Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: BxWMWUgxt1se+6uuwuInrFVcicenrqQIsk0JRHJwvMk=
Subject key identifier: BF:42:A6:66:83:0C:5C:DF:62:28:26:B4:66:F6:B1:B1:28:1B:20:F6
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 019D3789C8D21B02149424F613FB4EB4A3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:09 +0000
Manifest this update: Sun 29 Mar 2026 03:01:09 +0000
Manifest next update: Mon 30 Mar 2026 03:01:09 +0000
Files and hashes: 1: a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa (hash: NioNjVo8lGbEZZ9K9hzAzdA29RBjR5Al0oMN0vHtav4=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: C0Q62ZKqQlO8mIcrh3pZMP+7iYMp41LNuDxJar83ods=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c8:d2:1b:02:14:94:24:f6:13:fb:4e:b4:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Mar 29 03:01:09 2026 GMT
Not After : Mar 30 03:01:09 2026 GMT
Subject: CN=bf42a666830c5cdf622826b466f6b1b1281b20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:92:54:4b:dc:86:89:ef:f0:b1:38:c3:ff:
a5:3d:28:a4:1a:e4:6d:d9:4b:dc:80:2c:4a:dd:9a:
d6:02:50:02:c3:8c:cc:52:3b:37:30:77:49:fb:f4:
35:99:44:45:32:bb:3d:74:c2:35:99:4e:ca:06:f9:
60:f3:6d:d7:e6:6a:9d:f9:cc:ab:f2:92:18:6a:b3:
7c:ea:7d:59:6e:e8:ae:e4:d4:5a:9f:ac:45:d4:22:
70:41:c4:12:81:90:1c:2a:09:dd:95:3e:ab:60:a6:
03:93:a9:03:e8:c2:b5:cd:99:5d:57:64:e8:91:15:
a0:17:14:c5:2a:59:05:c7:40:e0:ae:14:0c:f2:29:
da:98:53:a9:38:6a:c9:e3:f8:a3:cf:0d:00:d7:37:
12:27:0c:8a:a2:8b:f5:83:f5:13:0c:31:2c:cd:3d:
20:01:fa:80:ce:e6:8b:3f:a1:24:c2:c4:62:89:c9:
df:e6:81:35:4a:63:a9:1d:4c:b0:f6:be:71:fa:1d:
15:90:8d:a6:fd:22:a9:64:99:e8:34:7f:ab:c3:a7:
ab:19:a2:dc:99:4c:e0:1f:ae:6e:d5:e3:c9:65:82:
0f:dc:cc:49:3a:bf:d9:6e:75:72:e5:f5:57:bb:76:
cb:16:b6:e3:f4:15:24:12:f7:38:88:d0:e8:db:93:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:A6:66:83:0C:5C:DF:62:28:26:B4:66:F6:B1:B1:28:1B:20:F6
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:91:18:d9:63:91:8f:81:2c:cc:fb:f6:67:bc:22:35:e0:2e:
fc:3e:9c:7f:bd:f2:76:c6:dd:37:a7:56:ba:a7:14:d8:d3:42:
b0:56:6e:d7:84:e7:73:39:62:2f:c6:2b:f2:9e:37:db:0b:66:
1b:6a:9a:b9:0d:34:93:7f:c2:fb:bd:ca:66:c4:51:a9:a0:0e:
d9:da:64:18:3e:f6:59:09:e0:a0:84:b9:bf:c6:45:3f:39:1f:
08:79:81:a1:07:58:d4:74:90:07:92:7c:e9:d0:8f:fc:18:ea:
a0:d4:d7:40:20:16:db:80:d7:c7:ad:f9:30:94:14:69:17:8c:
20:5d:e3:43:3d:b0:44:1b:5d:44:b6:30:34:8f:02:1b:a5:a0:
b2:af:42:d6:8a:29:e5:14:a3:fc:43:3b:bb:ab:d8:ce:6e:a3:
13:9f:15:ae:d1:01:a3:39:15:ce:b3:1c:e8:b2:7e:ff:49:af:
2c:62:e4:54:d2:af:8e:04:ad:81:0d:bb:e3:0b:67:d5:a7:2c:
9d:1a:96:65:cd:d0:3c:9f:64:4b:24:66:fd:c8:11:67:53:68:
d1:6d:85:b1:60:53:e7:17:0e:c0:82:4a:dc:68:80:3a:5e:68:
2a:76:b2:fa:fd:b0:03:8b:66:17:82:67:80:bf:14:2d:b3:59:
a6:55:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:29 2026 by rpki-client