Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: NW3p3DReV6kXyQVlg0xcPnK0sd3VGK7zIt6XNnZQLBQ=
Subject key identifier: C9:8F:15:08:C3:C6:8E:4F:BF:8C:51:72:86:C1:05:06:DC:95:A8:B4
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019D37899D3EC35C185A80F433A8859D1D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0540
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: Z4/oe/lsbnUEN9kBPGja5PxmnHCCXl/uDTitQcGEIlw=)
2: xVWlyfjWNauHSqD1r_D5-LgllLw.roa (hash: dlJT/Xcxoye27KDxhsg9z9fDGJ9uuoxQEu/5uWsLfvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9d:3e:c3:5c:18:5a:80:f4:33:a8:85:9d:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=c98f1508c3c68e4fbf8c517286c10506dc95a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:56:c9:50:0b:37:c5:c3:5a:9d:c4:6c:54:
c6:20:c0:bd:9e:9f:a5:08:a9:e4:4d:bb:7a:f6:26:
be:09:5a:49:43:db:a6:5a:bd:74:d1:4b:77:ba:2b:
eb:75:a8:b0:d4:e5:34:d0:d2:7f:b8:d6:fb:e4:40:
55:4b:f1:59:6e:de:c0:73:27:7c:f0:00:fc:77:4b:
e6:a9:24:64:ba:63:cc:a8:c8:ec:0b:af:45:66:bb:
49:e0:36:4a:e2:a2:4a:ae:33:87:ab:e2:e8:4a:13:
6c:91:ac:05:1a:c2:45:c7:a4:77:c2:b6:cb:a2:0b:
76:2d:9e:7f:04:79:1a:12:31:4b:3a:93:43:a9:ab:
a5:67:8d:14:72:f7:19:2b:69:4a:16:ab:02:6a:f0:
3f:43:56:f6:bf:28:e0:8e:cd:cf:aa:f6:30:d0:eb:
44:b1:bf:bf:ec:f3:a4:6a:7a:e9:2d:1c:3d:8f:d9:
60:20:a7:6c:eb:03:8b:15:c5:0c:71:e7:a7:82:0e:
71:f8:8c:b3:9c:49:30:de:99:0d:db:f0:7e:a9:cf:
37:fb:14:d4:df:f2:43:5a:d1:c4:d6:b9:15:5f:41:
f7:ce:23:e3:b9:e0:55:76:db:9a:6b:b6:ed:00:c4:
79:f8:ca:20:db:f1:5d:e7:7d:be:8e:b0:3d:41:bd:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:15:08:C3:C6:8E:4F:BF:8C:51:72:86:C1:05:06:DC:95:A8:B4
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:90:5f:f7:93:71:22:b8:9a:1e:3c:e3:61:11:b4:8c:30:d6:
ac:d5:01:d7:83:a9:62:bc:ba:f6:58:32:48:74:b4:58:90:67:
fb:9f:71:2d:2c:e3:9a:bb:74:f3:5e:90:aa:52:2b:a5:79:99:
2a:44:81:6f:11:7d:3f:c3:f1:9b:e7:43:62:8f:32:91:93:6b:
60:a4:92:bc:c8:20:f6:43:b4:61:07:5a:9c:0b:a3:3e:03:f4:
01:35:3f:1c:fd:87:82:79:83:a5:99:f3:e6:4e:a9:e6:94:6a:
00:9d:b7:a8:6e:81:30:c2:79:6a:41:a1:d8:eb:89:54:7c:43:
2c:87:b7:f9:c4:46:4f:6f:0b:66:93:63:a2:92:ae:6f:69:81:
6f:be:4d:ac:4a:be:84:5a:9f:c6:c5:28:e4:c5:0b:1a:ef:d5:
a7:f0:0f:f8:eb:2d:14:f0:f4:24:79:56:ad:a7:73:97:d2:48:
2a:81:f4:7d:b2:68:ce:cb:44:a3:5a:a4:2e:17:aa:ba:80:bb:
85:9c:90:2a:48:cc:6e:25:e3:4d:b4:24:39:19:c2:d0:35:06:
ed:22:77:f9:b8:95:29:4d:ff:b2:36:a7:8d:5e:5e:01:1f:6a:
a6:1d:17:4a:c8:45:3b:3e:b9:72:95:8c:b6:b7:e6:7b:0c:b3:
46:ab:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:12 2026 by rpki-client