Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: GToFLib2C3cblf7OmSufUG8O5X3mgIWSkxIyPJN4BNk=
Subject key identifier: F4:06:8C:57:75:94:93:76:BD:FF:26:B5:8D:C9:9C:51:77:6B:FF:77
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 019D29296843C8B45DE7EB62CB682279D697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 08:01:12 +0000
Manifest this update: Thu 26 Mar 2026 08:01:12 +0000
Manifest next update: Fri 27 Mar 2026 08:01:12 +0000
Files and hashes: 1: 7qTF0jqmrE5sqWppz2XaId92Nsg.roa (hash: BXslQtBYGdpBVanESXoQgNGnECD/ohyq+njOEg7cP8o=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: egzmy1XkdtZVJCIcehKVyIBg9XN6oMT6qXjnJO2wzLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:68:43:c8:b4:5d:e7:eb:62:cb:68:22:79:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Mar 26 08:01:12 2026 GMT
Not After : Mar 27 08:01:12 2026 GMT
Subject: CN=f4068c5775949376bdff26b58dc99c51776bff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:d1:0a:8e:1f:24:78:0a:80:0d:59:b4:5b:
15:50:71:9d:23:4b:62:b2:24:29:64:95:a8:c6:29:
03:f3:e0:22:5c:a1:01:14:b7:a9:d9:f1:53:3c:93:
e7:68:5e:62:93:3a:13:b6:6c:e1:03:1e:4c:c0:7e:
fe:ed:98:72:dd:f2:95:1e:87:f5:0c:0a:5f:98:f7:
ed:a8:e1:4b:3f:a4:18:51:eb:e7:6a:c1:d9:95:24:
ca:26:20:88:95:d0:db:4c:43:13:83:31:ab:07:52:
31:8f:11:cb:7a:c9:3e:d9:9b:bf:70:ad:72:79:3c:
e9:17:66:7f:08:6c:aa:9e:6a:e0:75:82:5f:75:49:
d1:86:89:3d:8c:e8:6d:cb:e1:38:68:c3:b6:7a:dc:
85:c9:44:68:71:e9:02:8f:35:ea:93:d3:de:7d:90:
96:60:d2:88:81:c8:c6:c7:3e:bf:a4:81:b0:00:e8:
5e:ba:b7:9a:da:7c:94:fa:b4:e7:2f:89:80:40:48:
d9:bd:0f:ff:26:cf:90:f3:7f:cd:7e:8a:72:b3:81:
0d:4d:3f:2d:22:0d:99:33:de:cb:37:8f:cb:fe:b5:
03:f0:78:09:88:f6:ee:09:64:58:c4:f3:c8:0c:86:
3f:c2:9e:d1:00:e3:8c:16:c5:95:f4:39:97:f8:84:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:8C:57:75:94:93:76:BD:FF:26:B5:8D:C9:9C:51:77:6B:FF:77
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:04:16:96:4b:ce:ad:8a:19:72:d0:02:de:38:d8:0f:ad:8a:
3f:25:03:b9:37:41:52:12:72:71:e4:d4:14:48:65:60:27:f3:
00:1b:7d:3a:b4:66:b6:a9:49:46:4c:13:ae:07:14:01:47:2e:
9f:3a:a6:b8:8d:9e:09:0f:d4:47:17:30:28:cb:e6:6b:40:ff:
99:c2:03:bf:40:c2:ae:cf:75:e3:42:d3:ed:bf:84:9a:95:9c:
50:5f:be:44:a6:0e:a3:3e:d9:50:58:5b:53:e2:1c:bb:5e:e9:
f1:3b:db:04:90:55:c0:d2:49:fb:0c:7a:ad:1b:11:f9:26:c9:
90:df:70:53:51:18:16:e5:e7:c5:8b:e8:90:88:bf:8a:62:e3:
78:dc:e5:b4:27:ff:c5:a7:b3:d9:41:ac:6b:f9:b1:20:fc:6b:
63:86:8d:a4:de:3b:6b:16:42:93:f0:aa:c2:72:db:71:40:a8:
c5:18:ee:14:32:b6:ef:ce:4d:4f:00:71:ac:ea:42:25:91:40:
72:92:36:1d:a3:50:91:e2:21:75:38:d1:17:a5:15:6d:5a:a0:
bc:5f:e3:fd:64:ea:6d:db:5e:d0:1c:00:a5:26:75:57:58:57:
45:fd:83:84:9e:63:3c:0b:71:6f:13:c1:d0:99:84:e9:90:9e:
2e:c9:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:40 2026 by rpki-client