Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier: 5H/S9Hiir/Hw0Ec2CtmtBteMjX8v5iGtGwis3X9Izas=
Subject key identifier: 2B:11:E7:7C:A6:99:79:03:46:09:A7:A0:A6:3C:C4:74:07:FE:D8:14
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial: 019D378954556E7175B4381EE81700874484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number: 1143
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: mGIcxgiPYTdH4yLZmV0JBleuht4.roa (hash: OZj4BcogggilSPwT8xEb1QoBaX+3k88vX0bMKlFe0Qg=)
2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: pU3UUy9x4ZaJN+R71KY/3sDZYEWiljs7d9AGfgDDqHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:54:55:6e:71:75:b4:38:1e:e8:17:00:87:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=2b11e77ca69979034609a7a0a63cc47407fed814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:c3:db:f3:49:e6:7d:34:76:66:07:e1:22:
48:6f:bb:e6:da:25:eb:3e:d6:0a:a3:bb:79:31:ec:
ff:91:8e:ab:37:25:7a:53:dd:d9:de:e8:09:63:cf:
5b:57:7b:6d:62:91:40:0a:8e:9e:fc:54:46:50:5b:
fc:5c:92:42:98:77:3c:16:6d:af:64:b9:20:b5:f3:
63:78:dc:60:9d:be:19:5a:b6:36:1a:89:cd:fe:58:
a4:cd:5a:9b:d5:d7:b4:98:0e:73:b2:56:85:58:62:
b0:d6:03:87:39:0d:41:c9:f8:e9:17:10:59:48:c6:
5c:79:fb:0b:f5:a1:ef:ac:2d:41:53:74:f3:14:2a:
f3:e1:59:8a:af:4e:76:b7:cd:c4:2e:ec:92:25:ec:
c1:3d:63:3d:2d:05:2c:fa:f3:ca:50:c6:15:66:37:
d7:f8:78:43:2f:20:b4:1e:1c:1b:dd:2f:75:07:36:
77:6c:f9:25:9b:17:dc:44:ab:b4:73:51:e1:e7:ec:
45:ac:f2:cb:4d:2d:4a:e8:66:4c:eb:df:6b:29:6d:
2a:37:af:53:6f:b6:87:b6:42:28:9e:d1:c3:3b:f0:
f4:48:b2:93:b6:46:72:ea:b2:9a:f3:12:4e:26:ac:
14:5c:fb:84:fd:d8:15:9c:13:e2:6e:de:93:98:5c:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:E7:7C:A6:99:79:03:46:09:A7:A0:A6:3C:C4:74:07:FE:D8:14
X509v3 Authority Key Identifier:
keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:f4:5c:ac:41:7e:2a:54:14:10:d8:c1:2b:37:7e:4a:e7:
9d:b4:6a:2c:fa:ea:7f:ef:f9:99:91:9b:ee:97:92:f9:b4:f4:
45:95:7c:bf:a1:c2:c0:f5:f1:97:82:11:2c:c7:cd:42:17:c4:
97:c9:f2:b6:32:01:48:7f:57:62:c1:a1:19:6e:5b:8d:2f:b8:
0b:3b:5c:9c:e6:96:90:19:11:82:01:5e:24:39:bc:6d:e3:ef:
f3:b5:0a:54:1f:cc:16:e5:13:c3:3f:46:75:e0:b3:c1:f0:5e:
66:bc:e3:a6:89:cc:66:ec:c3:59:94:9a:a9:81:3c:ec:07:34:
29:84:e4:15:e6:37:1e:e4:18:66:da:7b:aa:b3:b4:23:bc:27:
ba:c2:9f:ac:f5:69:89:94:be:be:ab:03:dc:2c:ac:c6:4d:52:
05:80:61:3a:c5:ac:2e:3c:fa:3e:5e:a9:bc:a9:0a:ba:76:a2:
1e:69:d8:0a:7d:19:01:38:42:85:1b:c2:5c:ea:79:36:13:73:
61:c8:81:af:1e:7a:28:5d:af:d0:80:87:d4:40:45:80:7f:b2:
2a:e6:ad:1c:07:54:71:9c:76:b3:3c:20:8b:ce:b9:39:d1:41:
ca:0a:69:79:6a:1f:71:b4:25:49:17:dc:d0:f8:19:55:02:ca:
53:b8:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:32 2026 by rpki-client