Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: iR3TlNX33pQL4fB0mpklrUX3uVfZgOa6GN08S0GM3ec=
Subject key identifier: 38:FD:9A:FB:10:D1:75:72:11:B4:83:F5:CB:5A:FA:80:C5:68:C1:39
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 019D371B9321C2DA6D779F211C832EADB052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:47 +0000
Manifest this update: Sun 29 Mar 2026 01:00:47 +0000
Manifest next update: Mon 30 Mar 2026 01:00:47 +0000
Files and hashes: 1: k212pOftYaKL3__dZMrFZE2MH5E.roa (hash: PKolWasV9tkUQ7UVtjo0IH2y7lrM7NWS9+jgOePyuP8=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: A4ESuXTRW+9LZegFLsYg/1fQc7B7xtst/zW4oWcmKAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:93:21:c2:da:6d:77:9f:21:1c:83:2e:ad:b0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Mar 29 01:00:47 2026 GMT
Not After : Mar 30 01:00:47 2026 GMT
Subject: CN=38fd9afb10d1757211b483f5cb5afa80c568c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:bc:f0:46:d0:a4:24:f1:79:19:45:e5:68:
50:e1:93:a6:4b:2f:af:82:9b:f4:a6:94:d4:f5:3c:
37:9d:16:f7:23:fa:fc:84:c6:20:39:6c:7e:b9:0d:
7f:e2:0a:63:fe:ff:af:34:e5:ab:11:5c:e3:ab:6a:
06:18:6e:17:cd:b2:8a:c0:87:ee:9d:39:76:24:09:
37:49:f0:8e:02:ba:1f:c4:c3:ac:00:71:8c:61:67:
2c:c3:ff:cf:6c:18:11:f0:38:66:47:b3:14:70:cf:
db:6d:8c:7b:ba:1a:10:65:f6:4e:c6:ef:54:85:c4:
8a:55:31:06:65:ef:a7:88:2e:79:bc:d0:12:be:b3:
3a:ff:76:b5:dc:39:91:38:97:50:19:31:e2:7d:95:
50:60:1d:dd:99:7a:da:aa:36:37:3c:48:03:ad:40:
9c:8e:05:4d:95:76:05:25:0d:4c:43:2c:44:c6:80:
5a:46:5b:35:36:2f:d6:7e:5a:83:a4:4b:8f:eb:3a:
de:4d:75:dc:e4:17:18:67:d3:f9:18:f2:ad:06:7b:
f9:ca:e3:61:44:9d:52:14:6b:e3:37:94:e4:73:ae:
c3:bf:6a:aa:fe:7e:37:fb:bb:be:8d:19:75:9f:36:
5a:59:b6:eb:0b:8c:60:d5:ab:ae:ff:46:a5:c2:15:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:9A:FB:10:D1:75:72:11:B4:83:F5:CB:5A:FA:80:C5:68:C1:39
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:33:5c:4c:f2:8e:d2:80:eb:75:82:b2:1f:9e:f5:c2:fc:
31:7d:a4:62:35:8b:44:5d:47:ca:ad:0b:5f:c2:b1:77:cd:03:
81:ba:d2:9a:8a:f2:d1:16:75:b4:25:d7:80:88:d8:22:ba:83:
d9:0f:5e:43:e9:65:cc:76:ed:c1:12:22:7d:5e:db:88:6a:34:
f7:95:6d:3f:bd:41:f1:b4:3c:39:a9:fa:3e:09:0a:05:5c:ab:
04:3a:e6:e8:c3:31:da:a9:fa:17:52:f1:50:fd:b6:7a:a6:49:
0d:49:4e:0b:e2:19:9a:3b:4a:e4:5f:4f:2a:65:78:39:de:ab:
ba:1f:9a:34:38:f5:4a:ac:01:35:27:16:4a:15:37:d4:dd:a2:
d3:03:40:a2:35:8e:00:81:6a:dd:7f:a4:92:e1:78:b3:d7:89:
54:32:e0:fc:ec:cd:f9:3e:89:95:cf:8a:be:c2:f8:1e:c8:85:
30:8c:16:31:1b:d8:25:38:12:b7:90:21:5b:fa:38:1d:cd:cd:
80:90:d3:39:49:be:0d:15:5b:dd:6b:22:b2:09:2e:f2:6b:b9:
aa:8e:06:79:d9:8c:c1:ee:c1:ad:92:bd:84:51:cd:61:12:af:
4d:12:7c:42:ce:73:bd:e1:69:71:2b:64:54:4c:0f:45:b0:9d:
42:20:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client