44:01:4d:8b:b9:ec:ae:c9:90:6c:79:
23:50:f1:00:ed:38:68:c9:f2:b9:ab:c0:5d:04:d1:10:84:55:
4b:66:87:95:e9:b4:a4:25:c7:3c:1e:56:5b:46:34:c2:e5:d1:
ab:26:2c:cd:93:84:9f:53:70:4b:62:e4:57:55:0d:ba:3b:1c:
c8:8d:30:b1:2d:3c:48:bc:cd:89:7e:7e:8b:f9:7b:08:0a:09:
00:2b:c9:6c:db:81:4c:48:05:73:d6:e3:20:d0:62:83:30:87:
8e:18:ef:0d:b5:74:39:4c:be:cf:e6:9d:a0:76:ce:8b:e0:7c:
ed:37:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:57 2026 by rpki-client