Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: tEGXcATKvC8HI/qLVkO6CAmrzgSoV6Qqq5lO0aWlp+c=
Subject key identifier: 80:8F:2B:BC:A8:88:74:50:8E:F4:CB:CB:78:A5:DF:05:01:C4:6C:E9
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019D3752FF1D323F77601BB142C802934678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 02:01:19 +0000
Manifest this update: Sun 29 Mar 2026 02:01:19 +0000
Manifest next update: Mon 30 Mar 2026 02:01:19 +0000
Files and hashes: 1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: rYs9G2pc85DmtRhiMyIqkCOQkXRh660cA66Hw7G3pn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ff:1d:32:3f:77:60:1b:b1:42:c8:02:93:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Mar 29 02:01:19 2026 GMT
Not After : Mar 30 02:01:19 2026 GMT
Subject: CN=808f2bbca88874508ef4cbcb78a5df0501c46ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:f5:da:c7:53:3d:ac:d8:9f:fe:f7:e9:78:
39:a8:29:29:d1:4d:3d:11:e2:7e:1c:a9:2f:37:69:
da:c3:38:9d:ff:69:a9:2e:0c:fa:16:0b:ce:d9:33:
3d:2a:f1:32:cd:cc:56:00:1c:e9:c9:c5:c2:db:36:
f0:20:58:fa:b8:a3:98:06:0b:54:39:56:75:16:6d:
f5:d1:75:64:4f:09:bf:40:e8:5c:9f:38:15:64:14:
14:d8:7a:31:9b:cb:0c:95:58:3a:5b:cc:aa:7b:29:
a9:f6:9e:67:69:19:8a:2f:52:d5:36:60:21:20:34:
47:1e:4b:e3:a8:45:ce:e2:8e:2c:6d:66:52:6b:c0:
b2:62:63:95:2a:f5:09:d3:ec:b1:fc:29:bf:84:4f:
f5:1f:29:60:7d:74:44:c8:a8:db:3d:20:47:20:ae:
6b:a6:73:ea:51:e3:87:c5:d1:70:4a:11:37:6e:93:
e7:60:d1:8c:3c:d4:08:9d:e0:b2:bc:f5:98:56:6a:
91:05:04:79:d3:74:9a:69:87:f0:40:ba:96:3d:78:
13:97:72:a1:7b:a1:d8:dd:17:3f:23:04:f9:fb:df:
62:39:f4:56:ab:b8:8e:c2:e5:0c:a9:27:03:34:58:
06:b9:6a:3c:1c:b3:ee:f1:ee:9d:b6:f2:ee:18:19:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:2B:BC:A8:88:74:50:8E:F4:CB:CB:78:A5:DF:05:01:C4:6C:E9
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:38:9d:d7:fe:a4:78:05:28:58:c5:44:0e:d5:1b:d4:24:
28:84:0f:8e:a1:48:cf:a6:da:47:ae:01:97:13:45:fc:72:af:
45:ee:e0:d3:47:c4:75:f3:b5:6e:71:79:34:6c:68:3e:12:f1:
0a:b9:ff:2f:fb:7f:f3:c3:a2:d7:4a:2e:f4:77:43:ac:2d:1d:
95:6e:5a:5a:aa:f5:ac:31:52:68:8c:3e:35:04:89:d3:2a:66:
c3:99:6b:2e:96:1b:72:7d:e5:ab:ce:d3:a5:78:d8:08:a9:12:
60:4b:dd:66:37:3c:e6:b7:eb:d1:a2:ac:42:a4:a0:e7:8d:d2:
a8:0f:04:5f:0e:e4:a8:79:5e:01:c4:8b:fa:f6:5d:da:04:bc:
38:c6:c3:49:09:ec:7f:b2:25:4f:59:8b:f9:c2:91:58:b5:18:
bd:fc:70:3c:25:2d:b1:d2:22:9c:60:c6:b8:e4:75:8a:3b:b7:
47:cf:17:c0:5f:b3:6a:c7:8a:1c:d3:6e:35:1a:c6:89:fc:d9:
f1:cb:b9:2f:37:02:63:60:ff:ee:05:a3:dc:94:88:96:bd:56:
95:7a:b5:b5:aa:91:8b:9e:9f:e4:e1:b7:4c:9a:d5:11:7b:60:
5d:94:60:f2:e4:60:00:fa:12:ac:51:61:d2:5d:3a:d9:fd:58:
bf:d0:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:39 2026 by rpki-client