Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: z8DphYB+ILxQ05LJeJeLsjx27qRbUxebr5Ya8DT6Syk=
Subject key identifier: C6:F1:9A:DE:19:90:E9:1A:13:17:03:AE:F2:D5:A4:F1:49:2D:13:D3
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 019D26CD80907665D80091CCFB7978AB28C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: cFxRCCQN4YXEL_mFbkEo5k1pnIo.roa (hash: 3gOkanUhjfYhiX9/Lx+CjQ0DSnaWLj1dJ1oGqbwVrl8=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: /a1mcEXR5iR6hVXRKlVi8sHdsJ7tn+CkTZKIlKjM1Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:80:90:76:65:d8:00:91:cc:fb:79:78:ab:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=c6f19ade1990e91a131703aef2d5a4f1492d13d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:c9:12:b4:d0:6f:44:75:a5:4e:ca:30:1a:
d7:81:0e:49:7f:12:de:b4:49:97:cb:25:85:92:6c:
31:8f:f6:2e:d2:16:92:e0:85:5e:66:fb:24:5b:b9:
fe:88:f7:f0:03:06:4a:ae:2d:f0:cc:05:b6:e6:b4:
d7:15:37:eb:af:58:8a:3b:3a:6f:b1:ca:68:27:69:
fa:64:91:29:a6:48:e2:34:d8:fc:15:2e:c9:25:80:
9d:d3:28:c0:87:f1:cf:48:4e:cc:19:57:e5:b6:9a:
19:4c:71:97:24:c6:1c:31:51:1f:1b:b0:fc:5a:31:
5d:05:98:8c:db:dc:a3:2f:58:89:0e:6e:5d:fd:af:
48:fe:d3:4a:8a:96:32:22:13:d5:d2:e5:af:1b:26:
f4:6f:74:ce:95:43:3f:bf:5c:6b:37:2e:0e:11:6f:
c8:97:99:39:a8:e4:e7:52:96:0b:9f:a2:f1:f8:9c:
be:86:f7:ca:e1:a5:b1:28:09:b4:68:69:d8:37:67:
46:0f:77:78:b7:d1:51:68:0c:3d:ce:0f:9f:f8:cc:
26:a5:2d:bf:b9:a1:91:a2:fc:89:3f:ec:63:ae:af:
09:36:af:04:49:5c:bb:7c:ad:fc:36:37:3d:a8:bb:
46:fb:8d:17:9b:ff:b8:11:67:d4:d4:74:30:d6:4d:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:9A:DE:19:90:E9:1A:13:17:03:AE:F2:D5:A4:F1:49:2D:13:D3
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:25:19:7c:3d:5f:ca:29:45:d2:ba:5c:63:c0:5a:c7:4e:
10:a9:05:0d:d8:c4:54:5f:a4:8e:5d:2c:71:34:e9:52:5c:4f:
0f:d2:d7:b8:53:5d:95:9d:6a:cd:60:1f:97:e1:a7:0a:ec:8a:
ff:4d:46:fa:7f:68:e9:56:cf:be:fa:ab:99:e6:7b:cc:70:26:
ae:8c:1c:95:c3:36:53:03:e5:66:8c:49:a5:8c:78:d9:3f:ac:
22:1d:15:72:c6:e7:c0:6e:96:58:60:be:fa:ef:80:e3:c4:93:
ca:51:21:e8:e7:47:da:f2:82:a6:e8:c3:c8:d4:82:7e:71:6d:
36:71:bf:5d:c2:60:59:ad:1a:2e:ba:9f:d8:ff:46:c4:e9:6c:
40:5b:9c:3c:d2:e1:64:2e:51:79:80:4e:9f:b8:0a:a5:6a:1e:
aa:c5:a5:9a:18:2b:93:85:cd:51:a1:cd:04:f0:27:94:8d:b8:
21:f0:59:64:ef:a5:06:8d:d3:fd:56:52:7e:90:d9:2e:60:52:
9e:65:5c:f9:be:97:ca:1f:e3:e3:e3:65:24:e2:b1:6f:49:e0:
70:33:c8:df:24:22:06:e2:b3:b3:4f:e6:d7:2d:60:a9:99:28:
4c:24:ee:4b:38:50:ba:52:31:6e:9a:68:77:94:7a:67:67:5b:
28:37:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client