Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
File: ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft (raw, json)
Hash identifier: YVLH0pwy8RVHvZ+yGz17i8NJzCODxEcBDgx+GtBNPBU=
Subject key identifier: 00:97:89:37:FB:C0:F8:2E:12:43:E3:39:F9:D5:AA:3C:62:C1:BE:37
Authority key identifier: 67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
Certificate issuer: /CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Certificate serial: 019D2695D708EE42C367545D410BF09B2AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
Manifest number: 9B
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl (hash: wuRTdCVJ/FskSHEtJbNMV20ayM6i3OPSwOVZPNfiGZI=)
2: pEVSsM5N7hm3Og32HXsDhg7pL1s.roa (hash: lkqZ6UHBpwmZdzRaUJjyZFpwtlAHVK4YjoLQTGnDAAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d7:08:ee:42:c3:67:54:5d:41:0b:f0:9b:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=00978937fbc0f82e1243e339f9d5aa3c62c1be37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:44:e9:57:47:de:54:2d:81:3b:74:82:46:
bf:4a:b0:50:4e:ad:45:99:bf:f0:7d:e2:4d:0e:fc:
c0:89:96:e2:d5:d6:a0:ad:db:83:09:28:d5:d3:34:
00:97:ff:d3:aa:13:f5:75:37:b8:5c:3d:d8:fe:d5:
fd:e6:3b:bd:99:4e:cb:a7:cc:d8:00:4d:a8:50:1e:
1d:02:7f:c7:22:b0:0b:9b:b6:54:ba:c9:4b:20:af:
af:3c:21:d1:cf:a1:1e:b4:e6:13:68:48:08:c3:fe:
7e:c4:e7:ba:09:7d:24:ad:a2:4b:53:37:94:c0:d3:
b2:3d:1b:c5:c9:2b:f3:eb:c5:f6:cf:83:ec:1a:28:
7f:19:47:7f:f3:ab:cb:a4:cf:0e:01:92:8b:04:29:
a7:37:65:0c:ce:57:af:41:0d:77:ce:08:fd:c7:6d:
33:ff:f6:a3:68:19:29:cd:0b:63:cd:6a:7c:e1:83:
d6:11:5d:57:3d:e0:92:8f:3c:6b:6a:bc:7b:80:2e:
dc:49:ec:c3:3f:a2:45:c5:be:c2:66:91:9a:ca:9b:
fa:b2:09:80:ed:2c:52:57:26:40:39:96:2b:e8:63:
d5:2c:dc:c1:8e:6f:26:4d:c5:3b:7a:c1:e9:9d:68:
79:2a:d3:f1:44:49:b9:ee:ca:0d:e2:27:4c:8b:ad:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:89:37:FB:C0:F8:2E:12:43:E3:39:F9:D5:AA:3C:62:C1:BE:37
X509v3 Authority Key Identifier:
keyid:67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2c:1b:99:b3:aa:fc:54:8c:3b:22:27:ef:5a:4a:f3:be:1d:
0c:84:c8:ba:69:bf:f5:05:26:1e:3d:0f:d3:17:7b:61:53:21:
3b:d7:5b:4a:cc:46:9a:42:11:bd:cc:77:71:8a:5f:6b:99:1c:
99:c1:5e:01:54:a7:bc:3b:f3:31:66:8e:cd:2b:68:b1:ff:92:
77:e4:74:38:4e:9c:32:6f:d9:99:ef:ec:69:4b:32:d8:3e:95:
d8:d0:01:a6:e9:d1:ba:70:fb:56:bc:b3:55:8f:8a:6b:6d:3d:
eb:40:98:aa:48:96:63:b6:43:ab:3c:8e:ba:6b:aa:c0:54:e2:
68:d4:c6:19:31:c4:8b:a8:a7:fa:01:ea:d1:e6:56:92:77:13:
ac:9c:2e:bd:ac:72:a8:91:59:63:91:f2:25:48:53:54:46:69:
27:d2:3b:27:1d:a3:9e:5e:e8:bc:12:31:e9:9a:9b:30:68:75:
d0:57:9e:35:cf:bd:21:08:2c:6d:35:91:a7:b2:35:58:a7:56:
c4:fc:da:33:8b:19:d9:2e:06:d3:ca:72:ae:66:89:51:1f:81:
05:43:de:b2:d5:b5:fc:01:53:b2:a3:b8:3a:4d:b9:56:50:a1:
37:d9:bd:7b:48:9e:ca:d9:2b:c1:a8:1b:0b:c2:b6:97:d4:eb:
a7:bf:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:50 2026 by rpki-client