Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: rX45lSPt8LGnjwEDAQqE2P8krLO/si1Y+IcP7lp7GMM=
Subject key identifier: 0E:44:6E:63:68:CA:BD:1C:5A:1C:68:13:42:7C:F8:39:61:64:7F:0A
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 019D38668FCDDFDC3E94A05280FFEB83D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 1044
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: OL0stDkX2i4iSRwxjMZs3BrE1SE.roa (hash: vvxqzVvoF7+NWvZaa2Ph3MfeFjAEA8fO1sH/RieX6t4=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: m5itniJnmokt7S3cgDp2iVcutXdwjcfU+HmiXYLQ9K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8f:cd:df:dc:3e:94:a0:52:80:ff:eb:83:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=0e446e6368cabd1c5a1c6813427cf83961647f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:34:62:d4:56:fa:e1:c5:ea:e7:b9:c8:a2:
bc:05:c1:38:c8:df:13:68:72:82:3c:d8:d9:f2:d0:
22:4a:5c:bd:de:d7:3a:3e:e9:16:7d:86:90:fb:a7:
9d:db:e0:ad:23:d7:a5:ae:00:fb:bc:c8:d9:ff:93:
37:d5:63:63:62:ee:72:e2:b5:68:ff:b8:97:7c:87:
c3:b4:8f:e8:df:86:ad:db:5c:a1:0e:23:07:43:eb:
da:33:68:76:78:b4:4d:90:62:e1:4b:bb:e7:6e:82:
27:3f:25:41:1f:9e:a8:ab:83:52:ac:68:51:63:8c:
7f:11:b5:7f:27:77:e1:86:41:66:e1:bc:7e:35:63:
9c:02:37:11:12:f0:47:e6:2c:34:c7:c3:2c:d6:c9:
1f:b2:af:dd:26:59:7c:6d:52:cf:b6:70:de:14:2a:
d0:bc:29:70:b9:ad:77:14:2a:b7:d0:a4:02:36:c0:
a9:56:9c:90:a1:9e:d2:80:38:c8:6a:59:5b:d2:09:
d2:3e:f2:92:be:f8:c5:b0:64:51:69:fb:47:3a:a4:
ae:dc:70:ff:00:26:80:d1:40:fd:35:3b:2b:d1:ee:
cf:75:1f:62:4d:e8:e3:cf:64:d0:d4:80:1a:ab:7e:
45:61:d9:ba:e7:84:58:96:cc:41:c5:f7:b9:aa:0d:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:6E:63:68:CA:BD:1C:5A:1C:68:13:42:7C:F8:39:61:64:7F:0A
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:51:22:23:df:05:14:5e:3f:79:f2:d0:de:6c:d0:03:e1:
79:0f:79:f2:85:13:11:87:49:64:33:a7:ec:dc:c7:db:9c:f8:
12:da:ed:b2:5d:9b:87:e7:6a:1b:38:31:04:b7:d0:b1:fe:82:
0f:eb:1a:4d:9f:56:eb:f2:b8:ed:ec:9e:3a:d4:68:6c:7f:ad:
cd:ad:a8:39:4f:ff:bd:bc:91:e6:ee:cc:8b:e1:ff:5a:19:e6:
b8:ff:d3:36:7b:6d:2c:63:77:bc:6d:be:bc:c6:e9:c9:f6:d8:
20:46:44:24:af:64:b9:79:b6:51:ff:ea:5e:cc:7d:21:53:c6:
be:c3:30:a0:c6:18:2d:8a:26:42:40:7e:81:28:14:e7:5c:ad:
17:15:0a:67:e2:fa:8a:52:e5:84:07:3c:b8:4e:f0:26:a8:39:
99:72:ed:7b:85:a8:61:b2:a4:11:ea:23:30:b8:fd:12:a9:00:
14:88:51:5a:75:01:fd:56:f7:19:cb:8a:8d:68:c0:cb:6f:60:
fb:fd:a3:67:ad:89:cc:9c:74:4e:a3:6c:33:52:aa:26:42:a8:
96:52:fd:da:c6:d1:27:0d:5f:4d:b1:53:35:b5:4d:48:80:f0:
df:cc:aa:b6:ea:61:b0:e9:d5:1e:05:27:4e:73:5d:44:58:55:
15:04:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:06 2026 by rpki-client