Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: vQMoaaBB8030VW7KHPDWecXG9FFashOUo3HGJIf7uV8=
Subject key identifier: BB:BA:A7:76:17:D3:33:E2:1D:A5:0F:E2:3A:04:85:55:17:D8:21:34
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019D37532CA1ED915FE6E4AEDA85BF514415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 1092
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (hash: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8=)
2: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: 7tQf92/MpVglEcPioZBAMrCekhEOMzAsT+9imODxaJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2c:a1:ed:91:5f:e6:e4:ae:da:85:bf:51:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=bbbaa77617d333e21da50fe23a04855517d82134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:c7:1d:7f:a0:87:53:12:d0:ac:10:59:64:
e1:31:52:dc:49:0c:cc:17:a2:68:42:90:e8:66:2a:
e1:a4:5c:be:e5:e9:af:87:77:36:43:4d:60:84:2c:
6c:0b:d6:05:cb:7b:5d:d3:37:6c:50:b8:83:af:df:
34:4f:3f:f6:47:d7:ab:44:f3:1c:52:75:24:85:74:
a1:2f:6c:38:75:bc:7b:7f:1b:a1:73:42:c7:4d:81:
cf:73:3a:52:23:c3:83:3e:49:62:e2:c9:ca:fa:af:
d8:e8:7c:37:f0:67:36:31:f1:cc:c9:08:c3:3b:b4:
74:a7:77:46:de:9c:9c:6a:fa:5b:a2:79:55:2b:14:
94:a9:54:37:a0:43:a9:a8:51:ea:96:f5:d7:df:3e:
6f:13:45:98:6d:ef:d0:be:02:53:77:29:ca:bc:ef:
e8:42:cc:9d:c7:d7:00:34:26:4b:57:62:0f:eb:e6:
06:d1:90:1c:9a:43:f7:33:62:09:73:16:10:3b:ec:
4b:c1:d5:f6:90:97:6a:49:9f:62:b7:cf:ed:49:a3:
bb:30:5c:10:18:36:65:37:0b:d8:6d:ed:25:83:9d:
14:64:f0:03:59:a7:1c:4c:ed:b7:cd:9f:1c:42:18:
60:86:ba:b0:a1:5d:e8:66:10:d0:e2:31:55:44:3f:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BA:A7:76:17:D3:33:E2:1D:A5:0F:E2:3A:04:85:55:17:D8:21:34
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:6e:3f:59:80:58:9b:44:a5:1d:94:29:37:86:44:73:c6:
2c:b6:74:17:6d:97:d2:ca:ed:11:ae:6a:b2:4b:4a:a4:ce:5b:
46:83:a8:46:d1:74:67:11:f8:99:21:88:35:da:aa:53:c6:5f:
1c:41:24:95:79:c4:0b:7b:73:1b:0b:a7:3f:7b:2b:64:cb:80:
61:d5:be:ed:fe:74:9d:33:77:53:be:53:ba:90:ed:cb:94:66:
94:c7:e3:c2:97:9f:74:b4:9c:14:10:f8:e2:81:b3:50:47:71:
ef:9d:81:a1:de:90:19:10:40:9a:40:ee:49:6e:38:3b:ab:31:
58:e2:ca:3c:82:14:85:26:17:73:81:01:b8:fb:a5:7c:dd:cf:
fe:76:a1:b9:53:94:4a:76:76:ee:ef:af:24:3e:0c:54:05:e2:
9a:b6:3d:87:45:d1:db:ad:af:8f:b8:64:f8:ef:fc:43:b6:58:
82:28:8d:4c:15:5c:80:33:7c:5b:d8:23:e7:42:2a:05:d9:94:
ae:1f:30:de:c2:f7:0a:a1:b0:eb:b7:63:6f:b0:a6:92:d9:fe:
4c:48:0e:67:39:a7:17:63:bd:61:5d:fd:cb:81:fb:54:b2:92:
40:40:f8:25:f5:b3:7d:38:10:3a:66:67:10:b6:a1:5b:fe:f1:
1f:fd:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:57 2026 by rpki-client