Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: s1czUnWXjfEFQ2j4+7ONDgGo3EdAmarZiG394Slsf6Y=
Subject key identifier: E3:E7:CE:30:CC:1D:5A:E4:3F:63:28:56:08:12:D9:A5:1B:E0:5F:62
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019D2C2A23AA17A39FEEBD0B088AC3072FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0BCC
Signing time: Thu 26 Mar 2026 22:00:52 +0000
Manifest this update: Thu 26 Mar 2026 22:00:52 +0000
Manifest next update: Fri 27 Mar 2026 22:00:52 +0000
Files and hashes: 1: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (hash: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo=)
2: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: iK5/bNE5VtD1I0oL7R7sIafYBuOlTz6Smoz3YXRFIeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:23:aa:17:a3:9f:ee:bd:0b:08:8a:c3:07:2f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Mar 26 22:00:52 2026 GMT
Not After : Mar 27 22:00:52 2026 GMT
Subject: CN=e3e7ce30cc1d5ae43f6328560812d9a51be05f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:6b:94:e7:d7:a6:20:6e:d0:02:0e:32:bf:
11:57:a9:bb:75:58:4f:b4:d1:23:a1:de:6a:e7:b0:
dc:d8:7e:b5:a8:7a:db:12:2b:d0:d4:39:89:bd:32:
0a:d5:45:1d:1a:e4:43:46:82:9a:8f:91:a0:ba:5a:
a8:d0:a6:7b:75:3f:ce:07:94:7c:c3:71:43:88:be:
11:3c:8e:13:d8:36:1c:83:4a:ea:a9:33:e4:02:d0:
9a:06:62:2a:7b:8e:60:f6:42:eb:a6:27:4e:74:d8:
c2:3d:82:ad:8b:ba:da:27:8e:2e:91:13:1e:f6:1b:
f7:1e:8c:70:9d:d6:a4:09:53:0f:fe:86:3c:d8:3e:
5d:ec:07:e3:da:d6:2e:6a:47:39:81:bb:c2:c8:0e:
14:f5:cd:eb:0c:67:3a:ac:05:e0:f9:b5:f5:76:82:
be:76:ea:ab:30:99:a1:ba:de:42:fd:af:fc:82:c5:
69:4a:97:15:ae:91:64:66:4e:19:f6:98:39:42:3d:
33:4e:2d:ec:24:cc:bd:2d:68:f5:0b:0f:e3:9a:3b:
85:0e:bf:a7:13:ce:8c:8c:46:82:45:b3:09:d6:0a:
4f:7b:25:e1:f6:aa:d0:a5:25:57:e3:e4:5c:e3:fe:
16:05:2e:f3:c9:b8:a7:72:90:c7:02:94:e0:be:85:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:CE:30:CC:1D:5A:E4:3F:63:28:56:08:12:D9:A5:1B:E0:5F:62
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7c:78:01:86:42:00:55:9f:6c:e2:dd:b7:86:e4:64:88:5d:
00:f5:e0:69:19:f3:08:d3:21:3d:11:72:0a:5a:c3:60:8e:cd:
03:10:56:23:cd:80:cf:08:58:02:73:cb:5e:49:07:f8:be:b2:
4d:c5:d5:02:a4:1d:4b:8e:cd:2f:28:3a:e0:47:c8:05:d4:de:
68:33:4c:9f:6c:ee:22:4c:1f:5e:23:68:64:65:a1:ff:11:31:
25:c3:11:f0:15:39:15:e4:40:af:c1:1b:3c:28:76:74:3f:98:
40:ce:02:5d:8b:86:ea:26:4f:37:9e:fe:08:21:47:8e:52:61:
3e:02:2e:35:7a:f5:c2:9d:7c:c6:1b:73:5b:fc:73:f2:fd:5e:
60:37:c8:0f:59:85:19:b9:7e:cf:cb:72:68:f6:92:3d:c8:6a:
d0:cd:dd:3e:9e:49:8c:4f:27:6b:be:4b:6a:0d:38:ff:04:2c:
18:a4:cb:b2:7a:dd:e3:11:41:54:8c:61:34:ef:8d:be:3e:b7:
9c:93:cf:a2:91:aa:2e:af:73:09:e5:a4:8e:95:34:a4:8a:77:
f9:af:be:9c:b8:04:ba:30:a1:f9:0d:28:80:45:97:8e:5f:16:
b8:6e:7f:2f:c3:f6:c4:b2:e9:8d:ad:d5:0f:46:b3:f1:9b:25:
6e:6e:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:38:04 2026 by rpki-client