Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: hqm0P4WTTEg2Xjkb+FdxZTSw9fZdsx7+fOb+iezQ1n4=
Subject key identifier: 8A:42:F7:F3:CB:1A:97:53:26:61:47:C1:20:AB:8A:F8:AD:95:05:69
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019D262835D43B5E90E165505A550FA4328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0D3D
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: eNN/wyE8b7P0+k+YNMI0YsuKNsoSlpJ3jGnCrx4UIMM=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:d4:3b:5e:90:e1:65:50:5a:55:0f:a4:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=8a42f7f3cb1a9753266147c120ab8af8ad950569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:21:7c:1f:43:47:96:be:e0:10:bc:5e:18:
5c:a5:28:1f:a0:96:53:c9:eb:b5:89:f1:55:2b:62:
c7:c0:36:48:ae:cd:13:4d:db:2c:e2:07:eb:11:82:
b1:09:6a:67:82:3f:68:b7:fa:d3:6a:01:5b:22:47:
07:2e:cc:4a:07:12:f1:c4:d3:0b:ec:59:e0:76:86:
b1:4b:a0:6e:a5:57:cd:e1:17:a3:18:2a:8d:30:23:
79:9d:95:88:8c:d0:e1:33:66:fc:ec:11:e4:6a:5f:
97:c0:f8:6c:7c:58:83:02:23:dd:09:bd:4a:25:aa:
dc:13:c9:41:91:8e:d2:6a:c6:7e:91:37:31:45:63:
03:4c:77:79:f0:4b:b2:59:fa:fb:e0:b2:74:de:68:
d9:e7:ee:54:21:95:ce:39:21:d1:28:6c:5c:3e:e6:
3f:21:d4:19:1b:85:95:57:d0:18:6b:be:29:be:b9:
d4:7f:bf:1e:a1:a1:87:55:43:9c:97:f9:5b:78:7d:
de:97:ed:01:b0:27:ce:c0:93:ed:9b:5f:cc:d6:95:
0b:ba:61:c8:35:57:89:3c:64:54:c8:54:a1:f6:b1:
9d:ca:99:35:8d:14:e3:42:fd:3b:7e:48:de:50:5b:
e7:76:fa:a2:58:69:a0:a2:2c:55:a1:61:59:8a:4a:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:F7:F3:CB:1A:97:53:26:61:47:C1:20:AB:8A:F8:AD:95:05:69
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:53:49:00:5c:2a:7f:6f:d4:6a:64:7e:29:52:76:25:74:fc:
e2:47:d0:75:3e:cd:41:fb:36:2c:ae:1f:1e:b3:4d:98:93:6c:
12:e4:5c:4a:f0:8d:22:24:c0:07:65:c8:71:31:f1:de:28:38:
14:0f:05:8b:23:28:7f:9b:a7:d3:b3:4b:c8:26:64:ca:47:a0:
ec:9b:f2:ed:f6:09:2c:45:45:b6:cf:64:33:ac:27:e7:53:78:
e9:a1:ec:e0:6b:d7:e2:4c:8a:28:15:db:54:74:61:82:22:68:
d8:90:9a:2f:0a:54:91:e7:d9:d7:97:de:e7:e5:f6:0a:01:91:
cc:f3:76:d1:ea:a5:67:ca:6b:e3:8b:e2:2c:5d:11:52:b9:38:
6a:50:8b:f4:d6:fe:eb:97:0b:16:72:5c:96:8e:ea:cb:ca:4a:
cd:22:e4:80:60:2d:41:5d:05:e1:1b:ab:20:e6:4a:7e:21:f1:
7b:1c:ff:96:73:30:14:f2:e8:07:5d:91:74:57:97:91:b1:52:
64:3e:6f:31:71:f5:64:e3:fb:cc:69:9f:e8:9f:09:82:42:0a:
b4:ef:76:a9:b8:1a:45:50:c9:59:47:b5:a6:3f:d4:fe:85:ec:
9b:e2:55:02:c6:c7:a6:7d:dc:df:82:1c:3a:d8:6d:83:3a:fc:
e7:13:ef:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:21 2026 by rpki-client