Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: CuMAEkxtw10qddSe+Jy6rPxJJmk6Mr0y8YZxlkP+Ahk=
Subject key identifier: 84:03:DF:19:AB:9D:43:F4:D6:30:99:6D:24:EC:4E:4E:54:66:7B:96
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019D39413F9672CE9D201603C5E37D272149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 14F7
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: JsGq180cWpQwLGA873fpca8Bxj4.roa (hash: RBi5C0yGtp+dilj2CHlX7dy6n4QE4ZE7FypDUnxLwcU=)
2: _ugkR7EVVfxByxX4xFuzJ-ICxnM.roa (hash: k76p+M7xU4ZojZboTeMRkkpRvcXvQeBc65zI5mAjkww=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: pF8VLvpM5Lh0JSmr8+dqg1DY0a6RzaUWsAYgCXZT9nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3f:96:72:ce:9d:20:16:03:c5:e3:7d:27:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=8403df19ab9d43f4d630996d24ec4e4e54667b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:7b:5e:76:87:cf:ce:79:55:88:b1:e2:8c:
a8:04:ae:c5:d9:d2:13:f9:46:42:93:d7:26:1c:77:
a3:30:a0:cb:59:2c:e7:52:fd:5c:a7:f6:38:b5:f0:
42:ee:dc:05:e8:1d:bb:6e:39:cd:4f:ee:ef:98:fe:
1c:2b:55:ca:6f:ba:92:03:ee:1f:00:f3:e1:67:dc:
01:34:0f:aa:10:45:8d:b1:c5:a2:a9:c3:7d:01:35:
95:e1:08:9d:65:63:9b:07:d1:ad:7b:9f:29:e8:b7:
19:e2:3a:fe:68:de:ae:95:8e:c0:48:53:7f:88:7c:
d0:c8:4a:a9:78:56:c6:0b:dc:bd:cc:39:67:97:f4:
0f:4f:75:26:47:6b:f4:cc:ed:57:a3:e5:09:b3:3a:
62:49:af:30:fa:83:4f:2d:80:bd:05:84:8a:9b:58:
37:cb:eb:e1:21:4b:fb:17:3a:a6:fc:87:41:16:db:
10:48:8b:d5:c7:27:4d:15:40:2c:c0:20:ba:db:19:
41:5f:81:4d:39:b6:7e:17:a9:fc:27:21:5f:4f:24:
f3:49:5f:70:93:55:0f:4c:3b:86:74:02:ec:3d:a2:
2d:ed:d0:27:ae:ad:f4:38:b2:d8:ee:f1:6e:a2:d6:
89:13:9a:64:02:9f:96:d7:18:53:35:9f:e6:e2:ee:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:DF:19:AB:9D:43:F4:D6:30:99:6D:24:EC:4E:4E:54:66:7B:96
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f4:ae:12:19:26:3f:78:6e:53:d9:65:2a:77:1c:e8:ce:de:
f9:3b:81:4d:62:7e:96:74:b0:1d:ca:40:1d:07:ab:76:7b:8a:
90:5d:90:b3:1b:3c:90:12:10:9a:f2:1a:ee:66:61:85:49:7e:
14:af:65:e3:6e:be:37:7e:a8:4b:24:5a:d6:f1:b8:a9:70:38:
9d:2b:6b:59:71:f1:55:14:92:c9:57:60:ad:5e:8f:3c:7e:55:
ee:7f:4c:c6:13:b7:07:9c:78:f2:c8:75:ff:c7:89:05:2a:bd:
04:34:a4:fc:08:d0:90:58:96:e4:9f:eb:b0:6b:2a:e4:bc:c1:
cd:a2:7d:ac:76:c2:c1:94:42:b1:24:2a:0e:ae:8a:b8:43:29:
46:2e:20:15:de:f9:ad:32:f4:85:e3:e3:a5:ce:bc:d0:f9:8c:
ca:89:40:fc:d1:84:e1:7d:ff:9d:ac:99:38:2b:d6:e0:0a:c5:
b1:a4:d4:1d:3f:dc:1f:49:5d:57:32:f8:e9:1b:27:d5:1c:34:
7d:82:5a:92:01:51:6f:77:3f:fb:b2:7a:0a:0e:50:ad:5b:8f:
bc:87:9d:e1:e6:57:80:e7:7a:43:bb:72:3c:8b:14:e9:b6:54:
61:b3:8f:48:6d:17:34:3e:dd:0c:36:5c:ce:30:0f:bb:0e:b5:
3b:8f:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:02 2026 by rpki-client