Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: vkI0vELmVfBblPGLvr7CNpk33SRH3lKMRvDfRUFJIe4=
Subject key identifier: 2E:E2:E6:AB:F3:67:63:EE:59:2B:E6:E3:28:71:F2:7F:26:1C:AF:7A
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019D389C03D0BFA89D2E68B83A3502A83E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: RKsWQywf7E1-7yxnFVRThg94oQI.roa (hash: rZsYO4uq9KEbyvr1gPhju0XO3T5ePDaOKISlE/78+R4=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: nF3evzPD/Y5lIG0zeGc1DoIctlyMSeI6MVZX93N6LrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:03:d0:bf:a8:9d:2e:68:b8:3a:35:02:a8:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=2ee2e6abf36763ee592be6e32871f27f261caf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:70:a6:ca:97:47:dc:bf:06:69:0f:05:40:
5a:96:3c:e6:d9:55:b3:c2:9e:52:c4:bd:df:6a:f2:
a9:cd:b4:fa:fd:75:bb:97:24:3d:49:85:1c:5f:fe:
02:e0:e2:51:16:4a:e9:b0:a3:b2:37:4d:b6:51:75:
21:5c:e4:a4:b7:34:d1:d5:d0:7e:66:ee:ab:65:f5:
b8:dd:c8:2f:bb:ff:ca:bf:35:94:9b:95:e1:a9:95:
92:e9:88:ec:3e:1a:c1:47:a8:eb:b1:a7:c9:6a:4a:
76:8a:89:a8:88:7b:5a:46:33:06:67:08:45:79:b8:
37:64:de:a5:02:42:7b:cc:2b:0c:34:16:fd:36:fd:
ad:4f:d4:94:ea:a2:e7:4a:22:08:66:51:4f:8c:ec:
83:63:eb:dc:b3:c1:b6:93:1e:67:85:22:bc:e1:f4:
90:93:73:cf:44:94:8f:b6:ee:67:56:fe:44:06:42:
ec:ac:d0:29:fe:7e:35:26:7e:a3:25:62:07:e3:d3:
67:96:e4:56:e6:2a:9b:5e:90:74:69:3d:4b:35:14:
45:54:11:f8:ce:1e:22:bc:35:89:d3:55:bb:ae:e1:
a5:b4:19:73:c6:1d:7d:28:26:d9:b7:be:06:50:2f:
1d:03:a7:d2:87:98:63:19:99:d2:5a:85:c1:25:ec:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:E6:AB:F3:67:63:EE:59:2B:E6:E3:28:71:F2:7F:26:1C:AF:7A
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:67:b1:8b:21:73:97:57:2a:f2:89:e8:e8:5b:7b:b8:fd:
93:b8:94:5d:71:89:d1:ab:f4:18:f5:e4:e7:a7:0c:41:95:5b:
cf:89:9b:08:90:80:79:92:87:ef:bb:45:0a:80:d1:5d:e0:89:
ae:71:d4:d0:07:6f:ad:3a:ef:0e:29:44:89:d5:25:8a:fc:ff:
15:a3:1c:02:3a:1e:0f:f3:03:fc:81:31:ea:bd:1b:f0:94:0b:
bd:c1:14:74:62:7b:00:90:aa:60:b7:c1:3b:2e:16:36:53:af:
fd:94:c8:88:89:a9:19:7c:28:d9:85:3a:b4:fd:11:f1:8f:91:
80:5f:8b:77:e1:b6:04:de:05:f9:7b:f8:f8:b7:ed:a7:3a:83:
50:65:9c:07:32:42:8b:79:53:c4:fd:89:11:db:e7:9f:ed:52:
8a:47:7f:3c:49:0e:53:54:bd:36:51:64:ef:3f:ed:ac:72:e6:
df:d5:ed:1b:b6:5b:9e:7e:0a:52:9e:43:85:49:12:c8:ca:9f:
ab:0c:14:50:25:f3:9f:32:fd:57:17:22:93:72:f5:01:68:ca:
2a:6a:ed:47:38:5c:e4:40:05:a8:74:77:a5:5b:2a:90:82:0a:
d0:c5:94:9a:ac:9c:ad:a4:a1:57:b5:e5:51:ba:0b:6a:41:e7:
4b:c4:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:21 2026 by rpki-client