Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: Zu/rzh4HYN66lou3XpBVlgdLk+sn5+D1hyWI9xdcSS4=
Subject key identifier: D3:8E:07:14:5C:C0:5F:D4:ED:E6:63:2C:28:5B:08:64:DD:9C:DD:2F
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019D37C0BB020DEF2580BAA8C4A20A74D079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: 1FToxn8IaILCIZFR28ymjf3izQw.roa (hash: n66yLkILpzoSdA5/n4UY3B4CIambhY+CnJWm7sQK/vQ=)
2: DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa (hash: hlLBSZz49suArVA71e6KdvynwmbN3saCnQaMyNCoI1M=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: PmCfbngvqqfoZIKZsWqOLYTAqPY9dWKtUui050WLnBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bb:02:0d:ef:25:80:ba:a8:c4:a2:0a:74:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=d38e07145cc05fd4ede6632c285b0864dd9cdd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:5c:eb:6a:8f:4f:14:75:e8:80:cd:c7:fd:
a6:37:48:14:47:88:1f:95:20:1e:4e:fd:d9:d8:ce:
61:33:44:fa:1e:39:07:15:b0:53:23:9e:b3:ca:59:
da:73:be:c0:a6:ca:75:92:d7:8a:fa:24:fe:d1:6c:
a6:79:6f:a7:39:2f:8f:78:97:5d:0d:64:13:9a:3c:
cc:d3:f3:52:cb:e8:0a:3f:9d:17:7b:69:43:2d:fd:
e9:7c:76:03:8d:1e:f9:ec:4b:93:13:0b:0b:d2:a0:
18:93:20:cc:b7:68:fe:a7:d6:00:96:a6:de:5b:77:
a5:d4:51:59:56:da:c7:89:ab:93:df:5f:c2:76:5a:
c9:00:93:a8:c8:b1:12:f2:d4:4e:31:0d:82:7f:36:
5c:4c:2a:56:74:30:a9:c6:4d:f5:04:17:ae:03:45:
b0:39:b5:f7:41:1e:dd:30:72:20:18:6e:2e:de:26:
60:9d:b3:26:ea:02:46:63:cd:4d:c2:73:6c:b6:f5:
cf:73:ee:3c:63:6c:a7:ca:74:e3:1a:6a:a6:6f:e5:
69:c2:d4:86:d6:2f:52:f2:7c:48:40:a4:84:36:22:
62:2d:71:b1:d8:12:83:c7:67:5b:7c:ca:2e:7c:e9:
82:8e:f9:dc:29:50:51:19:8e:fe:8d:b4:72:8f:73:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:07:14:5C:C0:5F:D4:ED:E6:63:2C:28:5B:08:64:DD:9C:DD:2F
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:44:12:3a:18:5e:7e:7a:88:de:6c:44:6f:a7:c7:5e:fa:
1c:1b:0f:b0:c0:4b:ee:b5:72:38:48:e7:c5:0c:76:77:b2:d4:
ee:59:37:8c:37:22:8f:86:d3:da:48:37:ea:77:e3:bd:2a:05:
b7:27:48:99:ed:1f:56:6a:14:a5:e0:27:c4:3f:c9:d4:f2:b4:
2f:56:1b:c6:33:82:db:f9:03:36:1f:c1:89:51:9f:a0:2d:7b:
5c:ba:e7:6f:b3:5b:17:40:bf:68:92:b4:ce:55:71:e9:00:cd:
bd:16:d8:9d:cd:a2:85:30:9e:de:72:8b:fc:50:a0:64:f2:e5:
2d:39:94:1f:2e:61:8c:ac:a6:0b:aa:0f:38:4d:6e:ca:f2:c2:
f9:25:3c:fb:7e:a4:cc:1e:94:b8:ce:22:9d:f4:25:fc:0f:f8:
79:26:30:20:18:6b:fe:35:58:5d:50:c1:72:8d:f2:45:a4:0f:
56:b0:93:25:75:39:c8:96:fa:ac:89:72:9b:0c:9b:a5:92:29:
e5:04:a6:2a:ad:99:c6:44:62:86:9e:2c:be:f9:7a:20:56:91:
fb:30:c7:7d:1d:38:70:e1:5b:a2:b1:60:d7:c2:c4:73:f9:0b:
dc:02:ae:dd:af:27:69:60:27:2c:2b:84:91:2b:64:64:d8:d9:
ff:eb:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:43 2026 by rpki-client