Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: +csUl55buKcpXbgwhQX2Shl8XkJ183/rLYXg3tMQNOw=
Subject key identifier: 96:9D:7A:99:4E:D9:A6:69:12:B6:15:6D:0F:7F:27:2F:1E:4A:E9:9E
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019D258322EAF0E8551029B49056B409194E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 12A4
Signing time: Wed 25 Mar 2026 15:00:44 +0000
Manifest this update: Wed 25 Mar 2026 15:00:44 +0000
Manifest next update: Thu 26 Mar 2026 15:00:44 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: 4Y70X3Q72KTdPBdL5BVvSmpnZ+PdxmZEshDnOtH8YgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:22:ea:f0:e8:55:10:29:b4:90:56:b4:09:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Mar 25 15:00:44 2026 GMT
Not After : Mar 26 15:00:44 2026 GMT
Subject: CN=969d7a994ed9a66912b6156d0f7f272f1e4ae99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:d1:52:af:4a:e2:48:ed:50:86:57:f3:63:
84:ed:8d:4e:77:b1:d5:c7:d4:cc:c1:d4:68:71:f3:
87:69:ad:06:75:f1:30:be:fa:b3:be:40:17:aa:fc:
7c:00:bf:f3:78:29:5c:c3:7c:d3:50:df:7c:b9:ca:
98:9b:5b:15:86:70:45:bf:a2:64:ec:80:47:89:02:
14:39:c1:8c:67:3d:53:4f:86:79:fd:ab:86:3c:b0:
cb:02:3c:ed:b9:24:36:32:7f:35:2b:63:48:85:59:
f3:6c:d1:af:38:fb:bf:29:71:87:59:bb:13:1d:bd:
cf:6b:16:b8:54:89:b7:03:3a:1f:bc:dc:c5:f8:d1:
fe:6f:40:08:dc:39:9c:c5:66:03:06:f3:e9:b6:b3:
4c:aa:13:ab:3f:1f:6c:5c:9a:12:29:4b:dd:8e:ae:
a0:7c:18:39:62:52:5a:7d:f6:d9:ca:2f:76:1d:e8:
39:5f:1d:c7:83:15:b9:66:dd:0e:11:8a:02:5d:be:
e3:4c:7c:d9:eb:4e:9f:68:0f:04:ac:e1:82:9b:7a:
4a:98:5a:c5:8c:88:e7:f5:68:6d:2d:c0:05:9d:b0:
10:83:74:4c:82:e9:50:23:3f:af:82:22:3e:f6:a9:
2e:a9:f3:57:bc:75:fb:74:88:50:27:1d:ed:ad:4c:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:7A:99:4E:D9:A6:69:12:B6:15:6D:0F:7F:27:2F:1E:4A:E9:9E
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:18:26:02:a1:02:8a:b5:42:5b:d1:15:10:27:63:25:6d:1e:
43:d0:b9:fa:53:a0:e5:41:b0:86:3c:12:ad:78:da:79:17:ae:
41:05:39:c4:d5:a6:58:f3:64:02:d9:a3:09:f4:57:58:2b:97:
b6:f8:b7:55:8f:87:c2:38:70:80:8f:3a:6f:64:50:af:ae:aa:
f9:84:1a:54:09:7a:9b:bd:43:db:58:db:ad:be:76:a4:f5:21:
d6:79:fc:95:6e:8a:e1:cd:4a:78:4c:2a:a0:68:ce:2a:52:10:
e8:35:73:1a:d8:4a:6f:d7:19:37:e7:8b:6a:93:a7:8d:72:46:
27:04:fb:97:64:ee:9a:f8:f6:ff:68:1f:14:1b:91:85:c0:63:
fd:6a:8f:64:56:59:af:b5:e9:0a:17:70:05:a1:ae:42:2d:be:
d8:f8:f8:46:6a:fd:c5:32:5c:fb:5f:63:da:e1:85:9c:78:01:
88:ec:5f:66:3b:30:95:f3:d0:80:e6:4c:93:c3:cf:90:49:ed:
b6:2d:24:73:31:fe:89:0d:6e:f7:d7:6f:f2:66:56:fd:f3:97:
7b:5a:36:77:55:6c:83:32:61:af:3c:fa:67:a6:bf:aa:6d:18:
de:37:8e:e2:fa:c0:e8:fe:c1:93:44:4f:2e:7b:1a:fc:e4:17:
2b:ab:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:23 2026 by rpki-client