Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: X3vp2MVNiCUbzBWQ/5VHw0psMHoa3aN4u4Hi36Swjgo=
Subject key identifier: B5:31:25:F6:EE:40:EB:54:C2:AE:80:78:9F:36:F2:89:06:35:03:80
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019D390A379F1A8CF788952E5661BC59D9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 11D2
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: xCzDGvoJ8WsYFsRSWVvE81uJXnPASM1hTqqZJbWSM84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:37:9f:1a:8c:f7:88:95:2e:56:61:bc:59:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=b53125f6ee40eb54c2ae80789f36f28906350380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:07:c8:0a:7b:7f:ec:9c:82:0c:4f:e6:2b:
1f:af:f6:5b:e3:0f:4f:bb:83:31:08:c8:bf:8b:f0:
0b:6b:52:fc:d2:1b:b0:7d:d5:5d:f6:20:02:d9:b5:
f3:8a:68:36:f2:3b:68:a0:3c:56:01:79:1a:77:d0:
ba:6a:04:b1:56:09:18:20:36:2b:63:99:88:38:23:
d0:7e:bf:fd:66:8a:f3:58:7d:fd:8e:1f:7e:f8:a4:
2c:8e:30:b2:84:9e:1c:33:e5:02:c0:5d:8a:25:4a:
69:66:1c:3d:88:c1:36:ef:27:09:d4:7d:41:4e:bc:
d3:20:d1:9c:2a:8c:6a:85:d1:c8:ba:8e:b9:de:2b:
d5:d7:23:b1:54:ae:d7:84:22:59:45:ab:7b:5d:df:
c5:42:56:f8:fe:f7:fb:5b:e4:c7:c2:d9:b7:52:27:
19:ef:28:71:5a:70:04:64:04:4f:07:92:38:b5:62:
03:7c:50:02:10:7a:56:d6:05:59:94:8b:2a:96:54:
1f:d4:44:c3:65:66:ca:b4:97:2b:05:e8:6c:25:8c:
1a:4c:13:c3:fe:cb:b5:ac:a7:8c:3c:08:b1:d0:a0:
ea:ff:a7:fe:9f:de:4a:c0:b2:e7:7a:89:96:f7:3d:
da:d5:be:f4:fb:d3:62:46:9f:2f:a4:ba:dd:81:31:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:25:F6:EE:40:EB:54:C2:AE:80:78:9F:36:F2:89:06:35:03:80
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:7f:2b:55:29:3f:0f:6f:9c:0f:15:b3:d4:00:47:37:c9:
79:46:ab:ac:57:29:7c:d9:0d:22:34:b1:ca:5f:94:a6:b1:63:
08:5e:71:c3:bf:29:4c:8f:8e:ef:41:52:fd:41:13:01:6a:94:
76:42:70:a3:14:d9:17:43:5a:0d:3f:68:cb:d8:6c:0a:8f:09:
21:c9:56:0d:9a:4d:85:d7:47:0d:72:05:19:73:1c:a7:88:c8:
9b:66:70:44:40:39:21:30:29:50:25:61:cb:82:ba:fc:58:3f:
78:9d:31:b1:60:ad:00:cb:fc:26:97:87:d0:03:ef:aa:ed:9e:
2b:20:9b:39:a0:62:06:3e:d8:a0:16:51:b0:ed:d0:00:b0:32:
f9:49:9b:5b:63:96:57:0b:5e:05:a2:d2:96:cd:6e:20:ac:df:
46:21:78:a3:43:f5:76:91:0a:49:30:04:13:bf:0a:c5:7e:d4:
db:07:56:4c:a0:b2:53:eb:ad:87:89:c3:ef:b7:d4:31:8e:ec:
a1:e6:65:e4:63:e1:63:a8:19:42:37:51:d7:a3:8a:ac:b4:d6:
5c:2e:b8:1e:c4:92:9f:1c:21:ad:77:3a:5d:88:87:2d:82:c6:
db:0e:97:3d:b5:09:50:cb:cb:41:1b:ef:8b:20:a1:5f:97:9b:
c4:65:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client