Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: BnvgWQ/dcNA4oCQsmWmFPOQ4ysOGR4J919TT5g8EEzw=
Subject key identifier: D6:63:D4:B2:53:A1:FA:A3:C1:1D:9C:6D:5F:4B:79:03:A7:59:94:52
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 019D394082E33EEE059B27C25A80466A37C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: ZR6ZwONJiI02JFZZIB8bG3hYJKsjP8dD7spiYBQgCF0=)
2: fSnqZnwOIrhOfhDZkhdGS2yAncE.roa (hash: SVnN30Tg3P99sk9b/ymDGPmYqstKVPGeMKeKX2k4XeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:82:e3:3e:ee:05:9b:27:c2:5a:80:46:6a:37:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=d663d4b253a1faa3c11d9c6d5f4b7903a7599452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:63:7b:98:0c:4f:7e:74:dd:7c:03:c0:69:
03:d6:96:21:da:73:16:22:3e:8b:b1:1f:0c:2f:e1:
8a:de:f5:df:fb:e6:51:0d:a6:25:dc:91:8a:87:0e:
67:8c:5e:59:3d:99:82:4f:0a:a0:2e:00:8a:ec:21:
4b:3b:ea:86:5c:16:88:e2:56:66:3a:03:ab:a9:36:
68:61:7c:36:14:69:34:1a:d3:69:42:71:bc:17:89:
f0:94:01:16:81:71:59:20:71:ba:c3:c1:4c:9c:26:
ef:4e:ab:34:a3:03:86:fe:a4:8d:47:c2:6e:27:a0:
f0:68:31:1a:a5:6a:a4:eb:59:79:28:1c:3b:5b:a3:
49:ee:f5:23:5c:4b:3c:87:f5:6f:b2:d2:ed:e1:3c:
4b:af:03:45:b0:85:b5:5f:66:0b:b3:0d:7c:94:c6:
05:d5:20:fd:44:a3:2c:1a:7f:75:5f:a0:2b:e2:d5:
e8:6f:e6:f0:64:b0:e9:8e:53:88:18:31:c5:98:af:
a5:9c:f5:bd:19:cf:0b:ca:d7:d1:4b:7d:a2:61:31:
5a:f1:94:99:97:74:45:0e:44:20:0e:54:4c:a2:db:
c5:e9:94:94:ef:55:e3:ed:8c:b2:43:06:f1:80:21:
5f:00:05:e3:71:d9:21:06:54:17:d4:46:34:49:b4:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:D4:B2:53:A1:FA:A3:C1:1D:9C:6D:5F:4B:79:03:A7:59:94:52
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a7:a7:e1:63:73:c0:8a:f5:0d:41:48:6b:7f:a1:4e:c6:52:
3e:5e:3e:8b:1f:78:e5:99:c1:1a:21:9e:79:cf:d4:8f:cf:fb:
19:ba:6b:06:8c:94:3b:98:8f:d0:97:cc:85:53:40:70:07:9e:
e6:ad:d0:62:14:dc:51:e0:2e:d1:a5:72:77:11:c3:02:f1:d0:
5a:62:ab:0c:77:04:44:24:52:9b:38:40:1c:ac:87:0b:91:49:
cf:71:a6:14:88:5d:3c:b3:f9:e2:42:8e:b6:70:dd:0a:59:ca:
44:9f:b4:a3:77:42:b7:cd:0e:85:0c:00:71:5e:99:33:f4:32:
e7:db:c2:cf:94:ee:58:ca:f4:af:be:61:91:48:ef:a9:7c:01:
a1:25:1e:8a:91:d0:b2:31:ea:ce:aa:82:98:56:53:95:c5:03:
f9:7a:6b:89:e7:8d:f3:ee:48:f1:2c:62:f1:60:85:6e:7e:bb:
dd:7a:26:0b:11:ef:f4:bd:c8:10:91:f1:b8:85:4c:33:60:03:
86:8d:12:a3:56:d2:0a:e6:9c:66:62:1c:09:6f:5d:bd:04:85:
0b:e7:67:fa:a2:60:2b:4b:7a:cd:6d:b5:11:a1:49:63:c6:44:
01:f4:21:b0:a7:53:2d:37:f4:a2:3e:48:d8:bf:e2:25:f0:b3:
81:2f:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:43 2026 by rpki-client