Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: Yo7dSA+y5mXHejW8anAzctzEYK5UnHnAOHLdg7kyebc=
Subject key identifier: C5:80:2E:FF:32:C0:37:40:B1:EB:D5:AB:9B:B1:90:44:A8:3C:53:27
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019D38658EF230500EAD90F5CED5F2F087EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 0801
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa (hash: yOnugz5IMt/r/ItObFdGYTlUVT1M5hQ/rMrPgRDzlRk=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: gp3IGXH0lBMKZa/n636N8s5z5Mm+dM8TIlUdPijCH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8e:f2:30:50:0e:ad:90:f5:ce:d5:f2:f0:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=c5802eff32c03740b1ebd5ab9bb19044a83c5327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:85:3e:d5:be:52:86:f9:bf:53:b0:db:cf:
40:ef:f3:84:8a:d8:b6:53:6e:0a:a5:5c:8a:8c:10:
5f:92:98:d9:28:81:66:7d:1b:d4:75:6f:2b:5a:f8:
cb:2b:c9:e4:4e:7e:32:39:39:c8:e4:ea:30:b4:51:
4d:d8:c8:c1:2c:2b:2d:9d:19:07:47:1f:65:41:50:
10:eb:41:37:ac:f6:49:73:63:0b:87:02:ed:36:0a:
11:15:74:fd:23:1f:1b:ca:64:00:18:30:29:ff:62:
3f:79:7c:bd:ee:88:c9:20:78:de:b9:40:54:c2:f2:
b2:18:b5:f8:2b:dd:2d:d4:6a:65:c4:0a:1b:53:b4:
5b:14:42:f4:9a:a7:dc:d1:b6:42:46:d1:76:6b:87:
0a:e0:62:9b:38:85:98:0c:dd:87:f6:12:6b:07:7b:
87:75:3c:ea:6c:25:81:b2:24:14:f5:25:ef:ec:2f:
85:d3:30:af:9d:f3:9b:92:79:17:2f:63:17:88:e0:
d3:73:a5:d6:cc:a5:6c:88:0b:88:6f:5a:1e:e7:a9:
5d:c9:6a:b4:f1:45:c9:72:33:64:ab:11:09:f0:dd:
a0:80:20:81:d2:83:72:fa:41:aa:c2:97:c3:f4:0c:
62:55:b4:c4:f9:88:ea:06:0e:b7:c5:62:d0:2d:65:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:2E:FF:32:C0:37:40:B1:EB:D5:AB:9B:B1:90:44:A8:3C:53:27
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:53:33:d7:b7:02:ce:96:2b:a6:df:c6:5a:11:3e:4a:6c:
ce:4b:94:52:ca:34:36:db:80:90:d2:34:dd:b7:2c:9b:4f:2c:
9e:d7:7b:f1:5a:18:d8:4b:aa:de:bc:1e:09:ea:23:55:b4:8b:
e1:f9:97:a4:f7:55:57:b4:d7:1c:02:84:6e:08:ef:60:96:33:
ef:ee:2d:6e:d0:d1:84:b1:ee:49:aa:ae:49:bd:ab:3e:6a:0b:
92:6b:60:45:99:20:d6:89:48:72:1c:09:e9:c8:f9:7c:4c:84:
c7:9e:99:9e:bc:d3:68:93:cd:af:da:83:0f:fe:40:bd:e6:c7:
be:cd:aa:33:a6:ad:3b:50:21:1b:ec:38:4a:5f:bf:c6:9e:9c:
8f:9c:cc:57:00:e2:c0:17:82:8f:f5:c1:ba:4a:0f:7b:c6:48:
22:c3:da:8b:55:82:51:55:78:42:cd:9e:04:2c:14:ad:a8:fe:
f9:b8:34:fd:21:41:44:9f:2f:a8:cf:ad:1f:33:31:40:69:3d:
63:35:fe:9d:dc:59:e6:00:f0:67:a0:2b:4a:53:01:bf:30:08:
4c:b7:d3:a0:a9:c4:1d:95:2a:0c:43:fb:01:96:86:1b:31:b8:
de:eb:6c:1f:ac:11:13:8e:9b:d4:f7:59:9e:f8:32:0c:1b:98:
81:12:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:42 2026 by rpki-client