Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: dUwZs/xewOcMyKzGytGGUVRM/BGLrdRwqXjgJMA0UAg=
Subject key identifier: 74:76:D4:F1:FE:43:CC:2D:54:40:15:C2:4E:8D:7F:33:03:79:A6:5C
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 019D265F4CBB9600D6DC70AD577A0649BDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:01:12 +0000
Manifest this update: Wed 25 Mar 2026 19:01:12 +0000
Manifest next update: Thu 26 Mar 2026 19:01:12 +0000
Files and hashes: 1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=)
2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: pRp1SpRBs2zjVa23UZp6QNtZQEpmAzOdoRb0A0kws3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4c:bb:96:00:d6:dc:70:ad:57:7a:06:49:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Mar 25 19:01:12 2026 GMT
Not After : Mar 26 19:01:12 2026 GMT
Subject: CN=7476d4f1fe43cc2d544015c24e8d7f330379a65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:c9:98:98:76:b1:cc:55:46:85:cb:a1:f2:
8b:ba:cb:19:70:cc:e9:fb:f7:55:81:1f:87:8d:dc:
bf:99:17:34:2e:76:86:23:0d:2a:85:ba:51:54:bd:
a9:5a:09:66:e3:bc:a6:19:b8:c1:0a:57:87:97:ce:
72:1c:16:8c:cd:1f:d0:10:a9:fc:26:02:e2:b6:06:
ea:f6:51:69:44:cb:c9:09:ad:b3:07:b4:a7:ab:81:
ad:22:ae:e3:b3:cf:d9:ff:b9:34:9d:14:e4:60:74:
99:d8:e6:43:8c:32:88:2a:36:1f:a5:59:be:ee:ca:
63:4d:79:f4:3c:70:87:30:46:84:86:82:5d:c8:1f:
35:86:68:d8:19:70:cf:a0:dc:5c:8a:41:b0:31:77:
b5:59:7f:10:a8:8c:24:51:e1:77:af:e5:22:39:4f:
57:aa:6d:08:59:ca:86:95:d1:dc:42:c9:95:3d:cb:
f7:c4:62:8f:14:a8:74:dc:f4:ad:06:4d:86:38:35:
5a:23:07:ae:13:cb:0b:2b:67:5b:73:e6:81:6f:85:
60:9a:e0:44:61:72:f8:50:58:cf:01:de:c9:45:d3:
46:59:84:b0:cb:34:bd:63:7d:d2:be:29:6e:32:38:
15:02:65:6e:91:4e:2f:65:31:de:34:59:9d:21:d7:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:D4:F1:FE:43:CC:2D:54:40:15:C2:4E:8D:7F:33:03:79:A6:5C
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:94:4b:08:95:5a:5b:c7:be:95:00:35:b3:d6:79:f4:d7:40:
ca:84:56:31:52:0f:12:a3:23:7e:e7:cd:ba:65:52:61:a5:90:
fa:2c:f2:b2:81:04:8d:c2:3b:4d:04:ac:94:8e:6a:20:42:a9:
34:ca:e2:e6:01:71:59:17:f6:bc:3a:fc:3c:8c:e7:01:5e:08:
25:04:45:18:66:94:b5:5a:eb:1f:81:63:42:f8:2b:87:e9:4c:
83:69:62:05:b1:bd:17:b4:fe:c4:2b:28:32:4a:42:5f:c9:e2:
3c:dd:ca:5b:a2:38:9b:eb:27:4b:21:f2:77:e7:7d:5c:f1:71:
4d:5d:41:5c:66:b5:a7:31:e2:dc:cd:fb:ad:99:e4:52:40:b1:
69:e1:1d:e3:ce:30:77:57:db:33:86:8d:f5:e3:5d:52:54:c1:
d5:dd:cc:8a:27:68:30:e7:b4:ae:80:52:2e:84:cb:88:32:e8:
60:b6:c9:04:8a:9b:53:52:98:4d:1c:df:f8:82:2b:d3:99:03:
5e:a7:b3:3f:70:cf:a0:69:73:03:fe:b8:2a:f3:e1:b8:d2:9a:
c8:bf:8d:71:13:6f:48:04:4c:e2:61:c1:7c:ef:70:0b:a2:11:
5c:fe:52:26:35:19:24:86:99:d5:98:99:c4:4f:ba:69:db:2f:
46:da:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:22 2026 by rpki-client