Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: Y97Y7cZUMXqVhUzPt+EAwQLnPHGNDDlAgqKtX0wLgKA=
Subject key identifier: 5F:0A:78:90:73:F6:13:47:C3:EF:D3:E9:B4:4F:26:ED:63:EE:22:31
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019D38D2CE074EBA705E9E9861A396BF19A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (hash: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: alcgLpZj3GaAOG0mqDXO4KJq5bqcV/m/qiMFnX+Q62s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ce:07:4e:ba:70:5e:9e:98:61:a3:96:bf:19:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=5f0a789073f61347c3efd3e9b44f26ed63ee2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:68:c9:8e:63:54:f4:75:41:06:e6:d7:f0:
3f:42:18:bd:4d:8a:ed:80:eb:11:75:49:2f:4a:d3:
b9:15:bb:f9:89:ab:9a:4e:c8:7b:39:28:9b:f3:fa:
70:87:5a:94:ba:c0:bc:7e:05:b2:53:f5:35:f4:d5:
71:a7:d6:e3:c6:d5:7d:42:17:a9:bc:07:6d:57:a5:
38:d6:aa:3c:30:a2:6a:e1:4e:23:40:39:3a:cc:06:
ef:ea:68:7e:c2:b8:22:c7:d5:89:40:76:5c:d8:2e:
f2:ad:dc:59:82:eb:5c:e5:a0:94:6d:80:9f:bc:60:
62:60:3b:4a:0c:19:a7:97:9a:47:86:36:03:b2:ff:
f5:e0:41:96:e6:70:dd:45:65:8e:c4:78:84:28:02:
0c:5a:d7:b7:34:db:0e:48:ea:df:e6:07:50:cb:3d:
4b:16:b7:c4:d3:0f:29:79:95:5f:47:ac:d8:77:84:
1f:14:f4:d9:fd:d6:5f:35:8a:52:b0:be:cf:eb:fb:
3b:8f:a2:60:57:2a:ec:f5:7a:d4:09:a7:36:91:89:
90:94:76:a2:06:02:d1:de:f3:7f:29:4c:7b:35:89:
39:bd:be:a9:43:d1:4d:d2:3c:cc:bf:0c:2e:11:b1:
53:88:9c:24:cb:5b:f5:c8:59:4c:a6:3f:ce:3c:8a:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:78:90:73:F6:13:47:C3:EF:D3:E9:B4:4F:26:ED:63:EE:22:31
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:df:9d:ce:04:e1:ea:a7:0f:0a:33:21:6e:f6:88:ec:d3:
3f:77:de:b0:3d:47:30:7c:d8:11:a9:0d:5d:89:bd:cf:c9:17:
45:30:0f:9e:49:df:4d:ed:c3:fd:90:e7:15:e2:ca:e7:0c:51:
a5:4c:7c:44:9b:a5:ca:12:bf:b1:a6:94:a6:75:0d:0d:b9:3b:
93:7c:39:07:9d:fd:27:5f:60:66:3e:ff:03:2e:5b:e3:80:4c:
03:01:c7:db:a3:b7:5f:3b:32:75:92:b2:79:7f:93:73:09:84:
52:4a:44:6a:61:eb:07:d1:ce:67:13:e2:32:ff:ed:61:eb:a0:
83:2d:c5:84:9d:73:e1:3b:3e:95:b6:77:80:92:8f:f1:da:01:
5e:6f:d4:1d:ff:14:01:77:29:55:b5:96:98:71:4a:55:55:51:
7f:25:6e:04:10:ec:90:43:1b:7f:f6:34:93:a5:bd:26:1c:1b:
fe:31:40:72:18:64:c9:f9:66:94:67:06:71:a1:01:d6:2f:ff:
6e:b1:5a:c7:d8:f1:43:f6:e3:ee:a2:b7:d3:a7:38:02:58:82:
e0:3b:d0:70:27:40:90:f6:50:a2:3e:d7:af:cc:f9:9d:8b:66:
08:69:6d:68:52:8f:3e:93:df:31:c8:a7:16:03:c0:e6:b0:34:
89:a8:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client