Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: GITOwunE7fzEyiqo/anV7/GdJtA3xs/aNAS2oH5NEno=
Subject key identifier: B5:3B:2B:F0:52:E7:57:DE:9C:68:83:CC:00:CB:87:30:5F:15:66:82
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 019D29614FE40B4F10FE476DCCB044FA9B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 0B0F
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: DSeHcwpA3gp1Dsf9aQPt8xtrLjo+FRRTeF0HRbY1gD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4f:e4:0b:4f:10:fe:47:6d:cc:b0:44:fa:9b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=b53b2bf052e757de9c6883cc00cb87305f156682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:09:48:b9:54:25:c0:93:fc:04:60:e4:b5:
9a:fd:51:df:35:eb:e4:0c:35:89:b4:54:43:ae:b8:
cb:dc:03:bd:4b:21:a7:ab:49:87:48:4d:8a:1e:d2:
f0:8c:a7:69:4a:53:54:c0:d9:04:50:a8:21:54:aa:
13:9f:9d:9e:2e:8a:4a:03:27:b0:69:9a:13:6b:60:
d8:b8:a5:8f:89:69:c5:a7:d2:17:0f:4c:55:f4:a6:
19:41:42:48:28:11:ae:d3:22:4a:8a:35:bd:4f:3c:
e7:71:96:2c:58:fc:14:96:7d:f8:90:04:90:f4:14:
8c:20:cf:32:04:05:e1:d3:a5:86:7d:cb:15:d6:84:
ac:41:18:25:df:f6:dd:56:31:a0:78:c5:27:6c:37:
69:5a:4d:5c:1f:20:dc:3c:0f:88:8e:4c:4b:d1:6e:
e2:ca:91:d2:72:9f:b3:75:8e:b6:37:e4:34:c6:ef:
60:ac:46:6d:95:34:f6:02:13:77:d3:74:51:19:93:
6e:3d:72:c4:3e:e7:c6:e0:60:fc:d7:39:a9:ed:3b:
8d:d6:2e:c4:2b:6d:bb:9a:fe:d8:e1:29:b1:7d:81:
98:d8:ab:68:dd:ef:0b:44:af:0f:c8:90:d1:52:d1:
1f:95:05:54:31:75:2e:06:e2:85:b8:c0:16:5e:f9:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:2B:F0:52:E7:57:DE:9C:68:83:CC:00:CB:87:30:5F:15:66:82
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:3a:63:37:63:bf:54:2d:54:10:1b:1a:be:02:45:b8:db:3b:
7b:f1:86:91:e8:25:a1:c5:e6:6f:e3:ac:68:f3:27:1d:35:c2:
aa:17:9f:7e:6b:7e:f7:a8:23:bb:f3:47:7f:a6:ab:0b:e7:17:
19:63:bb:6a:d8:4d:66:74:b0:3e:00:6f:3f:27:c5:b2:55:33:
70:39:02:5c:c1:b2:99:7d:35:45:5c:82:a5:8b:cd:f0:bb:e7:
e5:b2:7b:54:88:78:61:50:56:4a:f0:a9:fc:ea:e2:6d:62:b7:
43:b7:01:1d:f3:ed:ad:72:d1:87:ca:8b:09:55:5f:dc:a1:56:
1e:91:d2:d3:7a:bf:05:25:9e:00:11:93:c4:98:29:b2:6e:84:
41:52:26:de:3e:f0:e9:43:48:45:c7:1b:e8:80:34:2c:8d:7b:
e9:fb:bb:25:e0:1e:b9:cf:20:d7:c1:6f:7c:47:25:b8:b9:fc:
99:6f:84:02:a2:21:b2:d9:4f:ee:85:24:4f:a1:02:d0:61:91:
de:4c:a2:07:a0:e9:53:9c:bc:b4:c4:41:2e:f0:97:f8:62:c9:
ae:8f:e0:6e:e2:96:c8:95:3c:6f:9e:ac:37:05:0a:b4:9a:89:
cb:6e:d3:5e:cf:8d:6c:98:02:03:0b:ed:18:88:78:14:21:83:
36:6d:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:36 2026 by rpki-client