Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: 9H2C4pdSQflJhkEjbZXLoT4NVMYhmQXkRk7IFI+Dg+4=
Subject key identifier: 1C:6F:01:DB:EC:D9:A4:F8:08:04:68:96:AA:76:4C:CB:68:E1:0B:96
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 019D25BA7B23E0433D654B59ED486C776C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=)
2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: /cI7TQVmv881sxpN1E8yFwQFidHlkEBcH8KWtHsqa1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7b:23:e0:43:3d:65:4b:59:ed:48:6c:77:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=1c6f01dbecd9a4f808046896aa764ccb68e10b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:65:5a:5e:1e:be:0c:c1:d1:23:ad:10:d5:
4a:7d:16:65:50:60:54:57:52:5c:9e:80:f3:f4:2f:
55:cd:47:61:35:b9:fd:7a:97:3a:d7:b2:f9:d8:ef:
63:1a:09:3d:68:cf:60:33:11:d5:a8:e5:f4:f0:2d:
1d:5f:42:99:93:52:6c:a6:53:89:73:9f:66:62:a0:
77:b0:ef:7c:3e:38:1a:78:49:57:90:37:f1:41:24:
56:27:1d:f6:d8:97:81:a2:9d:6a:ee:b5:0b:6a:8a:
47:80:ab:be:8e:06:f0:be:5f:f6:15:97:a6:60:0d:
2f:63:10:3b:cf:e0:26:09:5d:c5:5c:79:95:1b:77:
5b:1f:97:9c:c6:05:18:d1:e1:9f:52:1f:ca:e9:72:
3d:d3:38:bf:eb:d9:71:2e:91:d4:f1:2d:e3:77:a4:
4e:80:6b:8f:5c:36:63:7e:c5:de:07:58:62:55:92:
eb:8f:51:4a:95:3b:e0:43:b6:27:0c:ba:f1:71:5f:
7d:9c:bc:64:1c:87:c2:dd:03:9a:1e:13:dc:6c:dc:
2e:fd:16:5d:c7:f6:6a:77:a5:69:a2:cd:64:4c:ce:
26:1c:ff:45:d8:17:31:74:c0:99:71:eb:e8:fb:80:
12:e6:47:46:3a:07:7b:0b:7c:46:94:a1:b3:47:36:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6F:01:DB:EC:D9:A4:F8:08:04:68:96:AA:76:4C:CB:68:E1:0B:96
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:30:57:2b:61:69:c5:80:71:da:cb:c0:11:93:6d:69:e6:1e:
9d:7e:78:42:2c:fe:15:11:6c:7b:3e:72:dc:b5:be:e7:66:29:
81:b4:63:f4:a0:d8:ce:ef:d8:a4:b2:74:34:23:26:bb:4a:8d:
67:e3:1a:4d:58:bc:a6:e2:ab:a5:40:ab:fe:cc:f4:bc:57:d7:
89:ed:ed:74:2a:63:65:61:3d:8e:52:b0:2c:68:a1:21:ef:5a:
39:55:58:64:a3:95:09:41:4b:60:ee:51:99:d3:9e:86:65:f7:
2e:3d:e4:13:33:e0:31:4b:39:35:33:b5:eb:49:f1:b5:c7:13:
13:72:1a:8a:b3:ac:1b:fe:f2:19:54:ca:eb:6a:24:03:db:e6:
b8:28:cb:32:a9:13:d6:da:4a:08:29:11:dd:d9:67:16:e4:a4:
3f:0f:c9:99:21:39:e8:27:46:7f:f5:be:09:4b:6f:3d:07:b5:
54:3d:2e:11:6d:3f:76:c3:4e:50:80:76:93:a0:e5:5a:df:ba:
f7:82:1a:9d:f8:18:3c:e7:ea:79:0f:89:47:f4:ae:0d:8d:b4:
2a:28:9b:30:2a:92:a6:59:ca:d1:f6:02:7c:78:cd:1f:c2:d9:
01:4b:50:91:5b:03:74:6e:9f:69:1d:a2:c5:59:94:24:a5:b9:
41:ca:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:31 2026 by rpki-client