Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: tADiB8hde5CI3/D6jsr30NyH6MIKe6d2HThidqnpDYA=
Subject key identifier: DC:C3:ED:79:66:8C:DE:DC:A9:D0:27:DD:0A:BC:F8:65:7B:07:71:96
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019D29CEBDA7E0C99169E3133613A052A19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 18D3
Signing time: Thu 26 Mar 2026 11:01:47 +0000
Manifest this update: Thu 26 Mar 2026 11:01:47 +0000
Manifest next update: Fri 27 Mar 2026 11:01:47 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: xtLKO7WZPcV2HIBYhzq5wyhpumhXnfxttWMpELyyR8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bd:a7:e0:c9:91:69:e3:13:36:13:a0:52:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 26 11:01:47 2026 GMT
Not After : Mar 27 11:01:47 2026 GMT
Subject: CN=dcc3ed79668cdedca9d027dd0abcf8657b077196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:64:a1:ea:1e:6f:f1:a3:c2:76:63:25:12:
4f:83:a3:f3:10:6e:fe:f7:41:9f:8b:92:4c:ff:1a:
c3:c3:60:80:67:51:c8:d1:ea:13:90:05:a9:60:30:
b1:52:ff:20:fc:dd:14:8b:8a:33:cf:05:18:52:c3:
e8:71:4e:e1:84:5e:63:1e:ff:88:46:b7:bd:7d:63:
32:82:50:c2:fd:28:d0:f0:d4:2a:b3:c2:7d:d5:e7:
7f:e6:4d:6a:4e:95:79:9a:14:2b:86:e1:8e:6f:87:
ee:52:9e:36:4c:95:9e:f8:26:10:3d:c0:b8:22:96:
66:6e:f9:60:f7:d4:56:8e:43:53:82:8e:fe:6b:16:
ef:7b:6d:d1:c3:2d:9e:d3:95:55:9c:c9:04:23:e5:
36:9d:f6:4f:61:fc:f5:cf:07:2c:23:b5:4f:62:2c:
86:f2:cf:60:1a:f7:c3:ba:86:6b:e6:24:9d:91:af:
5a:55:c5:c1:5a:b9:80:b8:3b:cf:9a:b6:2e:4f:ce:
ff:14:5a:5a:82:db:91:64:07:7d:64:7c:40:77:3e:
0a:35:f1:dc:42:9d:74:23:31:1b:b4:f1:ba:ee:0b:
c3:84:62:80:02:42:f2:27:2b:76:b8:98:63:b5:89:
bf:79:8f:75:a5:1c:5c:a9:56:3b:9a:09:95:07:ec:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:ED:79:66:8C:DE:DC:A9:D0:27:DD:0A:BC:F8:65:7B:07:71:96
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7c:27:ce:22:7b:c1:c1:0a:e3:f8:9d:b8:8e:f8:2a:a8:c8:
7b:32:2f:94:ba:b8:59:72:24:d0:c1:c3:d6:77:47:b5:63:46:
2b:c6:92:aa:2a:08:d5:4d:76:35:ca:f4:33:d2:61:95:d5:be:
f6:3f:03:a8:5a:1d:d1:68:e9:70:a4:9f:0d:c0:e8:d1:4a:80:
20:f8:c5:a2:b7:86:e9:87:74:9b:1c:25:0e:20:32:c0:82:4f:
35:0e:cc:52:ef:db:72:55:18:90:15:2a:9f:23:68:96:79:df:
84:20:78:2c:56:44:6d:ae:21:f5:d7:ff:5e:a2:17:77:a9:fb:
4b:0c:74:25:2f:62:25:37:c0:df:c0:86:de:2e:b3:7d:e4:d5:
2c:d7:2a:51:9c:ee:5b:0e:1c:ed:eb:fb:69:c2:a9:e8:6c:83:
20:14:52:93:69:56:c2:a9:11:53:e4:84:3a:a1:38:8a:be:23:
0b:77:bc:ec:de:66:d1:22:ba:4e:c2:b3:d8:26:d0:6f:23:0e:
7d:03:5d:cf:26:45:b6:bd:70:fa:a4:40:23:d8:b3:a3:61:57:
49:f6:4f:0e:87:ad:af:9d:a8:03:29:a3:d1:e9:c6:22:ea:d5:
81:70:bc:dd:d6:4c:a2:ba:65:de:a0:52:4b:7e:fb:78:eb:3e:
c8:9e:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:54 2026 by rpki-client