Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: WYdV+TjhT4aKkU4sQUMSFKoJkWSqdfzQDQQdomeKLEw=
Subject key identifier: D4:BA:C5:CE:1C:30:A9:F6:25:AD:23:52:57:16:64:49:1B:A2:EA:A7
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019D371B5CEA07CB9D61A02DCADD0F4786D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: QVIfQrnlrvddmF2Qgo5vqItOQF3Q1CYbkfLvbroSxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5c:ea:07:cb:9d:61:a0:2d:ca:dd:0f:47:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=d4bac5ce1c30a9f625ad2352571664491ba2eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:3a:63:44:98:f6:d0:90:5a:db:fb:4e:37:
a3:54:5d:de:45:37:66:95:d8:c5:d8:89:91:93:27:
ac:53:2f:e5:e7:ea:9e:d4:c9:73:b1:0b:98:02:d1:
93:27:b1:a7:f3:a2:67:d2:24:8b:10:a9:1d:6d:a7:
a6:8e:e8:8e:8c:5e:d5:c1:2f:f8:3b:f3:98:71:35:
56:a3:58:6e:45:67:63:7f:bd:2f:ff:66:f2:a0:fa:
39:11:6e:39:11:5e:99:00:18:13:d6:b7:a4:3d:60:
8f:40:0a:52:e7:49:c0:99:97:09:a0:b2:6e:d9:ca:
e6:7d:59:c1:22:76:54:17:a3:c0:84:ca:e9:a7:0d:
7f:47:8e:ed:c4:16:a5:6c:28:55:39:70:6b:05:5b:
3b:64:5c:b4:ce:76:45:4b:b5:72:09:0e:4e:75:99:
a1:11:ed:1d:63:53:38:59:99:ef:ab:6f:99:26:89:
34:af:47:66:bf:a6:2e:d2:70:3d:f7:da:bc:04:dd:
ef:54:d2:ca:fe:55:64:86:e5:80:16:6e:4d:51:5c:
28:fd:ec:e2:0d:e2:1d:00:c0:ac:82:8c:cd:c7:cd:
4a:27:63:07:e8:37:45:0d:d2:e1:ec:1f:75:1e:07:
b8:14:2a:f8:c1:57:bc:9c:37:12:97:6a:ac:29:ed:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:C5:CE:1C:30:A9:F6:25:AD:23:52:57:16:64:49:1B:A2:EA:A7
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:69:d9:35:e4:01:8c:d5:e1:c2:5d:e0:a1:f9:72:51:d1:
94:15:d1:9e:6f:1d:2a:88:4d:80:13:28:b8:97:54:ba:67:cf:
ef:f9:6f:7f:67:62:3c:ff:53:df:a9:e9:01:f0:25:5c:58:ea:
33:ac:94:50:43:f2:c1:4c:40:b7:e4:6a:c5:60:24:ec:f3:fa:
39:34:5f:0b:83:20:dc:d9:0d:f5:a3:77:87:9f:94:22:75:3d:
65:fa:4a:20:98:b0:59:c8:64:c3:be:b6:f7:a7:59:58:b8:4d:
be:ec:5a:ff:31:d1:f1:24:aa:d9:e9:af:99:d0:33:7d:8d:c3:
9f:e2:a1:27:70:a7:1c:85:9d:f2:7b:52:9a:c4:c2:e0:44:9c:
4d:f5:76:94:e0:f2:2d:8d:6e:ea:40:41:bb:04:96:fa:b1:ac:
10:e4:15:b8:6e:68:6d:43:aa:d3:07:82:79:7a:1b:5b:c2:30:
a9:f0:7b:f7:25:f6:ef:d3:90:0d:bd:e3:ab:12:99:66:43:41:
9a:23:52:c2:dc:57:11:d1:bf:24:08:99:87:45:81:b6:4b:d2:
0b:79:38:c3:ee:6e:67:e6:58:bd:24:e4:6f:ef:82:c9:b0:fe:
1d:96:8f:36:a6:32:c0:ce:3f:17:6e:0c:0b:8d:75:26:04:45:
c2:89:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:49 2026 by rpki-client