Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: yOoas3IM1ktrd2LRNADR7n5N/luc2gIgp6TReTJOQsI=
Subject key identifier: 52:53:8D:6B:7D:95:CB:F9:C1:49:51:E8:2B:7C:11:D7:B7:EF:4D:55
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019D258422CB2D3D74B0C9049E5CE8D0516D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 11D9
Signing time: Wed 25 Mar 2026 15:01:49 +0000
Manifest this update: Wed 25 Mar 2026 15:01:49 +0000
Manifest next update: Thu 26 Mar 2026 15:01:49 +0000
Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: 5FNLNOrRjGE1vCfBJurWlGGC8jOVJN4zoFosa90JK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:22:cb:2d:3d:74:b0:c9:04:9e:5c:e8:d0:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Mar 25 15:01:49 2026 GMT
Not After : Mar 26 15:01:49 2026 GMT
Subject: CN=52538d6b7d95cbf9c14951e82b7c11d7b7ef4d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:b3:8f:3e:0e:c3:d6:4f:f2:68:71:0b:31:
cc:b8:31:3e:7a:27:2c:47:63:bb:5f:d6:3f:54:18:
f4:5a:07:09:98:6d:5b:c9:19:73:96:c1:7b:2b:88:
97:6e:14:af:8a:ed:60:b8:47:4d:48:91:5f:1c:e1:
94:54:49:7c:bf:c2:5d:e0:58:8c:74:ab:c8:89:47:
d9:31:b9:4c:ab:a4:38:0c:d5:02:8a:32:04:ba:c2:
63:9a:5a:7a:08:b9:5b:54:34:e8:7b:ab:36:01:d6:
9d:55:14:9b:0b:11:68:49:03:a9:6a:f0:99:47:00:
74:7b:71:87:9a:87:c7:ca:08:58:2c:95:31:74:43:
0c:f4:e0:d1:64:4b:f7:35:68:69:f1:65:00:54:f0:
e7:ef:cf:00:b8:e4:27:7d:64:e4:6f:66:fd:56:8b:
bd:be:ef:ec:32:8a:59:7b:2c:f7:54:db:fa:3b:09:
c6:53:73:61:ca:0d:27:0d:ff:26:a2:a8:84:58:6a:
db:7b:cd:6c:79:e4:e8:fc:df:db:7b:6b:d3:eb:9c:
5e:61:b0:b4:b5:81:e0:54:ea:8a:3a:47:37:94:d6:
b0:03:5a:52:ec:3a:d9:3b:ad:08:0d:e2:6e:17:6d:
dc:77:f0:2e:ed:8c:f5:e8:ac:71:78:c3:2a:af:37:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:8D:6B:7D:95:CB:F9:C1:49:51:E8:2B:7C:11:D7:B7:EF:4D:55
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:cc:d9:80:b0:9a:c6:5f:e7:7c:2d:4a:73:46:fb:2c:aa:
6a:4e:b4:d4:4d:05:1b:df:0f:d4:ed:ed:d3:05:cc:44:11:ad:
d3:1a:5a:f8:06:a2:34:e7:9d:ba:cb:c5:b0:aa:2a:56:2f:c5:
f7:7c:6e:87:b9:8d:65:64:90:b5:bc:99:b1:64:27:12:af:56:
38:41:3d:ef:62:82:a9:4b:4b:a8:ee:bc:95:2c:ec:4f:19:8d:
fe:55:f9:6f:17:b7:88:b8:3b:ef:85:62:a8:ce:af:8e:72:6f:
5d:39:1b:85:d5:dc:50:d6:cd:71:b0:97:ca:00:36:2b:7d:81:
0e:ae:1c:5d:63:63:ab:e8:8a:9f:8f:b3:6a:cb:08:1c:dd:1d:
ea:41:2c:71:c0:3a:ad:ec:32:e4:33:8d:1f:58:bd:b5:af:f2:
fc:89:7f:ad:0a:4a:d2:f5:19:9b:33:a8:6e:30:ea:5c:ed:57:
d1:39:65:1f:34:a1:6e:5e:0e:6d:5d:8f:3f:8b:ed:ec:d9:78:
6d:b5:fd:77:e6:6e:d2:3e:2e:76:66:63:0b:dd:88:d9:7b:d0:
77:04:ff:bf:ff:b0:f8:1f:e1:ae:1b:67:b5:d7:7c:90:42:52:
87:7b:ac:ec:53:9e:be:69:b2:5a:8f:6b:90:b6:37:bf:45:11:
5d:8a:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client