Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: OR78PrcUj6/z+LpfNApBRunAn29Vc3UlhHv5eOXcS8A=
Subject key identifier: 5C:F4:AB:24:AC:51:C4:E2:3C:03:26:5B:52:94:D4:B9:AC:02:55:34
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019D3865F4F798C7BD97799B5D21D4373F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: ULtOVDYrdwhQ2xItb8vuZ9V/Q5VoWhuY47lgKWrARfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:f7:98:c7:bd:97:79:9b:5d:21:d4:37:3f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=5cf4ab24ac51c4e23c03265b5294d4b9ac025534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:4f:cc:c8:02:4a:b5:bf:9b:01:68:c8:28:
b3:09:df:f9:53:97:67:50:4d:3b:fa:7a:d0:25:2a:
a8:52:9b:14:bd:ac:e2:e8:ad:98:2f:1e:cb:23:36:
d9:74:4a:8f:0e:86:0c:05:cb:95:dd:2d:e2:a5:60:
27:32:90:af:6a:b7:09:ab:5e:da:c9:7e:9b:cc:c8:
b2:ce:77:23:72:18:2a:0d:27:74:8c:e0:da:ab:52:
c8:19:1d:22:59:c0:ee:65:88:30:de:a7:13:20:30:
9c:96:25:60:57:dd:e3:aa:fb:6b:8f:b8:48:34:67:
e9:e9:fa:56:8a:72:95:01:22:45:69:35:31:fd:d9:
ff:a0:b5:d7:bc:b4:d7:82:46:27:61:53:35:29:5d:
1e:d1:3d:43:59:0b:e4:0a:f8:d7:e9:e4:d3:af:eb:
25:e9:4e:fe:c0:55:42:db:34:d1:b2:7e:f4:9e:de:
76:b3:a0:a5:24:a2:cd:33:78:5d:ab:16:c8:87:cf:
19:98:8c:9b:a2:f0:be:2d:94:d3:05:d4:ad:01:9b:
05:72:4a:2b:f6:eb:f0:55:6c:74:09:27:54:bc:82:
df:29:ad:fc:72:8b:f1:5a:fd:e8:e0:00:ed:63:c3:
01:7d:4c:5d:36:2d:54:27:f1:51:7f:87:ff:dc:1a:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:AB:24:AC:51:C4:E2:3C:03:26:5B:52:94:D4:B9:AC:02:55:34
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7a:e8:4c:c1:ad:17:84:8a:2a:b2:96:cb:8d:1f:96:ec:09:
2f:cb:dd:5b:06:5a:82:6c:f1:a8:21:8b:5a:ea:c6:04:22:7f:
3f:f5:b4:8f:e4:59:bc:00:98:71:a8:19:69:0a:ad:65:3a:f4:
8a:af:3f:b1:84:b7:d5:a6:bc:43:b9:ff:dc:0c:d3:0a:fc:78:
da:ec:bd:60:68:85:1c:1f:bd:f7:f0:6f:17:f0:ff:fb:5d:85:
00:32:a8:65:dc:85:79:56:60:63:78:b5:63:16:13:ad:ff:bd:
3d:0d:fa:9d:a0:f0:7f:48:09:5e:db:50:08:2d:81:b8:6a:48:
8c:a0:fa:4d:c0:7c:c5:f1:8d:3a:e2:1e:9d:57:99:08:b2:dd:
96:6b:21:ed:bd:85:80:8a:6a:f9:ad:9b:37:2d:72:4a:7b:0e:
2a:ea:e2:6a:00:25:bc:8e:51:64:df:0a:13:3e:0e:b4:d3:1f:
fb:70:59:f2:6c:0f:64:89:f8:d5:41:8f:4c:9b:1f:cd:45:71:
de:ec:15:06:0d:4f:11:92:2c:21:05:74:aa:5c:46:ee:fb:3c:
99:b0:ee:28:ef:26:64:c6:22:91:e4:72:09:e4:03:b1:2c:5e:
bc:8e:68:0d:ec:e1:a4:0e:5d:76:d2:90:78:b3:bb:0b:4f:a1:
d5:73:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:25 2026 by rpki-client