Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: F2sm4G8mHhAxsUi8AsufORqDt94BIT/Oz7ljNPc9eKw=
Subject key identifier: 12:E2:C1:6B:02:75:C4:32:08:6E:C4:A5:A7:31:7B:62:9C:D9:06:88
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019D2A3C91D82E21FB05AFD8F6EC848244DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 02B6
Signing time: Thu 26 Mar 2026 13:01:45 +0000
Manifest this update: Thu 26 Mar 2026 13:01:45 +0000
Manifest next update: Fri 27 Mar 2026 13:01:45 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: N6pK/NVwYgzmE19vsGCdrJrsduhs0RM5YUvfxQhtyB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:91:d8:2e:21:fb:05:af:d8:f6:ec:84:82:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Mar 26 13:01:45 2026 GMT
Not After : Mar 27 13:01:45 2026 GMT
Subject: CN=12e2c16b0275c432086ec4a5a7317b629cd90688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:a3:31:d9:8e:38:ee:09:35:e2:28:75:e0:
d5:5e:b9:9c:60:a7:97:fb:84:14:3a:ea:93:2a:09:
d4:34:6f:12:ee:c1:50:4b:e8:d8:81:c7:ee:7a:99:
97:f5:20:c8:71:a0:b8:23:0e:f3:f0:aa:93:1f:40:
37:a9:15:64:1e:ba:af:9b:19:99:88:e0:df:1c:41:
40:1c:9d:b1:f8:e6:0d:58:c6:e7:7b:f2:a9:aa:74:
04:80:a6:7f:96:fd:23:07:4e:9a:ba:63:56:b4:b3:
af:00:db:7a:a8:dd:05:b2:62:f7:4f:c8:1f:4d:24:
ef:15:20:52:fe:63:00:b7:2e:e3:dc:06:41:f7:9d:
38:03:22:4e:39:14:b9:15:18:63:17:8e:45:6d:70:
99:e4:0c:03:37:d2:de:e9:e7:71:c1:c5:d3:3b:f7:
94:0d:82:e3:65:f5:47:7a:6b:76:ad:1e:db:d7:07:
8c:89:3a:e1:24:28:b3:7b:3f:49:9e:9f:89:78:6a:
7b:7b:98:4f:44:78:53:07:8d:c8:0f:37:db:98:f7:
f4:39:55:48:e5:69:b9:e5:8c:77:99:d4:f6:97:cd:
65:a8:8f:bb:a3:18:61:c9:e9:c4:a3:14:69:58:53:
43:4e:53:84:72:60:7e:9b:bb:f8:ed:aa:fe:f4:7c:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:C1:6B:02:75:C4:32:08:6E:C4:A5:A7:31:7B:62:9C:D9:06:88
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:23:19:0b:63:d7:78:6f:df:af:9c:b9:ca:4b:84:86:bc:cf:
49:cf:99:7b:ae:21:4b:9e:29:e5:a8:e5:5d:e5:c5:22:68:10:
4c:f1:a5:39:5f:d1:85:8b:9b:1e:26:92:70:36:b4:26:5b:8d:
43:09:19:bf:3b:29:cb:67:45:92:1e:b8:fa:cb:89:bf:2d:1e:
95:21:eb:ea:0b:bb:d4:ab:a6:26:2b:29:56:e0:dd:94:20:16:
e0:c9:5d:4c:e1:5f:36:ca:ab:af:75:e9:9c:19:ba:7e:e4:81:
4f:0b:45:7f:41:7e:41:2e:29:a8:65:6b:f0:71:66:34:16:be:
8c:52:cb:67:86:65:5b:b7:41:89:6c:c4:2f:3f:ee:90:1a:22:
7a:69:d0:c7:ab:41:c5:9b:3d:1d:b8:80:6f:1e:83:e9:cd:02:
ba:bc:7c:fa:07:2e:7a:36:38:20:a0:e0:a0:7e:2d:a8:27:99:
c0:88:57:ff:25:a0:0c:da:42:41:ca:8e:0e:45:b5:9d:92:78:
52:a0:1c:e1:ce:4a:3b:cc:f7:2b:08:4f:c8:a6:e3:a9:f6:3a:
48:0e:92:b2:29:6e:ac:d7:ec:13:1b:61:39:25:3c:43:0f:0e:
c5:ae:9c:22:b7:b7:7b:c6:00:56:b1:57:db:13:ef:09:43:d0:
ad:87:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:04 2026 by rpki-client