Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: gzvTj6zcO+zdvju988u9/ybeKhBOqmUfxHBQ8zhmb6A=
Subject key identifier: E1:79:2F:C4:D3:F5:C0:34:FF:0A:BF:B1:AC:16:99:F1:DF:A4:45:B2
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019D04E60BED6F0E80951262F74D285788EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 12EC
Signing time: Thu 19 Mar 2026 07:01:18 +0000
Manifest this update: Thu 19 Mar 2026 07:01:18 +0000
Manifest next update: Fri 20 Mar 2026 07:01:18 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: CDzMOtCR9B6yXVTOfOU5HJ565iiJc6d96rzwTrro3PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e6:0b:ed:6f:0e:80:95:12:62:f7:4d:28:57:88:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Mar 19 07:01:18 2026 GMT
Not After : Mar 20 07:01:18 2026 GMT
Subject: CN=e1792fc4d3f5c034ff0abfb1ac1699f1dfa445b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:b5:fd:3d:7d:ee:f7:1d:35:a0:f0:6f:c4:
57:5a:48:f9:55:20:c1:b9:43:4e:29:d6:92:91:71:
1a:77:df:7a:06:dd:c6:55:5d:6c:1c:7c:15:67:90:
c5:a2:62:50:5f:d0:b2:fb:b9:70:fb:9c:6e:4e:f0:
c7:0a:59:b6:08:40:c6:cf:ef:cc:b5:27:63:85:c4:
7b:d7:40:85:a9:11:60:9c:5f:0a:04:e2:a1:0a:d2:
4c:dd:ce:49:9a:63:66:ea:18:e1:b6:d8:ff:e7:ea:
30:ce:fa:5d:fe:46:93:09:88:3b:50:7e:b4:cf:4e:
06:10:3e:21:c8:34:1d:bc:36:3e:95:c7:83:d2:11:
d8:fd:a7:fe:20:bb:90:6a:57:fb:14:02:b0:43:b5:
5f:df:ae:cf:72:58:7c:95:17:1b:1c:ec:b6:10:57:
b9:9b:60:d3:ab:1d:3e:2e:68:0c:b0:48:55:cd:36:
0f:29:0a:f3:2b:71:79:04:0a:d7:81:8b:16:18:ec:
b0:90:69:4a:5b:4b:03:70:73:2f:b5:ee:fb:c4:3a:
22:f0:94:a9:ff:77:0a:79:5d:74:2b:4f:97:39:b8:
cb:b4:83:57:6b:b3:48:1f:63:fa:10:b7:bd:bf:26:
68:b5:8f:98:7f:4c:f4:a1:65:77:79:05:f8:bb:fb:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:79:2F:C4:D3:F5:C0:34:FF:0A:BF:B1:AC:16:99:F1:DF:A4:45:B2
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:85:a4:1d:03:2b:f0:0d:25:82:f4:a9:da:3d:82:d5:73:
8f:c5:33:68:6d:f2:17:48:86:d9:c4:7c:62:3a:33:f5:7e:7d:
97:16:bb:6f:c0:d3:eb:6b:ff:7f:5c:59:43:23:08:6a:87:1f:
ba:cc:71:61:92:dd:d0:25:c7:7d:a2:83:5e:77:c2:ad:60:7d:
1d:8c:fd:26:82:4d:16:22:14:96:0d:cb:bf:33:ab:65:1b:24:
14:99:0e:6f:75:4e:17:66:2b:f2:c7:94:2d:c9:6f:12:4a:b6:
64:8e:92:cb:0c:ea:5b:93:4f:a0:6e:94:22:88:6b:6b:68:55:
4d:22:1d:42:a0:0b:08:fa:2d:df:52:a6:57:4f:0b:1c:47:c7:
79:70:ec:74:bf:a8:74:c3:60:19:8f:b9:6b:c4:09:b6:d7:ad:
3a:41:53:55:63:b7:e5:33:17:b1:08:12:55:da:5f:1f:9f:ae:
3d:42:0b:9d:a3:31:6a:23:82:d5:7d:83:b9:55:7d:2f:73:50:
e7:ef:61:c3:03:18:de:53:ff:41:0b:b0:b5:46:bc:ce:95:52:
1f:48:66:4f:14:3d:ad:45:d4:3f:a8:46:b2:be:d2:26:30:c9:
3e:b0:ca:ef:f5:be:4a:c9:8f:0c:2d:ba:ab:d5:b9:17:21:35:
bc:3e:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:16 2026 by rpki-client