Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: Kwebgn2tNkn/fL7NKxi2xy2j+91EUJF9NYFcOTZ+u/g=
Subject key identifier: 07:01:E8:83:CE:FB:8C:B1:46:3B:BC:88:E1:F8:4E:E8:AF:60:D9:E8
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019D37C0AC6D08B7449F9EB00F79E65CA234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0A8C
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: ApgF84gUPygCEoSsXCMPVFc/XhN7erfUNxq3QiK1deo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ac:6d:08:b7:44:9f:9e:b0:0f:79:e6:5c:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=0701e883cefb8cb1463bbc88e1f84ee8af60d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:90:40:43:b8:ac:8a:73:e8:97:99:3d:6a:
6e:7f:3b:1b:e1:ed:a4:f4:6e:76:fe:0c:c9:52:4c:
82:d3:2f:98:bd:28:e8:5b:5c:3b:42:44:9c:e2:b3:
20:97:25:8e:51:da:f1:58:48:a9:1b:9c:59:b9:ed:
73:29:87:a8:73:a5:af:6c:1b:45:bf:4b:b5:7a:e9:
f4:2c:10:12:67:48:e0:58:35:42:c6:77:8d:65:91:
ae:a1:7d:64:bf:a6:f8:54:59:ae:b0:0f:eb:52:a7:
c2:30:c9:37:5e:f2:18:5b:e8:aa:5f:d7:14:c3:ce:
8b:0c:9b:7f:cc:fe:1d:e5:af:02:ee:ec:b4:c9:1c:
64:51:d5:b3:ce:9f:c5:80:03:46:15:5b:83:00:69:
38:c8:14:68:96:e3:cc:c3:1d:7e:4c:35:61:02:ab:
e8:a2:82:c3:6c:0c:c8:6e:2c:b9:f5:95:25:ab:5c:
23:1c:4d:11:ad:7b:41:3a:50:20:3d:e0:a2:8f:e0:
62:29:1a:49:89:e4:4e:e0:ea:7c:3c:ad:2f:56:1c:
56:c8:a3:87:24:91:96:9c:fc:c1:eb:47:ca:43:49:
1a:22:24:00:5c:10:a5:5e:6c:93:83:6c:9d:29:f8:
f0:a9:1b:16:5c:ed:3e:52:35:d8:a3:95:d6:37:7d:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:E8:83:CE:FB:8C:B1:46:3B:BC:88:E1:F8:4E:E8:AF:60:D9:E8
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:29:9a:3c:da:48:c8:73:3c:23:9a:86:34:66:1e:1e:f1:7e:
2e:fe:ec:49:db:a5:91:49:a3:88:40:c8:b9:ef:63:4a:8d:d9:
b0:d6:b4:7e:d1:4b:b4:b1:7a:58:e6:32:03:6d:a8:d3:e0:6a:
f1:ba:62:b7:fc:e1:40:d5:44:af:e2:50:df:97:93:ca:e4:97:
fc:65:ad:92:27:27:0d:be:13:50:a1:9b:71:97:aa:48:ec:de:
0a:df:ba:5b:93:4a:07:8c:5d:17:99:37:46:17:fd:0c:ff:56:
ec:5e:e1:e5:eb:69:67:4d:07:9e:1c:e5:76:01:81:2a:90:62:
7f:4e:65:9d:21:ad:26:3a:6b:72:12:11:d3:f5:20:4c:5a:e8:
22:d2:f2:60:4c:5d:29:87:f4:38:63:96:88:52:92:fe:07:d4:
9a:68:0a:41:88:f6:31:59:57:c0:3f:5b:88:c5:a5:a7:12:9a:
4b:bc:9f:bc:32:12:b0:12:7a:3c:b8:8a:ec:65:7f:da:9f:c8:
19:5c:1c:19:f7:5d:d4:27:ae:af:6b:a6:4a:f5:3b:0e:ad:06:
23:7e:b3:0f:32:61:bf:5c:4c:24:d2:26:b2:c1:88:36:b4:b4:
35:f9:a1:23:ac:0d:63:c5:00:7e:95:59:1c:2e:6a:26:bb:1f:
de:ed:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:24 2026 by rpki-client