Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier: T5JnH+V8pO0S8CEqO9tD+2zHrurson/K1iBiK2+i6sA=
Subject key identifier: 6E:2E:10:75:28:29:10:7D:4A:D8:DB:67:EC:2B:2C:A9:68:E1:26:78
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 019D382E10F0DEF1314987BAF6D097D7E08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number: 13D9
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: v-pMKzPNfy5rtd72CjyjHSP_0fI.roa (hash: EF0zddsGgRS422TMKGAJaOiCyP7MY9L2A1NyAEExYsA=)
2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: 36U1g59d1HI5KLb2Vd+WIczpAmmwVv8XjSEz6lp1q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:10:f0:de:f1:31:49:87:ba:f6:d0:97:d7:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=6e2e10752829107d4ad8db67ec2b2ca968e12678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:56:90:3d:a4:d0:22:55:a2:7b:03:05:27:
12:2c:b7:a9:05:86:f2:0d:17:04:98:ba:c6:b4:44:
3c:6d:56:0e:0c:56:c9:82:e3:12:17:c9:c2:a2:23:
2a:08:a2:74:a6:da:86:74:da:f3:5f:db:d7:a6:eb:
c3:93:05:39:03:86:85:b3:3c:e3:c5:78:6b:ba:ff:
75:cc:16:58:76:e4:25:fb:63:94:26:40:8c:8a:c7:
f7:2f:22:6c:37:56:dd:4f:36:df:3a:d8:38:38:9e:
8e:86:89:1b:33:7b:da:53:59:49:77:80:ba:a3:47:
e5:32:b1:ed:3a:d5:4b:98:de:af:9c:b0:8f:e8:0d:
8b:71:f7:d7:d2:a6:8f:f0:e6:62:94:59:36:9d:a6:
14:f0:e6:c6:07:04:34:54:bf:e5:a1:f0:3d:20:57:
e1:b6:6d:a3:fc:92:d4:dc:35:8c:0b:a0:0d:53:f2:
e1:ac:8f:ec:2e:ef:a3:26:a4:83:d7:3d:7a:02:81:
35:b4:7e:c8:d9:c1:b5:77:68:f2:11:38:41:ed:fc:
ae:3d:a9:15:0f:0e:a0:01:4d:63:30:f0:6a:5f:82:
47:ba:2f:ac:02:b4:77:6c:ce:86:bc:8a:46:77:7c:
c5:02:1d:1f:da:82:ca:5d:6b:3d:85:e8:ba:0e:b0:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:10:75:28:29:10:7D:4A:D8:DB:67:EC:2B:2C:A9:68:E1:26:78
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:e0:fe:e5:21:0b:c8:c8:93:80:2c:8d:3d:99:9f:9a:ec:
49:62:37:51:6b:30:f5:85:9d:73:f6:92:50:1c:2d:c5:81:0c:
73:1e:cd:66:f6:b5:02:3d:36:7d:80:58:90:4b:8e:aa:f3:54:
ef:a3:e1:d9:e4:02:ec:13:88:58:92:e8:9e:3e:9c:64:1f:27:
71:38:fd:bf:db:e4:16:6b:a4:6f:7b:15:4f:d0:f7:67:75:d0:
4c:fd:47:84:df:2e:45:48:e0:7c:5d:bc:bc:72:2a:04:26:7d:
4f:60:f8:9a:08:66:0b:bc:e5:46:34:f8:fb:51:b5:f2:7d:8a:
75:28:06:6b:f4:d7:b8:f7:c5:5a:d0:b1:bf:fb:a7:1c:95:25:
7e:86:6e:bf:44:c6:3b:32:fb:7c:ea:03:61:c3:7f:08:6b:41:
e1:4f:4a:68:9f:8f:c5:12:23:39:56:42:12:d8:b7:81:24:b4:
6a:23:06:4a:0b:08:5c:69:7e:2c:95:22:fe:01:eb:33:62:1f:
0d:49:53:cf:df:82:af:21:1e:2f:4c:4a:b3:74:7a:d8:15:d8:
6e:aa:b7:a0:b8:8a:77:98:17:5a:62:b7:10:94:22:64:02:79:
37:a1:66:41:e9:59:4f:38:68:b2:d1:2f:a1:8b:88:6f:48:7d:
9a:a9:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:32 2026 by rpki-client