Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: 80CzAK2CX5Hc+sORGzXzjEBv4iyoLwudbrm/1cJyjYM=
Subject key identifier: 03:7B:D3:CB:72:D1:F2:28:AD:1F:04:06:D3:DE:01:4C:57:DC:55:AC
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 019D281660B50E42F6A9402461F6185A7195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 1596
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: Dq-r-Yg7y34zz0AqTh3QSsCtI0M.roa (hash: BCMsstp2glA617fVzScsLywH8yZ2gjhq0JFm8FjVqK0=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: fO2F4n5sLVRh5VHSwzRZOwr/LgYn5RgFi8cmhEbbY74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:60:b5:0e:42:f6:a9:40:24:61:f6:18:5a:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=037bd3cb72d1f228ad1f0406d3de014c57dc55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:09:c9:22:cb:50:1b:d2:24:a4:ec:aa:9f:
5f:66:40:fd:25:a7:79:e9:9e:ef:76:ba:d2:7d:c5:
bf:6c:6c:e5:ae:93:12:ba:ca:ad:c8:9a:c7:7d:d0:
af:d2:97:e7:f9:4d:8f:d9:72:31:a7:7d:14:71:5e:
78:13:fb:65:36:e5:13:58:ec:2c:a7:84:0b:0c:7e:
2c:29:b0:b8:81:2a:d3:f8:6d:af:e6:d0:60:8b:01:
24:32:e5:41:9b:ed:77:83:85:40:e1:75:df:ca:14:
1d:4f:47:a9:66:ca:50:7c:bc:ab:55:1e:ee:a1:42:
68:7b:ed:06:2c:7d:f6:6e:22:74:2b:84:6d:9f:55:
03:35:35:74:90:25:d8:b9:f4:1f:b5:e5:4d:52:ab:
6f:9f:80:21:9c:e1:43:c7:0d:1c:60:03:80:b0:d9:
d7:1d:6f:4c:1d:cd:a9:49:88:55:3d:dd:6a:c3:30:
fc:96:99:4d:83:4b:85:54:9b:ed:04:f0:6f:30:2e:
39:76:71:18:fa:f3:bd:eb:73:00:11:6a:45:1c:53:
bc:b0:7b:73:4c:06:e2:84:22:35:b2:05:49:b4:bb:
c6:0d:75:02:d6:36:e3:fd:eb:e3:37:99:da:b7:10:
27:79:89:6f:47:b2:e9:3e:cc:d8:f1:c0:49:58:d5:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:D3:CB:72:D1:F2:28:AD:1F:04:06:D3:DE:01:4C:57:DC:55:AC
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:40:b3:4c:a4:e9:12:02:92:78:01:81:3c:a7:6a:80:6d:5c:
a6:c5:07:6f:ba:e2:0a:7d:39:1d:d6:74:6c:80:d1:f7:19:83:
94:af:a4:66:3a:a5:2f:79:1b:b5:79:4b:9f:66:ed:bd:2f:a5:
79:e1:20:64:38:d5:fb:b8:f8:7e:87:b5:08:c3:4a:7d:09:19:
b0:e2:21:2c:58:fc:59:76:85:9c:20:46:da:3a:92:57:b8:1b:
d2:58:65:a2:6d:f9:d1:f8:9d:8c:35:c9:9c:83:6c:8e:4d:0b:
c2:4c:4d:d9:92:c3:33:20:a5:45:21:1c:c5:94:7b:5d:79:19:
9c:43:89:23:de:a1:e2:a3:39:13:54:35:cb:de:d3:cb:c8:af:
e0:86:be:7b:ac:ca:f9:8f:32:ee:3a:40:5a:6f:47:bf:55:2b:
14:b3:0e:da:a8:f0:3e:4b:43:3a:1a:13:52:64:94:10:32:13:
a3:98:43:71:85:af:56:96:99:bb:9a:89:0a:bb:df:f4:6c:7a:
08:0f:a1:09:73:02:3f:f2:88:a6:d4:d0:df:0a:2e:75:f5:1f:
89:ce:53:6a:ba:1f:f7:71:c4:36:a6:9b:52:f6:fd:0c:98:fa:
c3:d0:d0:cd:16:0e:70:10:b3:86:e4:4e:35:8a:18:7f:e2:1b:
51:c6:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:20 2026 by rpki-client