Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: PvDxWLFO+cGMiaHmD5gJfPDdhlbz/kj87CwosHwB6H8=
Subject key identifier: 7D:76:42:EB:90:D3:47:EA:B8:68:D5:E6:5A:A3:D5:02:1B:98:48:F9
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019D3977712F1F4AF00A61591C24693DCADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0A07
Signing time: Sun 29 Mar 2026 12:00:22 +0000
Manifest this update: Sun 29 Mar 2026 12:00:22 +0000
Manifest next update: Mon 30 Mar 2026 12:00:22 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 3PZ0/YsuZvkN0yJi3KCqTUA5UlA6ljLlURNTQFBycE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:71:2f:1f:4a:f0:0a:61:59:1c:24:69:3d:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Mar 29 12:00:22 2026 GMT
Not After : Mar 30 12:00:22 2026 GMT
Subject: CN=7d7642eb90d347eab868d5e65aa3d5021b9848f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:be:03:e7:f1:95:ac:b3:db:42:24:37:86:
a0:46:7d:9f:5e:fa:bd:7d:c8:46:63:fe:c3:63:63:
4e:ce:9c:3b:e9:88:aa:f0:9b:0b:fe:1a:1c:6a:c5:
9d:87:3a:91:2c:c6:52:18:c6:d2:76:cb:39:47:42:
f4:0e:d6:48:89:e0:61:89:f8:d7:56:a6:77:56:f3:
6a:74:30:e0:02:1b:f8:4e:34:32:f0:84:bc:ad:d0:
27:7c:b3:01:b4:38:11:bc:59:ec:28:8c:64:d3:85:
33:84:8a:f5:50:97:dd:d5:8f:87:49:cf:43:93:71:
70:f9:17:98:77:9b:a5:36:7f:a6:ca:a6:86:d4:b9:
31:fb:37:b2:19:13:90:11:18:26:cf:ab:76:13:e0:
63:af:37:ec:e5:3c:1d:9a:a9:db:f0:91:0c:a8:6a:
db:1a:95:ce:b8:88:90:23:3f:e4:5d:fe:8e:41:05:
16:bc:af:c1:69:62:8a:94:0a:88:ac:41:f1:3e:54:
db:b8:ff:9f:66:4e:1d:79:3d:e6:20:77:ef:a1:8e:
9c:34:87:23:84:f3:5d:a4:7f:fa:6d:b1:a3:11:73:
2c:59:80:02:6e:be:a8:ea:30:5d:54:28:3e:d1:49:
4b:c1:c9:59:23:32:4a:f0:60:bd:83:0f:f8:f0:43:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:42:EB:90:D3:47:EA:B8:68:D5:E6:5A:A3:D5:02:1B:98:48:F9
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:92:c8:d8:91:99:64:ed:ac:ac:fa:22:50:54:22:65:d7:
77:9e:d5:f4:05:55:42:74:8a:91:29:dd:fc:77:30:27:70:69:
68:e9:d5:9e:8f:85:c2:bd:98:51:4b:93:ae:ca:c9:86:dc:b9:
14:63:98:a1:54:82:3e:2e:13:e6:a1:12:97:35:2e:be:a2:91:
80:02:97:08:11:32:8b:1c:6d:f6:c9:d0:13:67:6e:f2:c1:94:
4f:06:16:02:97:0e:a1:6e:e4:a7:4b:a8:49:91:1b:6f:10:ed:
36:74:0d:8d:65:e0:ca:16:50:81:6c:f3:ee:e4:39:a8:ce:64:
d6:c0:68:b9:f2:29:1b:8d:4e:d4:d5:2f:8c:69:7f:e4:27:81:
38:be:ca:c9:13:78:e5:7b:93:7c:f6:51:ef:cc:cd:87:fc:8c:
f6:ad:99:02:40:c6:5c:aa:a6:c5:4a:f6:2b:6a:57:95:54:f8:
1a:8e:45:f0:2a:13:8a:54:d5:c2:9b:bb:4d:b9:29:39:9d:e3:
cf:0e:de:21:8a:54:de:7d:98:41:67:52:f1:cd:de:0f:57:a8:
de:43:ce:d5:e5:8e:34:a9:42:fa:60:c6:c8:e5:d2:9e:c9:84:
1d:b3:3d:76:ac:01:a1:f1:fd:98:c7:e8:f9:d2:5e:a9:fc:3a:
d6:27:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:33 2026 by rpki-client