Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier: BrMBdIW6ZKyZCpo0x6Zt5uRQJC+Y3tQVUvGTSLaY2hU=
Subject key identifier: 0C:14:CD:15:80:8A:86:05:E8:BB:B4:2F:DE:52:84:2F:F4:5B:4D:D4
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial: 019D378909047C447D4FD6FD5D42188768CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number: 14C1
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: Mm045ZyVlZjZUZDeLC5D/OaQ2KOhMKQjzQ3dAbcnkrk=)
2: kkg4t3nZeUP55IPH0ja56ajh2uc.roa (hash: wQ4+D4YX0IA9lRd0FG5GHGoJjFI5hoVgBy4LMPM1TUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:09:04:7c:44:7d:4f:d6:fd:5d:42:18:87:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=0c14cd15808a8605e8bbb42fde52842ff45b4dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:d1:89:a1:f9:01:68:4e:a7:6f:37:36:17:
dc:82:15:ea:95:30:77:e4:66:40:ec:4f:8d:e3:39:
7a:77:91:b7:c8:32:5c:d0:f6:52:24:92:2d:40:f6:
f4:5f:fc:21:8c:75:44:6f:9f:16:65:af:98:03:e0:
b8:2e:8d:71:f0:79:14:71:0a:cb:15:c5:a5:6f:f6:
7e:43:23:24:2e:6b:00:8d:76:04:41:ed:bf:06:e3:
eb:31:1d:f4:af:30:4b:8c:d7:6d:13:15:b1:32:9d:
9b:0d:46:02:e2:de:3a:51:89:56:e7:88:7b:32:7f:
34:2f:fd:63:67:1f:70:9f:c7:04:a8:a0:2f:94:c9:
2f:86:47:bf:04:a5:09:3a:ce:43:5c:5d:0b:6b:75:
6e:fd:a4:a1:5a:d6:ea:75:b6:0e:1c:66:f6:95:3c:
2f:42:cd:02:72:96:b0:b4:5e:bd:f7:57:a7:b7:bc:
6b:e4:78:7c:63:39:5a:23:82:66:37:c0:05:33:83:
78:92:e9:aa:28:d6:a2:d2:e2:33:6f:a7:0e:f9:cc:
e8:1a:bb:5f:34:cd:93:95:64:3f:8c:e0:19:fd:4e:
db:d5:dd:48:6f:91:e8:d6:8f:3f:d5:4d:a0:b5:b3:
83:97:0b:67:ce:e4:dc:3a:39:79:a6:c1:a8:3b:fc:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:CD:15:80:8A:86:05:E8:BB:B4:2F:DE:52:84:2F:F4:5B:4D:D4
X509v3 Authority Key Identifier:
keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:75:eb:9e:5d:dd:f2:6f:0e:f8:64:da:2b:98:26:c0:df:
16:ee:42:d0:b9:97:d4:8c:e2:38:ad:5f:2a:cd:5d:72:78:d8:
1e:56:5a:25:3d:0e:8e:93:9c:49:55:92:a1:06:1b:61:78:53:
fa:5d:85:23:39:92:25:95:c5:19:3d:34:52:33:ee:8f:36:a5:
ed:1d:ca:55:2d:40:3b:8b:39:a0:18:14:ad:d6:a5:ad:bc:fb:
f4:a1:6f:18:fa:d8:41:15:64:34:3f:df:3a:42:02:3d:2c:1e:
f8:0f:01:9b:28:69:24:e1:86:39:f0:e3:de:9c:02:bb:25:24:
bf:69:f1:a5:8d:fd:5d:0f:eb:21:77:57:26:56:51:43:d8:cc:
19:32:7e:8c:8b:0a:b3:1b:f8:2b:70:2d:9d:df:45:83:47:ee:
f3:6c:c9:66:ff:89:e0:78:66:ca:27:d7:1e:f9:43:63:4d:be:
14:48:b8:dc:75:47:6a:3c:ba:8d:98:81:90:6a:b1:f2:1a:60:
e6:1f:66:d5:8e:d6:f3:60:6b:ae:30:9b:29:3a:05:a9:b1:80:
1b:42:f9:7e:d1:7b:00:3f:05:6e:41:68:41:18:33:09:3f:bb:
ef:df:26:d8:62:20:16:86:62:e3:56:0c:31:f5:3d:f9:37:91:
12:c2:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client