Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: TNhi/KrFhc6B/Delvpkdq8yc61T8eZHNAPK3Y5oR3mo=
Subject key identifier: 25:54:C1:A5:48:B9:2E:61:BD:C8:9F:58:B5:16:AD:BB:0B:F9:5A:91
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019D27A8F272A96763B914B9955B0A90849E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 140A
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: 6WPbn0PxDTAlG2gMK4nfFwhIAWzPjV86gmr6igDfaiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f2:72:a9:67:63:b9:14:b9:95:5b:0a:90:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=2554c1a548b92e61bdc89f58b516adbb0bf95a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:e3:4a:7a:d5:65:17:99:2d:e3:0e:bf:dc:
81:24:ad:4e:a1:09:e0:e8:f6:b3:1b:1e:4f:aa:0e:
8d:24:dc:39:e3:44:fa:95:61:67:40:ea:7f:71:f4:
37:ac:47:3c:63:29:05:0d:f1:1a:f5:e7:7a:c4:7e:
5d:8f:5d:a8:bd:c4:eb:cb:66:93:ff:b6:c9:47:a5:
c4:40:bc:38:67:3a:ec:b0:cd:59:51:fd:24:67:32:
a8:76:60:bb:35:fd:c5:6c:0f:28:2d:c5:91:dc:70:
b4:82:46:05:7d:cf:82:43:d9:e3:ca:ba:98:5b:0d:
b2:10:a6:6f:7d:ef:dc:a7:c5:18:3f:18:8a:4f:7c:
51:c3:70:28:31:5f:52:31:a0:dd:71:1e:a1:85:0e:
a3:eb:5c:55:e3:3f:87:0f:d7:79:44:12:f0:6e:60:
83:72:9a:3f:08:25:84:3a:87:a1:8d:bd:03:71:f1:
2c:7b:28:a4:e5:38:1e:ef:1d:83:e9:52:7e:38:b1:
02:22:c2:0d:22:92:fd:17:e9:d1:79:58:d0:ad:50:
c7:ba:2d:e1:6c:d7:c1:b3:2a:7e:5c:e9:6c:a9:1a:
2a:f6:03:4d:01:8d:91:28:0a:33:30:fe:ff:b3:9d:
e1:3a:72:bb:00:9b:93:96:4f:83:dd:07:01:56:96:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:C1:A5:48:B9:2E:61:BD:C8:9F:58:B5:16:AD:BB:0B:F9:5A:91
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:72:c1:46:85:2d:e0:ba:fb:72:91:6d:85:20:fc:8a:e1:
8d:0a:5e:ba:e3:fd:53:9c:d6:e8:2f:90:54:94:c4:83:f3:3e:
98:7f:b0:79:aa:2e:a1:78:ea:f0:bc:de:76:3d:50:25:ba:44:
a9:17:68:e1:e6:90:05:f6:da:4c:45:2f:67:dd:83:0e:48:a0:
50:37:12:09:ca:b8:ba:fc:7e:a6:ed:6f:8e:06:c9:fe:1a:c3:
3d:c2:c4:5a:ba:1e:7d:f6:48:f8:54:a7:4e:12:00:48:4a:9e:
b5:32:a2:2a:20:9f:35:33:2c:2e:b3:c3:11:52:e9:fb:c2:4a:
46:dc:d4:8f:5b:da:99:fd:bb:4c:f7:6b:28:01:fa:3b:5b:2b:
be:37:a1:ca:62:cb:f4:a5:d8:1d:4f:67:a4:55:26:55:f5:99:
3f:9a:5a:6c:3f:43:af:87:df:84:aa:60:28:fd:4a:b5:95:9a:
1c:b5:14:e8:10:b7:c9:65:db:e5:7a:42:df:09:77:66:93:9f:
a8:0c:0b:89:2a:6d:dd:6d:e8:db:93:ee:9b:32:59:5d:07:18:
25:b6:f3:c8:bf:4f:a5:74:ab:e8:e1:04:22:96:c0:64:2e:13:
e6:15:72:3d:65:22:43:27:a6:f5:03:f3:a9:b0:0f:4f:d5:77:
b6:3e:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:06 2026 by rpki-client