Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: zdwjZtONl5bqnWSnZqUQtSM3z6q45qmA8nzY7gLFkZU=
Subject key identifier: 2C:4D:C3:5F:A4:7F:8F:09:52:C1:4C:48:A0:09:FC:D8:4C:69:BA:BE
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019D3A1CD17F0E9DD28C3AF390F565442A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 04AD
Signing time: Sun 29 Mar 2026 15:01:00 +0000
Manifest this update: Sun 29 Mar 2026 15:01:00 +0000
Manifest next update: Mon 30 Mar 2026 15:01:00 +0000
Files and hashes: 1: 96HXx8zQ_EVFzIMYvhg1zJYI3qc.roa (hash: nDqvJNasRGULrzj7GnOr0ISCf0+9RDFSbOhihRxibJc=)
2: FhaBlVdFb-u9B3Q3s8w-zUsnA3Y.roa (hash: Nhhs8U4S6VG9Y9DrRCnYgND9wClvtFHBCzE3i4DaeSU=)
3: Gg_alP2mFO3oRShalv4zYhkZtEI.roa (hash: c1t1ZXq7lnILVOJ0YZafOnYK9luC0QXvmJ3DhCUXZKo=)
4: SoTDVF-vjEYHi67nDfcRlGbTXr0.roa (hash: TQ9Y9JIBeUPae6BjJeYoVgEw4M6tL3rY17ZPfSth9eU=)
5: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: R7aAZCw8ZNVQSEft5/hgvMwuyqXFu7WicK0alOlNEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d1:7f:0e:9d:d2:8c:3a:f3:90:f5:65:44:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Mar 29 15:01:00 2026 GMT
Not After : Mar 30 15:01:00 2026 GMT
Subject: CN=2c4dc35fa47f8f0952c14c48a009fcd84c69babe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:65:70:c8:7d:71:c7:7f:e5:c7:c7:66:3e:
36:e5:1b:cd:fd:f8:dc:3e:1a:06:a1:f9:ae:94:7e:
b8:7a:b5:bc:26:08:23:44:8d:79:e3:53:98:66:74:
eb:25:55:88:22:40:df:b3:2a:cf:7f:61:f6:73:b3:
89:ec:94:65:a9:c1:4d:50:ba:1a:8d:66:9d:79:da:
fa:e6:20:69:9f:f6:da:c9:f7:a0:4f:61:af:98:fd:
07:2d:1b:4d:8a:28:9e:15:5b:30:07:d8:03:1c:b8:
dd:00:61:a2:a2:8d:40:bc:0c:1e:a9:ea:2f:f2:7c:
45:72:36:71:f4:ba:7b:4d:4a:97:a2:c4:16:46:36:
b6:80:7e:8f:7b:b5:85:30:2d:8c:53:8a:76:36:78:
36:c5:f1:bd:a3:ac:90:5b:69:eb:76:2a:17:46:fd:
c1:e6:35:00:f2:96:20:48:06:9c:42:c2:5c:86:5f:
9d:8b:a0:6a:2b:cc:06:da:0a:ff:3e:ba:46:10:89:
e8:94:90:1e:be:64:c5:ce:a7:e1:19:a6:62:5e:a9:
eb:38:62:6f:a7:f0:07:8c:8c:18:7c:ad:ac:b5:da:
33:1d:f8:c9:3b:12:e2:c8:eb:ef:ee:0d:2f:c0:c5:
88:4e:7b:2f:fa:e9:69:75:f3:8a:96:b6:5c:f5:94:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4D:C3:5F:A4:7F:8F:09:52:C1:4C:48:A0:09:FC:D8:4C:69:BA:BE
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:12:f3:70:98:d0:07:4a:5e:ab:d0:3e:49:28:a2:9b:51:78:
c5:e8:1b:01:43:25:b9:e3:ab:a3:61:a8:dc:2e:e1:dd:0e:f2:
2f:07:a7:50:ec:fa:6b:dd:7b:79:c2:86:96:c0:e1:2b:a4:27:
d9:fc:9c:a5:ec:96:e5:3a:e4:19:1d:4d:c7:01:50:eb:0b:72:
59:68:52:e2:5f:60:bc:24:e1:e0:0c:c9:a7:89:a9:99:60:6c:
b8:a1:ec:f3:da:bc:19:54:90:72:55:ea:c8:c7:4f:d1:74:81:
1f:f6:25:77:be:af:d3:9e:3b:1d:89:d6:dc:f9:b2:7f:d8:ac:
3a:31:c0:fa:bf:2f:a8:d4:20:d0:9a:b3:e8:32:88:05:fb:ad:
77:15:13:f9:53:3c:bf:a0:27:64:3f:30:f3:70:e9:6f:a3:77:
d0:34:c5:8f:5f:83:bf:6c:d3:da:22:8c:13:d3:0e:12:bb:ba:
a9:77:9f:94:da:74:0f:3c:9f:f1:e7:ba:13:c1:28:fc:02:b3:
c5:cf:79:68:bb:8e:05:d6:e5:f6:67:b4:eb:d8:de:fc:0e:67:
47:72:3c:f6:dc:bc:d6:3b:42:60:c5:af:27:94:12:c0:99:13:
3d:cd:75:a7:5e:59:14:0f:73:be:5a:39:bb:d2:04:05:e1:ee:
43:c7:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:27:53 2026 by rpki-client