Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: YlPLX/3IPdSUFiobhHdS1NDbOcnyZys0IF/i7yJbRsA=
Subject key identifier: D6:20:6A:D7:3A:8C:68:3D:B8:D7:99:24:63:8A:29:51:AA:A9:4A:8E
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019D29CE49492EFCA1B9F8F1A0224A97F411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0E7E
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: Rk6U7RO4py6S9WklbeaSGCJKXHU.roa (hash: HzF7QsaRDlON7L9Y+E6XwRt1hlrnQ4o9Z6yQvpu9Qcg=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: c/paWusCiEE1mEMuCStlHZRLY1u6jy9nsBCUYqeFEQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:49:49:2e:fc:a1:b9:f8:f1:a0:22:4a:97:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=d6206ad73a8c683db8d79924638a2951aaa94a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:b8:ec:70:98:85:bc:de:52:0f:3e:ca:86:
1b:f1:71:d0:32:67:2f:34:d6:11:4a:09:12:f9:7a:
2a:26:93:99:4f:ae:b5:80:73:59:a6:d9:73:84:9e:
19:59:bc:c5:2d:12:c3:49:10:ca:d7:b9:28:eb:64:
be:47:8d:22:12:c6:3a:2e:99:0b:fc:1c:6c:a8:7c:
36:31:06:74:d7:69:13:90:59:3a:d1:6e:01:0e:1b:
74:39:8d:1e:1e:b2:b0:d1:f7:47:80:88:e5:0a:7e:
02:1f:f6:d7:66:66:09:77:e9:5c:0e:e3:b4:12:be:
f4:da:f6:6b:2d:b4:e6:ad:c8:30:78:39:cb:c7:b3:
e9:8a:5f:a9:5e:db:06:55:57:da:6c:c3:ba:9b:99:
63:2a:0c:9e:99:fb:4a:25:aa:02:6d:7c:a5:f9:a3:
74:9c:0b:bd:ff:e8:a1:cf:d4:07:c2:bb:f1:46:42:
35:d5:c4:49:5d:18:11:84:a1:d2:ec:48:a2:92:60:
87:8c:10:f3:cd:1c:b0:c8:3d:8e:3b:b7:f3:23:60:
12:54:4c:7d:b9:97:56:a9:eb:3f:53:fd:3c:46:03:
b7:07:4b:4f:f8:90:39:d6:2a:53:75:cb:af:bc:f8:
e4:ee:26:07:9a:64:76:f3:8e:55:51:12:b8:43:5f:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:6A:D7:3A:8C:68:3D:B8:D7:99:24:63:8A:29:51:AA:A9:4A:8E
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:79:ac:ff:3b:45:c7:31:e3:af:cc:3c:a1:16:dd:3c:0e:
53:3e:43:f3:9d:62:ac:c7:c5:1a:fd:cf:8a:fc:09:f7:bb:ad:
39:eb:6c:9b:ca:31:ef:35:52:5d:5a:08:c4:15:19:41:bd:fb:
a5:f6:61:95:bc:b4:c5:d9:c5:2c:e5:2e:c8:70:c0:90:c1:bf:
f4:dd:b0:0d:cf:16:78:ea:70:ca:b4:06:17:a1:2e:3c:ca:48:
53:3d:c1:48:97:9a:90:b9:d8:b0:5f:90:e5:ed:b3:05:23:0e:
cd:a9:94:ad:01:09:8c:28:91:5c:5f:c1:80:91:7d:4f:0c:2b:
92:dc:75:06:29:92:e9:a8:eb:b7:f3:c2:9f:c1:c8:c7:26:1f:
42:95:1f:b7:a4:80:ac:dc:f1:a9:16:1c:97:8b:6f:3a:39:a5:
7b:32:e0:cf:3f:d1:e2:0e:95:ab:1c:15:6b:96:c0:a4:80:3c:
75:75:c7:03:eb:03:5c:1c:9d:83:81:93:50:7c:c6:3a:1f:4b:
d5:24:e2:97:c9:c3:40:f4:3b:54:a7:44:1d:98:55:f1:23:07:
7a:43:b9:4d:0b:0e:66:35:7b:68:b3:ac:3c:e8:f3:12:8e:62:
13:3c:66:b2:c2:1f:87:96:c6:2a:a5:1d:35:a8:43:7f:19:df:
2c:56:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:59 2026 by rpki-client