Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: aU7iH+Idfo0yWq49UjW/lMOuWxjhjSjyXw6EPz4lpMo=
Subject key identifier: 4A:2C:AC:B5:17:D4:4F:DA:40:05:69:6C:E3:BB:75:B1:7B:47:30:19
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019D2704BA2E3E92437A11360A52A1B32139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: YPP1o8gr0aEKBrYMR017ztp+kyWdqDvmcatH2ZqLdLE=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ba:2e:3e:92:43:7a:11:36:0a:52:a1:b3:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=4a2cacb517d44fda4005696ce3bb75b17b473019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:07:4e:de:c0:79:63:22:f2:d0:ee:ca:10:
54:0b:6c:cd:3e:23:0d:66:2a:43:32:cb:81:00:38:
46:ab:84:03:ef:37:7a:eb:4b:c1:64:fd:93:d2:d9:
5a:d9:a9:4c:dc:6f:ee:f8:a2:03:0b:25:df:ba:00:
08:1d:a0:5c:e0:67:50:c4:79:5a:62:0b:f3:06:55:
37:9e:a5:21:1b:29:69:ac:1e:51:a8:06:ee:40:cc:
1e:9d:d8:d1:e3:b1:80:74:3a:76:dd:ac:23:ce:aa:
17:48:3f:64:7d:fa:68:40:5c:4d:55:29:6f:5e:95:
b3:33:be:99:97:43:12:69:23:9e:4d:4b:46:b3:48:
02:65:66:9d:ab:c7:01:8c:c4:fc:bf:3f:74:7d:78:
2d:6a:e4:4a:86:78:52:8e:a3:0d:d1:08:ba:0e:19:
94:5c:c4:a3:42:ea:09:d8:16:22:81:22:35:bb:7a:
42:c2:48:d3:e1:4c:a3:b3:f7:b9:b8:33:db:c5:87:
f9:f0:e7:09:03:29:d3:e1:b4:36:33:03:1f:49:68:
21:6f:95:47:95:0b:7f:67:3a:e7:21:a7:08:b9:76:
6b:27:0d:fe:00:a6:8e:2d:1b:0b:79:d9:25:fc:a5:
1f:1f:a3:51:44:4a:8b:ff:c0:63:67:a3:c4:8d:df:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:AC:B5:17:D4:4F:DA:40:05:69:6C:E3:BB:75:B1:7B:47:30:19
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:42:15:01:e6:b4:21:e5:b7:69:db:4c:27:e3:70:f0:98:fc:
22:8a:01:b0:29:41:2e:7f:1f:37:20:4f:22:e6:09:92:da:d4:
36:ea:d1:68:f9:37:f4:ae:0d:72:9b:62:ea:2e:37:e8:25:d5:
99:2f:08:1a:45:b3:e8:1c:fa:8e:94:e2:8a:f0:c6:a7:13:96:
ef:69:4f:59:51:3b:f3:d9:4d:25:48:7e:b4:3b:79:3c:25:03:
a6:5c:60:ec:fe:a5:45:0b:94:4a:04:7b:18:a6:f4:e0:f6:6c:
24:ff:1f:db:b9:7c:30:e5:9d:70:33:60:66:87:33:5d:7b:f1:
74:27:27:8f:70:af:6b:2a:49:db:e8:16:38:1e:1f:a4:99:8d:
65:50:c5:06:23:94:75:7b:92:db:c8:7c:43:a5:7e:6f:5f:49:
6a:57:81:2c:d6:b9:a6:77:52:e2:20:d3:18:73:28:6f:a5:cc:
c7:f3:50:ec:f4:77:fe:f8:07:32:e2:11:60:b3:b8:1e:11:06:
d0:75:82:01:99:74:49:ca:59:77:f9:d5:21:44:10:83:87:f5:
80:4d:1f:80:08:7c:c4:c0:f6:7f:b5:cc:e8:eb:c7:bf:8f:27:
4e:e8:bf:dc:f5:c8:3a:65:5c:d7:1f:a6:6e:7e:e2:9b:0b:b5:
90:61:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:00 2026 by rpki-client