Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: h/r/v2gZ26cI7XAApLZlF6TDiPr+JeOxwqt+nLiWzGk=
Subject key identifier: 01:2F:C2:03:0A:EE:4F:BF:B9:FE:1F:A2:58:BF:25:87:BB:91:56:35
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019D28847E66569B5A272EEA8F35BDC2E14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 113C
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 0Yvaky5JgaJRc2JGPdBif9DrKcnJxm8aL0793rTz/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7e:66:56:9b:5a:27:2e:ea:8f:35:bd:c2:e1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=012fc2030aee4fbfb9fe1fa258bf2587bb915635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:5a:8f:53:02:0e:a8:90:8b:22:88:d2:15:
e7:cc:6a:30:00:18:09:0c:ac:52:9c:32:cb:d0:c9:
e7:2e:60:fc:7c:59:bb:8e:8f:35:9d:2a:2b:44:1a:
1f:de:e5:6b:03:8c:14:42:11:f7:8e:5a:8d:73:64:
a7:d1:77:4b:32:6f:26:a2:4d:97:b8:9e:bc:cd:28:
01:e2:04:cb:c3:61:7a:3c:53:12:12:56:fc:4a:33:
7d:51:4b:d0:ea:01:ed:a0:93:1f:b5:4b:42:6e:03:
e1:86:d3:6b:68:a6:f9:a4:d8:b8:c2:79:fa:1b:bb:
22:62:5e:5b:ed:7b:42:a9:a2:66:2d:21:ed:b9:1e:
4b:93:52:67:b9:f3:5f:26:48:25:a7:0c:0d:37:cf:
49:28:a6:ac:3f:fd:c0:90:6c:55:16:7d:6a:ac:6d:
07:b8:9c:e8:0a:32:b9:d8:0e:dc:0f:ec:e9:ab:fa:
5a:be:7c:0e:c7:72:f0:18:4b:e4:c2:66:98:5c:0a:
04:e0:3a:e5:d9:f4:b3:8d:43:76:9c:b5:4e:3c:04:
26:5e:b3:e2:bd:5b:06:5f:e6:26:4d:4d:35:04:1d:
71:bd:a1:c1:7b:3f:2d:35:0a:39:e2:5e:71:0b:d1:
bf:9d:b7:18:de:2e:af:ac:99:64:fd:f8:9c:cc:d1:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:C2:03:0A:EE:4F:BF:B9:FE:1F:A2:58:BF:25:87:BB:91:56:35
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:92:a8:bb:c4:d5:92:7f:86:8f:28:d4:45:cc:df:af:ef:15:
6a:9f:f8:2d:de:f6:2a:60:b3:8d:fb:d9:ff:57:f6:c9:61:df:
0e:f3:3e:6a:0d:a1:8b:8f:cc:fc:c2:84:a0:2b:55:f8:f8:9a:
b0:2d:dd:d5:73:94:24:51:9e:85:4a:d0:10:64:ef:f3:82:2f:
6d:0f:94:ab:7b:8b:b2:8f:a8:7d:91:9c:dc:5e:09:35:05:f9:
06:5a:80:7d:9f:53:21:a4:12:56:37:da:b9:6d:29:52:7e:27:
70:65:8d:0c:eb:42:6b:74:3c:2c:0e:8a:dd:fd:fd:17:d2:26:
23:05:a5:48:fb:e1:f1:07:13:6d:3b:a8:9c:c1:7b:56:cc:d2:
9d:40:1d:e5:05:de:24:f9:e8:7a:6c:e6:47:b7:3a:b8:db:c7:
8e:fa:26:58:3c:ad:55:10:d3:b1:01:3f:2d:45:e4:56:c3:26:
11:0e:05:ed:1c:49:20:6b:57:f2:b8:06:b4:d0:09:79:32:76:
7c:14:53:c1:4a:31:45:ad:53:1f:30:b7:90:a4:b6:e2:44:9f:
ae:5b:4e:18:9b:cc:7d:2b:22:21:24:da:f2:dd:50:ff:c1:c8:
6a:0d:59:82:f0:02:cc:6b:7c:54:86:39:48:5b:f8:88:e6:2b:
3a:6d:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:11:49 2026 by rpki-client