Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: eTjMd0qAD22yUV5bFNVsQmmvNIcK/gQrTIdVuUxKSdI=
Subject key identifier: 12:C1:8F:8F:56:91:02:13:9C:A3:4B:8C:5D:74:EE:CC:EB:B3:77:22
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019D29CE234DA0B082C380DF139B9829C65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0838
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: nT7EgaL57VWGu0UnQ8QOd4Sq9Bpk2JlBkP92PsmHytc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:23:4d:a0:b0:82:c3:80:df:13:9b:98:29:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=12c18f8f569102139ca34b8c5d74eeccebb37722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:69:7d:b5:b7:b2:0b:3e:da:3d:4a:23:4c:c9:
d4:fa:49:69:17:25:38:3e:bd:f2:23:5d:39:41:9a:
1b:44:09:70:b0:60:9f:8b:bc:6b:58:02:19:d9:84:
47:33:a4:22:c3:93:8d:7a:ae:1e:5d:40:82:d3:ed:
96:ac:a2:95:fd:35:4a:99:03:d0:fd:86:7e:cf:06:
b3:f2:0f:c0:f9:38:00:bc:48:9f:b2:6e:14:a4:be:
8c:90:88:6f:c3:e6:cb:88:a5:6a:5a:8b:a4:23:ee:
1a:d4:43:a2:3e:9d:38:cb:75:49:c3:8c:8e:94:34:
5c:0a:98:2b:2e:0d:06:e0:2b:a5:2f:1b:aa:e6:6d:
0f:2a:5e:e8:4e:5d:bf:7d:fc:16:d1:f8:81:63:02:
c1:96:09:7a:ea:f6:5d:c2:7a:e4:46:4d:7f:d3:ed:
8f:41:e1:57:be:4c:ae:3b:01:8a:fe:7a:37:32:f6:
17:05:57:7c:20:0d:6e:80:d4:16:8a:0c:7e:f7:be:
7d:52:96:51:6d:6b:65:9d:11:87:ec:b9:d5:8c:6a:
79:05:9b:5c:e0:92:fe:fb:95:42:b6:0e:e0:e7:8c:
a4:0b:85:1d:41:de:55:76:a7:b1:19:3a:c4:0b:f1:
db:73:b3:29:5d:7b:6f:df:fa:88:06:53:b8:b2:91:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:8F:8F:56:91:02:13:9C:A3:4B:8C:5D:74:EE:CC:EB:B3:77:22
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fc:08:3f:9d:47:ab:bd:c4:d1:d2:ae:9e:66:30:60:6e:29:
a1:8e:20:ee:8f:20:5c:c0:ac:75:c6:4d:40:d9:2e:15:b1:f8:
f8:92:38:7d:66:34:72:f3:2a:30:b3:0d:32:74:57:06:1f:46:
81:3e:4f:5e:9e:3f:15:99:d3:15:ac:60:1f:6c:7a:3f:9c:29:
de:6f:d7:cd:50:87:23:e8:5e:36:5b:03:62:f3:3c:a8:4f:d2:
84:61:5d:6a:75:62:e2:0e:92:ae:9a:d4:3f:15:f7:7e:9a:2a:
6f:3d:50:fe:82:d8:e6:fb:d2:1b:d9:6d:be:b7:e5:33:d6:5d:
5f:ee:be:59:b4:37:f8:f5:12:b5:a5:b0:12:9a:4a:9a:40:54:
b6:1f:6a:f3:47:5b:a8:23:f1:3a:45:46:80:c0:70:6e:4f:75:
9e:a2:85:f7:67:8f:96:cf:56:46:69:e2:7e:5c:7a:b6:42:52:
e8:c6:6a:d4:17:0b:38:c2:17:42:57:26:5d:3e:ab:33:4d:19:
9f:d4:86:0c:99:a3:a8:74:3f:78:08:3b:c7:00:bd:fc:45:f3:
8e:0c:68:c3:f2:48:fd:98:23:6b:69:c8:0f:67:6c:ed:98:f1:
74:e2:93:ef:aa:b1:00:5f:17:a3:d5:33:36:26:a5:94:35:96:
2a:e2:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:57 2026 by rpki-client