Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: qzvCav3AF3yMd/NjgH86EZMRw7r8GflixETppX3O5g4=
Subject key identifier: 9F:38:07:D2:AE:77:EC:AD:48:BC:DE:15:8C:21:C7:3E:C0:74:F4:D4
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 019CB8F02CAE3247CCCD8BCAFB0217318FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 1042
Signing time: Wed 04 Mar 2026 13:01:13 +0000
Manifest this update: Wed 04 Mar 2026 13:01:13 +0000
Manifest next update: Thu 05 Mar 2026 13:01:13 +0000
Files and hashes: 1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: qXcuW46NUaioUNu/8wde7fMC+KPkTHUAQKVz7J12GRU=)
5: wK1thNBNOi3cJ4C_cLUUCpyCeDg.roa (hash: SYmUDWSPEMPAWWeOzzPct/i4L2oBAFG5xQ9Zk5i1914=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:2c:ae:32:47:cc:cd:8b:ca:fb:02:17:31:8f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Mar 4 13:01:13 2026 GMT
Not After : Mar 5 13:01:13 2026 GMT
Subject: CN=9f3807d2ae77ecad48bcde158c21c73ec074f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:74:e5:c0:51:c4:5f:27:e6:bf:89:78:36:
ce:e2:aa:cf:5f:07:46:49:1a:85:6e:fd:48:cf:fa:
b5:9c:7b:b5:a2:dc:a9:4f:7b:15:15:4f:de:ba:a5:
0d:85:41:39:96:b6:72:fc:7b:36:37:27:a6:ae:64:
37:1f:84:80:df:4c:42:aa:d0:33:24:b3:35:45:49:
85:6c:e1:30:a9:59:ee:47:1e:f6:67:9f:a8:f1:5c:
55:12:96:90:69:1a:9d:15:42:ca:2e:5c:f9:f1:ee:
91:00:4b:b6:dc:fe:f3:47:0d:4a:01:4e:c1:1d:8d:
d6:0e:04:60:cc:6f:86:92:b7:a0:73:20:b1:43:7e:
ef:31:2c:e7:f8:2d:5f:71:5f:38:a9:9f:ce:52:d1:
02:c6:96:d8:3a:6a:68:82:06:c1:c4:21:dd:20:e9:
3f:bc:6d:38:37:c7:76:40:35:28:89:72:99:04:49:
48:2a:79:e3:17:20:63:55:b3:d3:7d:6f:70:d2:3e:
09:83:09:33:49:5b:93:8c:b6:c9:df:ad:36:40:62:
9a:b3:30:f7:38:0b:f1:c0:7b:5e:42:03:7c:8a:1e:
e0:95:b7:9d:15:47:c4:72:d0:52:71:0e:83:25:2a:
6e:5b:7a:a5:84:06:54:29:fb:9f:71:46:c8:10:f3:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:07:D2:AE:77:EC:AD:48:BC:DE:15:8C:21:C7:3E:C0:74:F4:D4
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:55:a7:31:2f:c6:01:16:c1:c5:1f:0b:1e:a9:99:71:2c:4d:
7d:fd:6a:5c:e6:88:35:89:47:f3:8d:92:3d:93:8e:30:fb:f4:
ef:8e:a2:ec:ba:25:67:36:31:86:6c:ec:12:c5:c0:7d:94:70:
f5:28:d6:25:c1:b0:43:b5:5a:35:d8:fc:c6:90:97:25:97:81:
2f:7c:02:9c:c8:37:c0:23:65:8b:91:6b:95:ca:61:e9:98:db:
16:00:ad:62:7e:be:b2:da:84:54:e6:b0:13:6b:81:8d:27:4e:
ac:13:e1:9a:fe:e0:c6:9e:02:4f:14:b7:dc:5a:e4:5c:c8:15:
0e:5f:fe:e2:82:eb:16:c7:47:7b:10:33:1d:4f:d6:d1:1b:c9:
af:61:ef:af:63:6b:77:4c:86:24:1e:46:be:b4:ee:62:c7:23:
95:09:2e:7c:14:af:99:d5:4e:04:da:2f:91:33:76:b7:6f:66:
99:c3:a2:b9:f8:93:03:36:c5:c8:6b:d6:89:ee:69:fb:d2:b2:
61:bb:ea:13:19:65:3c:ed:b9:a8:22:bd:bb:50:bf:e1:a7:b9:
ee:d2:a2:32:19:66:93:30:a0:b0:0a:f0:11:a7:40:f0:ce:5c:
fe:6f:5a:80:70:3d:91:9b:1e:3a:5a:55:97:43:4c:ee:4f:77:
52:92:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:49:54 2026 by rpki-client