Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: GYuELG7x08uZKgb3poiZQz/aR8BmXWamySORJNACH58=
Subject key identifier: 4B:94:F3:7F:54:AE:E7:CE:2B:04:10:13:46:25:4C:75:DF:C6:F5:70
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019D07E68F07A6DAA9D6FC38C0AF9B55EB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 042B
Signing time: Thu 19 Mar 2026 21:00:43 +0000
Manifest this update: Thu 19 Mar 2026 21:00:43 +0000
Manifest next update: Fri 20 Mar 2026 21:00:43 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: 5FQClviybfmJIAY5iQeS89e2xt8l1Z0BkoU4tfGne+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:e6:8f:07:a6:da:a9:d6:fc:38:c0:af:9b:55:eb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Mar 19 21:00:43 2026 GMT
Not After : Mar 20 21:00:43 2026 GMT
Subject: CN=4b94f37f54aee7ce2b04101346254c75dfc6f570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:d9:e6:12:17:56:b5:31:9c:10:6f:c9:b7:
62:ca:0a:73:d7:0b:2e:d9:d8:ce:2d:da:5e:55:78:
f3:f1:91:31:21:c0:7b:cd:4d:54:77:f8:3c:63:e1:
4e:28:21:c0:50:d4:3d:2c:9b:29:56:1e:ec:41:25:
e0:4d:a5:d7:f1:eb:fc:e6:97:10:4e:bc:97:5a:7b:
5f:91:85:1b:4c:d0:50:db:d1:7a:cd:36:07:8a:d2:
de:af:6b:4e:3f:b3:76:90:13:1c:8d:e5:b7:5a:a7:
c6:6e:19:c2:1c:c6:66:ce:e3:ed:c8:b0:63:35:e5:
d4:60:2a:f0:e9:db:34:d6:41:ae:5f:f5:9e:29:82:
32:31:5e:9b:32:f0:0b:c3:8d:dc:27:8c:28:4f:33:
15:67:f3:1b:96:fb:9c:d4:19:8b:5c:d6:18:4d:42:
0d:32:a5:1e:03:91:27:1a:66:cf:04:93:0a:76:b5:
0f:e3:01:4e:87:87:71:bc:5f:af:c0:8d:bd:0e:d1:
af:52:1d:c0:e9:70:ba:cc:9f:d9:3e:de:54:de:b6:
b7:81:0b:01:69:d0:d8:60:d5:f2:cf:19:4c:17:f1:
11:21:93:b5:9a:0b:8a:9d:00:9b:67:58:a9:6d:3a:
34:78:b4:7b:01:1c:8e:59:6b:dc:fc:9d:68:cb:71:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:F3:7F:54:AE:E7:CE:2B:04:10:13:46:25:4C:75:DF:C6:F5:70
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:2b:d1:49:d9:0e:e9:50:c2:29:d0:5b:4f:24:27:71:63:
0e:46:86:ad:c2:cd:a9:b4:01:99:4c:12:85:1a:2e:59:c6:6e:
a8:2c:c3:27:41:1a:cb:c1:f6:b6:f4:06:c1:7a:ea:23:8e:12:
a7:84:1a:b3:c7:e5:e0:17:7f:10:aa:e8:b9:f6:49:ce:44:3a:
95:b8:ad:de:ce:08:ef:e5:a6:43:2c:68:b8:11:a1:0f:49:f1:
ce:da:06:1d:c5:68:43:64:5f:ed:7c:aa:6f:6a:d2:05:c9:ec:
ab:3a:70:b1:5f:88:02:d8:27:cb:a0:4d:9a:f6:c5:86:4e:2f:
a1:85:8b:f7:5c:a3:7e:ef:53:ee:83:d9:5e:9d:26:a9:e5:a3:
92:51:19:4e:53:a2:f3:03:b4:d7:da:8e:57:3f:2e:db:c9:58:
ce:78:67:0c:3b:7c:1c:05:48:c5:6b:2f:fb:ba:9e:b4:9c:ff:
7f:81:c4:19:40:6c:68:3f:d8:78:20:c3:0f:1f:54:fb:7f:92:
da:22:8e:6f:3d:f7:69:ca:77:9f:2f:cf:ac:67:7d:52:e6:87:
4d:d5:dd:d0:a3:74:3d:ab:ac:d1:b3:09:85:4a:75:e7:a1:48:
96:f4:88:29:07:9e:7e:15:c4:c3:fd:0c:2a:31:11:d2:d4:26:
bb:8b:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:41:19 2026 by rpki-client