Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: 49QrR7KyI/ByNoOBsa4XlFGLxxKK/8xpVNHI/0EIj/A=
Subject key identifier: 78:84:C4:61:D9:34:BF:2C:95:20:EA:A9:76:37:22:2D:9C:32:BD:31
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019D284D3299822CAF1C973F2DA958D39D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0712
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: TejNYuPu54nKV6wKTYuBIN85qOJjTHd4OxmoNvmYuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:32:99:82:2c:af:1c:97:3f:2d:a9:58:d3:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=7884c461d934bf2c9520eaa97637222d9c32bd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:a9:42:a5:c1:c7:b2:f5:80:c3:a4:29:cf:
a7:a3:d7:a2:a4:1a:c7:d6:61:e7:70:fc:53:ad:97:
52:a0:39:f9:06:4f:81:f6:3c:62:ee:a2:77:94:f7:
2c:c3:9c:34:38:6c:79:e6:18:a8:1b:1f:84:06:98:
80:65:91:4d:2a:81:97:8a:20:6c:05:ba:0c:3f:80:
58:88:23:e3:21:dc:a4:17:84:d7:50:d1:32:dd:d8:
f8:f6:2d:b9:1d:89:06:0d:72:67:09:22:6b:ae:c7:
bd:46:34:8d:ac:fe:b1:ce:65:3d:a4:a5:f0:53:37:
15:6d:1d:f4:d5:76:10:fa:f4:f6:36:b3:e2:ee:90:
b7:fa:ff:e1:7d:f9:0c:af:dd:7e:ea:f8:31:b4:01:
6f:fe:b6:a9:ae:eb:bc:06:43:96:2e:38:83:a3:a3:
1d:34:cd:13:8b:59:ad:3e:0e:e7:10:fb:18:2b:1d:
7b:c4:f1:01:8d:5e:4d:5c:68:2f:18:4b:9f:f5:94:
2d:34:fa:80:ba:31:96:6e:62:f2:d2:58:33:a2:1f:
78:29:9e:da:fb:dc:f8:f6:c8:20:d7:70:02:53:b7:
82:36:1a:31:6e:26:d0:6c:e5:d8:dd:84:f6:8b:35:
9b:21:ab:c9:6d:f2:f2:d8:fa:ec:13:5e:23:37:f6:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:C4:61:D9:34:BF:2C:95:20:EA:A9:76:37:22:2D:9C:32:BD:31
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:0a:dc:ef:6d:06:99:61:c1:8c:5f:06:cc:a0:6b:02:4f:
b4:4e:ca:45:03:ea:3e:c0:30:f4:1f:01:1f:b7:2c:b1:a0:1e:
65:d2:7c:12:76:23:ab:8b:4b:ea:1a:5b:b4:bf:5d:48:e1:9e:
06:98:28:37:60:56:fa:e8:32:b8:ff:1d:ed:d1:a2:03:68:13:
5b:48:bf:b6:51:c3:16:62:9a:a4:2a:1d:6b:78:72:1f:f6:22:
7c:92:7e:d0:67:df:2f:9d:41:c2:70:3d:3d:49:fb:12:c1:a5:
e6:3a:35:1d:2f:82:e3:1e:7f:b4:23:29:a1:b3:92:a8:87:e8:
84:07:07:7d:ac:a5:b6:bb:43:1c:c5:d5:86:37:60:1a:5b:7c:
ac:92:40:30:7d:34:b9:12:b7:45:61:c6:46:42:fb:c4:78:6c:
38:43:76:cf:06:8c:88:42:63:17:51:6c:68:c9:83:03:91:07:
2d:2c:19:0d:76:b6:1d:8f:e2:d8:de:70:c8:b4:b2:76:59:f9:
79:86:ab:4b:ab:49:08:10:48:a4:35:47:4b:5b:9f:f2:37:56:
c0:09:09:3f:75:ae:4d:d7:f4:fd:32:2a:05:f6:12:12:e8:9b:
74:84:47:db:e0:e1:f9:0f:d8:c2:e0:88:dd:ea:e1:dd:6a:8d:
07:0d:88:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:35 2026 by rpki-client