Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: 4Xv/pLuAB35EdOIWiti0y7caTAe97eySKovvYz97DXQ=
Subject key identifier: AB:90:5C:97:1C:58:D6:90:13:A9:27:C0:37:6F:27:B1:D7:07:31:3B
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019D38D3655E3B54FC4D220EF1D82309BB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 16E0
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: Czhpoccfu7eveWUwZioO47+1vqzvf2UnBwePRlM4KkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:65:5e:3b:54:fc:4d:22:0e:f1:d8:23:09:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=ab905c971c58d69013a927c0376f27b1d707313b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:5b:7f:f5:50:9d:4e:a0:33:ef:9a:f1:ec:
f2:cc:a6:b0:b7:81:e6:16:92:40:b1:c7:91:05:ff:
5b:ac:0d:80:81:c7:fa:dc:fb:49:7b:dd:89:72:c6:
0e:db:0f:d5:e6:52:12:cb:42:c2:0d:c1:f6:71:1a:
4a:c8:77:64:07:88:11:7b:f3:b4:7b:5a:f0:eb:15:
93:fb:a2:2d:d7:e7:78:4c:13:08:f1:1a:fa:0a:ba:
e8:a1:3d:d5:bb:c0:ef:c3:17:0f:b1:3a:9f:06:4e:
02:a2:01:81:30:0b:2a:b9:1c:c1:13:ed:5c:57:97:
fb:7a:32:df:b6:47:2c:93:7a:4b:b5:84:95:e6:a9:
89:be:3e:35:ea:58:96:f1:89:77:2b:51:19:af:ce:
53:8d:68:72:e0:b2:ad:f7:fe:db:30:c6:39:8e:10:
56:b5:bf:bd:42:15:f1:b7:09:de:6d:c3:5f:fc:eb:
2c:8c:b4:ed:c1:4e:19:72:4c:4b:73:e7:bb:86:36:
5d:73:9b:53:a6:3b:57:21:ab:32:1d:a7:cd:ce:fe:
0c:ff:f9:68:2a:67:d2:97:57:d4:23:0a:98:ee:d1:
9e:b5:ce:f8:01:b5:a5:09:85:6a:6c:92:31:e1:ed:
ba:4c:74:f9:f2:c8:65:81:08:b4:7f:0b:95:1d:9c:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:5C:97:1C:58:D6:90:13:A9:27:C0:37:6F:27:B1:D7:07:31:3B
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a5:4b:6e:0f:13:d0:1c:92:9c:00:4d:72:0f:ae:d5:90:a0:
0d:0e:ca:0d:cf:8d:3a:4d:39:71:27:3f:aa:e5:c0:53:ef:6c:
db:2b:e8:56:a8:b5:c7:c8:cf:29:3b:e5:ca:79:92:3d:a5:e4:
a6:93:70:fe:d0:f2:44:93:25:f5:59:8e:1c:ba:a6:ea:cb:58:
9a:1a:79:37:ca:de:5c:4f:f1:54:ad:73:ff:f0:a0:db:dc:79:
8e:f0:11:bb:e5:ea:29:28:b0:a0:f3:7f:b4:d9:16:a9:ef:c6:
ec:48:38:8d:eb:66:1f:82:bb:8e:32:e5:24:6f:0e:88:9b:07:
26:7e:3b:1b:3c:02:3c:9f:df:1b:53:da:9b:67:88:24:d9:b9:
be:b7:ca:1c:0c:f1:b8:bc:12:3f:fb:40:87:4c:c2:9d:58:0c:
18:3c:c5:19:2a:fc:3b:5c:2d:5e:69:20:38:e5:a7:b1:15:7e:
8b:f0:ae:8e:48:77:18:86:7c:d9:d1:88:12:aa:dd:7b:c0:de:
c0:b0:12:65:5e:72:37:ac:07:70:54:e5:cd:1d:47:47:04:26:
3e:4f:df:18:4a:56:91:26:8e:ea:d6:08:b6:e3:e3:b4:1d:2b:
70:c8:90:e1:2a:51:4c:c4:fb:7c:d5:ce:e5:c7:44:a2:de:a6:
23:04:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client