Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: 4aDlf2Z4Gg7E+6VIBKZjWWxtdVKjY6wHbMKAzEj7ehs=
Subject key identifier: E5:78:CC:45:7F:C3:B2:84:36:A2:C5:8F:0F:B3:D4:56:9E:1D:95:EC
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019D2628310C8A2375EBCF8416A5355C29CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0DD5
Signing time: Wed 25 Mar 2026 18:01:01 +0000
Manifest this update: Wed 25 Mar 2026 18:01:01 +0000
Manifest next update: Thu 26 Mar 2026 18:01:01 +0000
Files and hashes: 1: O2gYXWLOZ1baGkkO6V4ffkZOf14.roa (hash: 0azU39AJWRQ9GwuVFR5XGckgzC3aJ2sgglAZkdjKoC0=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: HcUgMEOPqsdsJBeoCdy7PwgIOsUwODqFHgBVUplDlus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:31:0c:8a:23:75:eb:cf:84:16:a5:35:5c:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Mar 25 18:01:01 2026 GMT
Not After : Mar 26 18:01:01 2026 GMT
Subject: CN=e578cc457fc3b28436a2c58f0fb3d4569e1d95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:54:4c:79:fd:10:39:9e:c6:3d:22:b1:e2:
6f:e5:bc:2f:25:06:6a:ed:38:0d:60:a2:97:b2:6b:
ea:ee:91:9c:42:af:1a:65:54:42:a7:1a:23:83:9c:
18:6e:6e:ea:1c:73:a0:29:b7:e5:93:cd:99:49:4a:
39:36:db:76:62:5c:e5:19:9c:4c:f1:19:f3:70:86:
a1:e7:cf:a3:04:da:6e:58:25:8f:a7:ad:e8:8a:d6:
21:9e:01:be:af:e5:bd:c0:fc:80:35:05:93:8d:52:
b0:5d:d4:b9:b3:7f:68:50:88:96:8d:7d:0f:17:c4:
3d:eb:05:7e:83:b6:1c:c6:10:b6:54:4b:37:95:5a:
8b:34:45:48:af:c3:f1:0b:cf:c5:97:45:b7:40:fc:
5f:31:bd:15:ce:2d:7d:6a:66:4d:97:4c:3b:62:e8:
6c:6d:75:b2:62:18:00:d4:4a:66:f3:b5:58:03:a0:
09:66:92:44:a3:8f:59:5d:ba:c7:ad:9a:a9:c3:dd:
fc:36:e0:15:2b:d1:b5:16:f8:ab:95:3d:eb:c4:2f:
d7:e3:cb:cf:ba:e7:6c:77:ec:29:c7:33:4e:ed:e9:
b0:aa:64:24:d2:84:ff:de:0a:98:4e:08:da:51:0f:
97:05:8e:f1:c2:f1:ac:e5:35:19:ce:25:5d:f1:46:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:CC:45:7F:C3:B2:84:36:A2:C5:8F:0F:B3:D4:56:9E:1D:95:EC
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:90:34:dc:6f:6f:36:98:2f:ea:fd:1f:77:2f:85:26:34:93:
5d:d3:2f:2c:1b:0f:2d:81:e5:17:1f:de:fc:16:e8:2f:cf:df:
75:57:79:bb:ed:d3:92:25:88:c2:db:72:b3:f7:49:5b:6a:95:
62:42:d7:56:79:9a:3c:a2:6b:b5:2a:1c:b7:ed:ab:b2:24:bc:
e7:66:0c:cc:1d:7e:68:18:99:a1:b1:22:ed:8d:10:42:ab:1b:
44:bd:ed:b4:89:b6:93:3a:89:f6:d2:b5:c9:7b:31:ac:28:b4:
18:2b:a2:91:f0:df:48:d8:e4:fc:ff:4a:2b:f2:15:43:51:f8:
c6:58:c6:e1:68:40:66:49:55:91:2f:34:fa:77:30:af:b0:b1:
28:85:b7:9b:71:45:e9:42:47:2c:ab:dc:59:b6:fb:b5:58:c3:
46:12:0d:9d:6b:24:4e:a2:99:e4:87:2d:c3:7e:9a:da:5e:22:
85:7c:67:55:dd:4f:6c:d3:af:0a:d0:34:e3:29:62:96:57:73:
aa:fe:17:93:f2:e6:dc:c9:fa:25:85:f7:2f:5e:b9:ed:ef:e8:
5a:e4:d2:fc:0f:01:56:a4:19:f9:e9:49:b9:ef:c9:52:df:53:
e0:6a:11:4c:8c:cb:ad:95:31:1b:c9:0c:b2:a0:45:2f:6b:31:
3e:f9:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:36 2026 by rpki-client