Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: imTpy1eQwhapTfb0wTaVcfudO0msY43NrcthkvhGlFw=
Subject key identifier: B7:C8:73:7D:48:BD:19:74:0A:B9:2A:3F:01:39:4C:CB:E0:C5:E3:EB
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019D2884AFD0EEEF65A85B5E5512C4BE2394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 134A
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: PT62C61CPHdRc2fJbDVDuVJRXj0.roa (hash: QoRuxKV7gftAIFcmKvKd/abqm9YeDR7k0cYgqnasPfc=)
2: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: p8L4lG7JxFJlYYQ4vGYjWZCmfhBl376g4FrXujWeARU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:af:d0:ee:ef:65:a8:5b:5e:55:12:c4:be:23:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=b7c8737d48bd19740ab92a3f01394ccbe0c5e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:82:60:bb:ef:c4:38:11:d0:4a:20:65:31:
76:a2:53:c4:08:6d:8d:e8:9b:cb:12:17:58:dd:c7:
e7:90:d2:c7:39:ad:63:5f:e7:63:f2:4a:84:af:e3:
43:09:de:3a:e9:56:b4:18:cc:d4:1c:cd:14:f7:10:
98:1d:1a:93:77:72:81:a1:13:bd:46:e1:8d:5a:d7:
84:c7:8c:fc:b8:07:80:0b:e1:9c:4f:cb:f3:91:e6:
5b:2c:79:6b:dc:f3:ae:0e:b3:17:ac:93:39:6d:92:
cb:0b:82:09:c8:cb:85:13:53:ad:db:19:7f:9d:dd:
7d:8f:2d:5a:88:ea:0e:be:56:55:f2:a2:6f:a9:6e:
77:75:77:6c:b9:72:89:04:4c:1f:0c:ff:00:18:52:
72:1e:e4:1b:02:05:0f:17:3d:a1:d5:b4:5d:e2:4e:
94:4e:b7:ca:f3:91:08:69:0a:f4:f9:a6:5b:0f:69:
0b:bf:55:c6:27:48:b1:61:90:ba:d7:aa:60:3c:0f:
57:94:67:eb:55:c6:2a:2d:24:c0:4f:bb:31:88:75:
f5:45:d2:de:c5:d1:17:fb:06:6a:57:29:6b:e8:d0:
83:5b:ac:fe:16:f9:ce:dd:fa:b9:47:ff:38:88:de:
34:d3:fe:3d:3f:00:43:2c:89:5f:a1:db:c1:fc:6a:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:73:7D:48:BD:19:74:0A:B9:2A:3F:01:39:4C:CB:E0:C5:E3:EB
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f2:fe:84:2c:5f:04:36:39:25:e9:1c:d0:5b:e2:ff:18:be:
28:08:2e:ce:40:e1:2e:69:56:5b:f2:92:1c:a8:5d:19:62:2a:
c6:23:dd:49:21:14:24:e3:27:87:2a:5b:bc:bb:4d:53:6c:2c:
82:26:38:c1:d2:85:94:a5:e7:94:a0:57:c7:ee:32:aa:6a:bb:
52:ab:40:0f:a0:09:5e:e9:9c:3f:8f:66:3f:ab:d3:fd:34:c5:
55:cd:0c:36:3f:08:54:67:68:44:c4:f5:2a:57:bd:2e:45:a3:
55:29:6c:8f:1f:ff:a4:f4:49:0f:b9:29:fc:6d:aa:21:0e:4b:
14:48:6f:4d:41:ee:71:1e:b2:a9:d6:af:c1:e2:7a:77:b5:78:
51:0d:11:62:34:1b:32:74:64:56:a2:c9:04:c6:90:90:d3:18:
13:d4:14:fa:5f:13:e3:f1:d8:36:cd:c3:47:3a:6d:6f:a4:36:
53:6e:3a:9d:27:45:c1:b0:f1:7d:b1:4b:d6:d4:1e:46:bb:6e:
b0:24:31:8c:8e:73:42:12:c7:06:d1:39:87:60:98:6f:59:a8:
be:78:80:78:56:06:b9:57:6e:d7:93:fc:18:3d:9f:95:5e:92:
85:bb:ac:53:be:49:13:41:fa:d0:84:d0:c9:8d:a8:44:cd:0f:
43:bb:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:55 2026 by rpki-client