Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: v+A2wEdMFFMZ54TrJItBcwJ0Jg2y419HF6A5CJ/hjk8=
Subject key identifier: CD:D7:23:F4:77:B5:3C:65:DD:86:B0:71:A0:EB:51:BD:9B:91:61:C7
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019D2703FC2D14A3065D6003E9D8136CCD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0E39
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: fskjKgPj5L9YOuWuL2aoh4G8vqU.roa (hash: 31yKilxbLobmkxS1Ne8oNBBHC8xU0xlQdNH3udg5Os4=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: 3KkbyUyMgfbMm2o2fQbQtwD/Gz3egzEXI+MZzURQRPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fc:2d:14:a3:06:5d:60:03:e9:d8:13:6c:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=cdd723f477b53c65dd86b071a0eb51bd9b9161c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:75:1c:84:fe:75:db:75:71:5e:d8:87:87:
ab:b5:20:ee:0d:42:be:44:f4:9f:6f:87:ec:e0:8f:
0f:9f:82:81:0e:1f:da:3a:92:f9:2b:88:33:10:bc:
86:72:80:0d:2c:0e:23:4a:cc:79:c7:ec:ab:4e:11:
ea:74:ce:8d:2d:d8:f7:41:98:08:6c:5d:39:73:16:
9e:22:72:38:61:e3:8a:b1:d3:e1:70:24:21:56:bd:
ee:62:03:a5:20:f3:ef:ee:c5:19:43:67:eb:82:8a:
2b:4b:0f:72:3a:a0:31:39:1e:82:c3:22:a0:bf:d8:
56:11:d5:d9:29:84:64:dc:a6:26:05:95:95:d5:a5:
4b:3a:8d:c1:4c:76:9e:9a:af:d8:ff:2e:4c:29:4c:
f3:ca:3a:41:1a:f5:2f:65:59:c9:e5:ae:e2:40:54:
bc:03:10:e1:bc:33:e8:00:99:bb:47:04:2a:51:62:
6c:33:52:f0:da:c5:8a:d6:34:6f:ef:f1:69:5b:3b:
a5:09:8a:0d:8f:d5:20:a0:cf:bd:ce:db:9b:0b:3f:
d8:9b:cd:dc:00:95:da:e3:79:c8:9b:fc:20:dd:2d:
70:45:d7:ba:33:c5:42:97:6a:9c:c0:f5:fe:61:bf:
e5:da:03:a1:4f:28:70:5c:7e:44:ff:f4:c6:eb:2d:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:23:F4:77:B5:3C:65:DD:86:B0:71:A0:EB:51:BD:9B:91:61:C7
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:56:1e:03:e6:d3:8b:a5:46:da:3c:f1:87:ff:3f:92:c2:
9d:c4:6d:0c:eb:09:23:8e:0b:2f:66:fc:db:c6:3b:19:eb:0c:
39:f7:c0:b1:5f:6e:2b:96:1e:d7:b8:f7:23:51:07:5d:8c:55:
65:c0:78:f5:23:f8:9c:11:d6:d1:66:38:74:32:9f:0a:1a:40:
c5:8c:94:9f:39:56:52:f0:19:c2:72:09:64:85:5e:ce:fa:45:
0f:66:10:02:c3:52:37:f6:94:28:ab:05:ba:1f:79:65:4e:ad:
26:04:9f:55:40:a5:c1:b7:6d:88:4f:28:cf:81:69:dd:f0:57:
ca:63:d1:1d:20:78:48:2c:2f:b9:5d:37:20:f9:81:e1:18:95:
d4:62:bd:3c:06:f8:4a:d1:dd:fc:c1:bd:1f:0d:e2:55:9b:13:
09:18:c6:f9:fb:02:82:21:d2:99:ce:1d:f8:13:7f:be:81:2e:
a0:bd:c9:93:a2:3b:f6:24:5e:22:6a:d8:31:2b:29:2a:8e:4a:
12:9c:91:ef:bf:80:3c:e3:da:ee:43:81:2b:ad:f8:ae:58:9b:
ae:82:0c:5f:f9:d0:09:0e:a1:cb:8b:dc:c7:85:e9:a0:ee:c3:
d4:46:93:89:58:4f:18:72:f4:8f:bb:a3:47:cd:5c:a9:42:9a:
30:d8:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:27 2026 by rpki-client