Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: jCTfIHHbBTUh4sIIYzHEJNlNPqo8i1Umn5w+BhGE3Yw=
Subject key identifier: 06:2B:74:DC:51:AC:83:7C:44:4B:8E:65:C7:B4:DC:93:CB:3B:D8:FF
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 019D28F24036D165E03F82CBD93835CAA3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: gfZXiEYLotV6boFPbDoaI_T0W7U.roa (hash: avmgc9nbF9VaMx5CScU3OE2cuuouIoqjlhBOWJN7x9s=)
2: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: 6OjqAVOv28pPOYnpXv4O8bu3NQ/OeTZOJ4iLPrjQJNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:40:36:d1:65:e0:3f:82:cb:d9:38:35:ca:a3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=062b74dc51ac837c444b8e65c7b4dc93cb3bd8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:3a:44:2f:8b:da:b6:3f:75:ee:34:8d:e3:
54:31:c8:15:85:e7:d3:66:73:24:18:87:74:91:62:
0f:d6:2b:d1:4f:b6:54:51:4d:01:50:0a:18:4c:f4:
f3:71:f2:40:64:c4:75:88:bb:25:3e:ef:f5:16:2d:
3f:96:1c:c6:a6:80:96:db:c9:1f:66:65:11:71:c8:
14:45:63:37:52:d4:0a:2b:15:b2:53:e7:1a:1c:bb:
c8:02:d8:0a:50:93:88:95:3a:80:50:31:66:27:12:
c0:d2:66:5d:a7:7a:ca:a2:56:17:fc:c4:78:de:7a:
7a:ad:c8:bd:82:8f:57:15:9d:27:2b:6b:e4:4f:2f:
f5:7b:f2:a4:99:de:49:66:b1:6f:9a:b2:00:1e:31:
0f:4d:16:6f:36:07:7f:fb:f3:4a:e3:0b:c3:96:ad:
f7:9b:12:ca:71:70:6c:15:af:f8:25:35:10:aa:64:
96:be:90:09:2b:a7:63:94:62:df:92:db:11:52:c8:
1f:f8:c4:87:7a:da:ec:55:ce:ce:af:af:dd:3d:8a:
59:75:43:1b:ab:65:bb:11:62:77:6e:d9:64:ce:a1:
0b:6f:52:7f:6b:4d:e4:9e:cb:4f:9f:dd:49:2e:e0:
d1:32:f5:c4:f0:d5:94:39:39:84:29:9a:41:d0:dd:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2B:74:DC:51:AC:83:7C:44:4B:8E:65:C7:B4:DC:93:CB:3B:D8:FF
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:83:bf:87:9c:03:58:41:8b:1c:a9:3d:8a:04:ae:2d:23:
1f:b9:16:e8:61:de:65:2e:db:60:94:ef:ab:7c:fa:41:2d:f8:
c5:ec:a9:85:7c:f8:47:ae:aa:38:90:42:9f:01:23:64:69:bf:
69:4b:b0:18:aa:13:7e:df:bc:f9:12:10:1e:a7:19:29:39:d0:
1a:f1:69:ef:c3:ce:20:75:c7:3d:97:3b:8b:24:da:68:72:c5:
f6:78:14:76:13:82:ef:35:85:cb:11:78:e3:23:ad:03:c7:38:
d3:53:b9:bb:bb:81:4f:bb:53:8f:98:bb:54:d5:7d:68:3b:a2:
2a:03:59:ba:0a:bd:e7:94:47:89:2c:a0:5e:14:3e:ff:41:ed:
d3:e1:a0:f9:3f:39:3d:52:df:ea:3d:1c:0a:ea:93:63:d5:6f:
49:67:af:51:b1:47:c6:43:4b:64:14:8a:bc:81:c3:1d:79:87:
f2:29:b8:3e:ac:d2:23:b6:61:38:7f:67:a2:3d:af:39:7e:0f:
ab:f0:d6:98:93:09:21:26:7d:bd:6f:4c:1c:dd:bd:e6:fc:93:
f3:06:fb:33:3b:cf:c9:8c:e4:97:e1:f4:d9:c1:3c:08:59:2a:
25:2b:94:5e:c5:7b:be:fd:24:eb:5a:36:46:75:2c:29:69:f1:
08:5c:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:09 2026 by rpki-client