Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: tGk0mUysKgPLuJd90FdSxMfRxp7Ty8CSRRnC5vQkxgo=
Subject key identifier: 45:15:BE:11:2E:40:77:B4:12:6C:AE:04:20:90:3D:13:54:54:FB:41
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 019D2A7279C5F0087593E4DB82CB0CA0FA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 1137
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: 7Akyr4L8PPOMGT1dDLYf8FO7hkCedPInSk38KwfdxbM=)
2: cMLXGA_6lhirTspoM9xrh1-1Z2c.roa (hash: tb3jenRFfrVxLNPvDmSsDeJNfF95+Hv8OEEMT0bRA9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:79:c5:f0:08:75:93:e4:db:82:cb:0c:a0:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=4515be112e4077b4126cae0420903d135454fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:99:36:8b:d3:38:97:3b:d5:aa:ca:8c:43:
69:aa:e9:0f:fa:91:2c:53:9c:53:cf:59:72:1f:40:
d9:46:e0:ac:59:7e:4d:88:7d:01:75:cb:b6:b7:3c:
61:1f:46:ce:a0:75:e5:f8:e1:c1:25:02:b6:f1:1e:
71:68:92:91:02:bd:52:ea:58:65:67:c3:cf:70:94:
bb:01:02:e4:7c:93:16:77:21:6d:ed:f2:e6:2a:d4:
c0:2d:db:59:93:b2:cc:1f:cb:7e:e1:1a:b8:69:a6:
e0:0c:c3:1d:cc:d5:28:9d:d1:3a:4d:47:5d:63:90:
4f:c1:39:b2:f6:27:65:59:f0:35:8b:e2:c8:3d:18:
d1:e5:7c:f5:a3:5f:e5:7c:21:fa:24:43:92:f1:6c:
d3:c4:c0:ab:4e:db:b7:6a:c1:4e:37:c7:3b:e7:f8:
fb:57:98:8b:bf:2a:cb:d6:02:1f:d7:05:cb:df:4f:
5e:b5:a0:48:28:40:7a:8e:f1:41:7d:bd:e4:d9:8b:
05:15:bb:b7:cd:6b:9f:03:b6:27:75:6c:24:32:30:
92:2a:9d:77:23:fe:31:e9:b9:4e:14:17:d6:47:19:
0b:da:5d:c5:9f:6f:f0:37:f2:e0:b5:e3:c4:d4:ab:
f0:1a:0d:f3:d8:ee:95:53:cb:cc:3e:16:71:88:2f:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:BE:11:2E:40:77:B4:12:6C:AE:04:20:90:3D:13:54:54:FB:41
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:76:3d:a7:91:3f:99:0f:9f:23:6d:a0:0a:92:90:be:f8:
e2:0b:f4:74:14:cb:bc:c4:fa:69:87:2c:dd:f9:92:15:e1:96:
7a:2a:64:58:26:49:3b:0e:fa:2a:aa:28:13:b0:0f:ef:cb:1f:
f7:34:15:6f:2f:f6:5a:a2:f0:62:aa:5e:36:b8:22:ee:69:b0:
2f:30:fb:23:d1:0a:ad:c7:3e:71:40:95:1c:c9:83:2a:01:d4:
b3:b9:f5:e9:ce:5e:87:d2:fa:1a:e2:72:bb:db:38:7f:27:a0:
1e:7d:29:c2:ed:91:2e:55:c2:aa:58:66:d2:78:ad:be:79:d2:
26:f5:15:4a:4c:d2:2d:a8:fd:60:f5:ca:1d:37:55:97:fc:9e:
bc:8e:fd:94:7c:23:97:90:0b:49:1d:8a:0a:79:1a:bd:a2:3c:
44:93:32:24:01:83:d6:64:c9:00:95:5a:3e:98:0a:28:4b:b2:
04:8e:03:14:b7:84:24:37:2a:4d:46:c7:ae:f7:a1:77:58:b7:
9e:1b:35:f2:b8:0c:f0:7f:a7:a8:4b:9c:36:f7:63:30:7a:a2:
00:4c:d6:22:30:56:dd:b2:8c:fa:f2:41:d2:50:8c:76:50:31:
0c:af:bb:86:75:3b:60:2d:a5:e8:3e:f1:9c:7c:7b:65:7c:87:
68:a7:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:06 2026 by rpki-client