Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: hn+lCN7nt5/oz7GEcL1fshoPqz2ybkhy1bbI+zv95d8=
Subject key identifier: 36:86:C9:B4:4C:5A:6D:14:08:B4:89:AA:F0:8C:C8:2F:CF:8A:78:AC
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 019D3977769590F6D098F4AC72FFC0E4DCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 12:00:23 +0000
Manifest this update: Sun 29 Mar 2026 12:00:23 +0000
Manifest next update: Mon 30 Mar 2026 12:00:23 +0000
Files and hashes: 1: ro9Q9RFKhgezIN_wav4dR-eXoZw.roa (hash: bgN32+4ndLdWd2BsCVHxOm8hcnK6B9MsF19ZhVaVHsY=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: 7K+hvKvnFQ9B4p2K7enapRt+bZJeBhE9KjksdqDSpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:76:95:90:f6:d0:98:f4:ac:72:ff:c0:e4:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Mar 29 12:00:23 2026 GMT
Not After : Mar 30 12:00:23 2026 GMT
Subject: CN=3686c9b44c5a6d1408b489aaf08cc82fcf8a78ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:05:04:df:56:84:aa:af:a7:c7:b6:81:67:
b4:5b:59:ca:6d:df:25:9b:78:a4:b6:8e:f1:12:0a:
06:eb:c5:b9:df:db:ac:a6:1c:e1:6b:6f:75:7f:85:
be:84:e6:f1:c5:ae:d8:66:47:5c:36:82:71:a1:ba:
a1:a6:c8:b1:83:f2:29:ac:64:a2:10:ff:02:5d:44:
95:5b:d2:bf:9e:14:fa:28:eb:23:1c:db:7f:b6:9a:
ca:66:07:d6:a3:56:b3:9f:4c:9c:e1:64:0d:be:02:
4b:70:1c:48:53:bc:c0:12:0e:bc:42:9f:02:4d:ff:
7c:16:5e:a4:ca:dd:67:2f:d7:28:5a:fd:a0:d8:86:
19:d2:af:e2:b9:a7:cd:9e:5f:98:31:09:30:03:e8:
de:2e:cd:21:3a:77:d0:5f:cf:1a:f0:73:9e:b4:46:
f5:27:49:67:15:11:7f:58:c0:7d:57:fc:d2:79:33:
8f:30:13:33:c3:fa:8b:a3:82:b0:a9:ce:3f:34:0f:
f2:c4:6b:b8:5f:22:31:b1:c2:4b:ff:f7:fb:c6:29:
d6:92:3b:9a:e1:0f:90:a9:be:ad:68:a4:ea:0d:61:
7c:08:66:a0:f2:06:18:a1:65:27:80:c0:32:08:fb:
ce:92:ee:a0:1d:bf:ee:96:3b:2d:b2:e8:14:80:d1:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:C9:B4:4C:5A:6D:14:08:B4:89:AA:F0:8C:C8:2F:CF:8A:78:AC
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:cd:a6:df:3f:3d:b2:fa:4d:70:9b:32:a8:cd:06:6e:e5:
bb:71:f6:ed:69:28:e9:42:18:b1:5c:91:79:8c:12:32:ac:19:
14:bf:e2:59:d9:fc:5c:74:b6:90:6f:1f:b2:42:c8:ae:83:e9:
17:0b:34:9b:65:f0:4d:fd:36:7b:45:00:63:dc:0c:40:ca:9d:
da:78:d9:be:6b:1b:a4:50:31:c7:2d:90:2d:0c:89:5f:0c:67:
4a:21:c7:e7:36:a8:3f:54:b5:41:9e:4a:a4:fe:6a:86:18:f6:
b4:b1:8e:41:9f:73:82:c0:69:60:9b:14:69:31:bf:e9:70:5b:
33:dc:b2:58:85:c1:ef:97:ba:47:38:ea:3b:d0:61:97:ef:69:
e9:42:70:19:44:54:c9:0d:0f:cc:3a:79:47:63:b5:a4:2e:08:
fc:12:9d:28:5b:80:d1:a1:76:43:b2:4a:59:f2:d9:30:01:ec:
b6:4a:97:3a:a9:93:78:32:65:d1:e0:e5:6f:6a:02:e0:42:ca:
c3:87:c5:3f:81:d8:da:44:8e:a3:8e:ba:0a:32:54:ea:45:68:
2f:23:ef:1c:ad:20:e4:51:ce:e5:fb:2f:e3:7a:bf:87:8b:6e:
71:b6:1f:16:5a:33:5d:6e:49:2c:49:21:70:c2:9b:3a:1c:f7:
17:0b:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:02 2026 by rpki-client