Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
File: _zpsebd2C8TOC4xmtIGvrTCiV24.mft (raw, json)
Hash identifier: jsnkZXWXINEzv0Az1yNwwcYussI9/0NBK6IuexCpJaA=
Subject key identifier: 54:B5:5C:CD:9B:87:1F:56:27:37:E5:D0:A2:96:D9:04:C2:DE:40:FD
Authority key identifier: FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E
Certificate issuer: /CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
Certificate serial: 019D3BD3EBA688C8F6574D6D2E5B4FE7B81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
Manifest number: B9
Signing time: Sun 29 Mar 2026 23:00:37 +0000
Manifest this update: Sun 29 Mar 2026 23:00:37 +0000
Manifest next update: Mon 30 Mar 2026 23:00:37 +0000
Files and hashes: 1: _zpsebd2C8TOC4xmtIGvrTCiV24.crl (hash: DcOLRbSItcc+/ZVJvVeNxSk/pURblk4OuamWOgpU+28=)
2: wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa (hash: Xp/N+VxkIpYboMZ4WVUWp5X/q97QHWHWJohFZ9QOnDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:d3:eb:a6:88:c8:f6:57:4d:6d:2e:5b:4f:e7:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
Validity
Not Before: Mar 29 23:00:37 2026 GMT
Not After : Mar 30 23:00:37 2026 GMT
Subject: CN=54b55ccd9b871f562737e5d0a296d904c2de40fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:fb:f8:30:3c:1b:33:f4:cb:90:88:77:f2:
bf:b4:6d:89:f8:f6:93:d0:0b:47:78:1f:0d:24:cb:
c2:21:4d:02:7e:37:e2:c2:46:ec:39:3f:82:16:52:
38:aa:c7:e0:b9:c8:39:73:40:bc:cc:e7:4d:af:ac:
67:83:8f:3d:f6:68:bc:65:10:42:fb:d6:44:ce:23:
26:ad:19:48:8c:c5:6f:47:57:56:7d:a4:69:ba:e1:
24:e4:d8:13:56:f9:89:bc:e1:e2:11:ac:3a:15:d1:
fd:98:03:d5:c5:c6:d2:cc:4c:21:20:12:2d:d3:44:
1f:1d:5c:b6:c6:1e:29:e1:f6:1b:40:52:e0:2d:51:
26:7f:9e:8c:70:ae:09:b5:fe:be:3c:6d:85:73:d6:
fb:7e:34:4a:f0:17:13:8d:44:d5:11:31:96:7b:43:
ac:16:1e:4d:9d:8a:80:f7:54:90:0c:a3:fb:1d:8a:
d8:c4:55:9a:b8:48:1a:7c:40:d9:c4:66:c8:59:be:
b7:ac:8b:7a:15:82:78:fe:fa:f4:71:de:b8:63:04:
a6:99:e6:a9:56:ea:fb:8d:a2:90:2e:dc:e9:b9:f9:
bb:a4:72:11:2e:aa:36:91:8f:ce:97:24:c4:60:a4:
c1:cb:44:4f:06:d3:25:48:4a:85:e8:e5:25:23:9b:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:5C:CD:9B:87:1F:56:27:37:E5:D0:A2:96:D9:04:C2:DE:40:FD
X509v3 Authority Key Identifier:
keyid:FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:84:41:93:d2:b1:b5:ca:c3:51:ab:eb:15:a4:72:9f:8b:2b:
f9:e0:0b:90:d6:b9:ba:22:08:fd:07:b1:98:c0:15:9f:d1:d4:
d2:b3:8e:d1:27:f0:c2:37:dd:94:b1:bb:a9:b6:3b:5b:42:4d:
59:5a:b8:0a:f8:9b:a2:36:8b:44:e4:db:61:73:63:7f:4c:19:
92:eb:f7:18:66:d9:40:bd:f8:1c:14:06:31:00:19:9c:d6:dc:
36:08:21:f1:3d:37:34:1f:be:3e:95:b5:4c:88:fa:93:82:80:
66:f1:cf:3a:af:b3:ed:52:ef:c1:32:61:33:d6:a7:90:d3:25:
10:58:4e:87:b5:2e:53:7b:21:98:d6:7b:8f:c8:b3:b0:d0:83:
df:55:30:e6:ea:e4:f6:84:80:a9:fa:15:c4:c0:53:cd:e5:7b:
57:f1:2f:0f:6f:f6:79:01:3e:99:9e:ba:c8:84:67:36:01:d9:
23:51:23:87:39:d3:90:7e:37:61:28:ec:db:b2:56:65:39:22:
47:51:15:a8:f1:a5:68:5c:8a:2d:63:20:fc:fa:0d:49:30:82:
54:1d:08:95:85:ca:96:0e:e8:53:65:4b:14:ec:6c:b8:91:08:
fa:50:61:98:70:e9:97:c0:71:ce:7c:68:88:ff:b7:17:4c:52:
71:2e:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:12:26 2026 by rpki-client