Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: 9STWP17w4So6uqLhXYXCVqJqed2oR6p0h9TE8VpzTAY=
Subject key identifier: A3:A6:2C:C8:BB:E8:CE:DF:90:F8:CE:8F:CE:24:A9:73:78:94:52:DE
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019CF2DF3894B2EE5B8463991AEB5B329523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: 20
Signing time: Sun 15 Mar 2026 19:00:41 +0000
Manifest this update: Sun 15 Mar 2026 19:00:41 +0000
Manifest next update: Mon 16 Mar 2026 19:00:41 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: At2q/76Qxz2k1KwNgYMybzDZpQJhGxcNgjUbyg8h04E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:df:38:94:b2:ee:5b:84:63:99:1a:eb:5b:32:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: Mar 15 19:00:41 2026 GMT
Not After : Mar 16 19:00:41 2026 GMT
Subject: CN=a3a62cc8bbe8cedf90f8ce8fce24a973789452de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:da:2c:ed:ab:d0:6b:b5:90:6c:d6:b4:d5:
68:b8:76:4f:be:83:a1:ea:5e:a4:19:54:3e:9c:b4:
b8:76:49:62:ac:c3:24:32:94:c6:03:73:f0:e9:e2:
98:43:b9:9b:a0:9c:74:b7:a7:4f:a3:bf:ab:c5:cd:
95:47:dc:bf:e3:eb:63:50:34:88:19:14:76:cc:83:
4f:3e:83:dd:eb:c2:10:f5:f0:24:4d:4d:4e:c8:92:
1e:cb:18:99:34:de:25:5b:0f:41:97:fc:ee:01:6b:
24:3f:f3:c9:05:67:3c:65:3a:b7:18:f6:bc:4d:28:
bb:84:49:12:53:d6:4c:df:93:85:e1:08:cd:fa:a0:
73:03:e4:63:9e:13:ef:2a:fe:40:29:81:9f:32:68:
bd:1a:ed:87:4a:8c:4d:7d:4c:20:a5:d7:d0:45:69:
6f:b9:3c:d2:7c:3e:71:d5:38:ad:b0:85:2c:3a:26:
75:d9:75:40:62:82:a1:1e:39:bf:55:2e:de:37:27:
94:ad:0a:df:3d:6a:bd:80:67:9f:2d:b2:6f:ca:b7:
17:24:d1:8e:f0:71:c5:67:1c:6f:41:e0:5d:8f:19:
6e:0f:1e:c3:b1:15:3b:29:88:50:c4:ef:7a:de:70:
cc:07:57:12:55:cb:48:15:87:3e:c1:b6:b8:86:08:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:2C:C8:BB:E8:CE:DF:90:F8:CE:8F:CE:24:A9:73:78:94:52:DE
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ca:a2:54:e3:28:41:14:cb:ec:28:d4:0b:e4:3c:5f:99:da:
69:8c:b8:12:f7:19:ab:bb:6d:48:97:9a:51:2f:29:e2:28:db:
df:f3:cb:07:3b:9d:11:75:c2:b1:5e:a3:29:af:a4:48:be:9b:
39:78:36:c8:b3:60:03:d5:41:d0:ae:30:8d:1a:bd:9f:a0:b5:
bf:d8:ab:e6:69:c2:30:3d:3a:b2:d7:5e:7a:e6:ac:1d:d0:66:
d6:30:24:ee:5e:3a:3c:54:97:ca:23:4c:34:ab:33:49:f0:db:
a1:a3:02:09:4a:b0:3e:74:78:7c:92:d5:db:a4:b1:4e:de:de:
1a:99:cc:98:82:91:14:25:1c:53:fd:d7:f6:70:33:b8:46:ba:
b6:b4:72:13:eb:60:77:d0:ff:42:ae:75:b2:3a:0c:b3:b5:6f:
75:00:7a:85:34:7d:a3:bd:74:f4:ed:6a:a6:1d:a6:e6:6f:29:
8e:d6:04:b4:54:33:bf:ed:6e:3b:44:12:fa:ed:06:fe:1f:ed:
42:93:73:d4:e9:ae:47:51:4a:20:0b:f4:54:30:93:62:f6:4d:
1a:0f:c0:2f:13:57:2c:0b:e0:d0:60:61:22:72:57:07:ea:61:
15:b5:db:e8:f4:11:fe:be:bc:15:a1:5f:f7:ad:53:3b:ab:4c:
d4:6c:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:35:10 2026 by rpki-client