Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: CFADonzSSbvjcxlrU5Au6MuPmeFuvW9Q7TQurjOtTOg=
Subject key identifier: 57:5D:4F:6B:6E:D0:8F:83:5B:82:30:8A:27:DF:8F:69:F5:58:85:83
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 019D29977E81DAF29B28D1B8371A1E73140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 1205
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (hash: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: 23X26DIKsJ7HPa8fYwDK7u1GI/0yf6nI6KRDzWapCYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7e:81:da:f2:9b:28:d1:b8:37:1a:1e:73:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=575d4f6b6ed08f835b82308a27df8f69f5588583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:f0:06:7d:f7:7a:b7:03:10:e1:1e:c5:cc:
c9:81:d4:45:2b:af:2e:65:2e:56:e3:4b:13:76:4f:
a1:a4:f8:ec:a6:26:1d:39:52:cb:2b:93:a4:f2:d6:
a5:96:5d:eb:9f:6b:10:03:4b:71:d5:9d:58:9c:95:
59:b4:8d:f6:68:e0:e7:b8:06:60:d5:c4:9a:15:9d:
c5:8b:05:de:53:c6:86:0d:89:e2:42:0d:1e:8f:11:
09:80:cc:73:56:46:ae:2d:10:1d:6b:50:ab:d0:01:
aa:8e:94:2f:a0:f7:4f:0f:5e:7a:03:a1:0f:12:b4:
8d:b0:c3:68:7a:ae:8c:2a:a1:f6:03:ea:c2:4d:16:
56:53:4c:c3:eb:d1:32:d0:bb:7d:26:ee:8e:64:35:
d2:bc:27:70:45:7c:3e:da:3c:20:20:76:c5:d6:fc:
6c:24:6e:8a:d4:b6:e3:fa:e5:80:3b:cc:07:54:d3:
bf:84:08:5c:ee:5c:41:d1:13:69:3b:99:3c:e9:7a:
bc:55:f5:ea:10:df:b7:a7:4f:39:99:a2:54:c7:de:
2c:ca:cf:d8:fc:c7:0c:41:1d:ae:88:c0:11:a0:ff:
a5:1c:80:81:44:21:01:f1:af:67:71:79:52:48:61:
f2:b4:a7:b6:87:c8:74:32:1f:4d:d9:dd:67:5c:dd:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:4F:6B:6E:D0:8F:83:5B:82:30:8A:27:DF:8F:69:F5:58:85:83
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:00:8d:13:d0:fa:d4:f2:9b:f0:81:35:7b:b3:59:17:0e:
1c:ce:4b:a8:6b:f5:69:85:05:1c:b4:df:cb:ee:06:fd:0e:60:
5a:3b:16:19:58:a9:72:b7:f0:b6:9c:97:7e:13:c4:d0:35:0e:
14:db:c8:4d:7b:fa:a0:45:6f:f0:82:86:4c:96:7e:84:cd:7c:
c3:3a:37:ba:4c:59:12:5e:a0:3f:e3:a2:99:32:c0:c5:e4:33:
71:af:cb:17:6d:05:2e:11:4e:bf:11:f5:6b:72:39:67:20:a8:
6b:24:8f:28:9e:d6:91:e2:60:88:15:d3:01:ac:b4:30:5e:a2:
5f:14:49:b2:61:e5:3b:57:51:88:56:50:76:7d:14:82:72:e0:
4a:48:8a:6d:34:64:e0:3d:e0:1c:d6:22:35:69:fc:a1:77:59:
03:96:4e:bf:fa:9d:fc:3e:c3:5e:bd:ce:ef:76:b6:4c:02:b4:
3e:c6:b3:73:ba:8a:36:c2:2e:a9:ef:c6:6e:bf:b5:3c:9d:01:
3d:9a:a1:35:24:e8:f6:0d:ab:54:f8:c3:f4:e7:95:e6:4c:9b:
7a:22:4d:79:26:72:c8:6b:45:0f:4e:4b:7a:3f:76:56:2e:42:
79:62:52:37:0c:11:b7:6b:8b:b9:15:ac:2b:c1:27:4a:11:d5:
73:ee:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:14 2026 by rpki-client