Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: wUtlhkgp6NfOt6+o4VVY0c44kx+9YfoRnmgqWqdM5M4=
Subject key identifier: 02:DC:35:0D:F3:F6:F5:DA:31:1D:7F:BA:39:C4:1F:ED:58:1B:49:57
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019D3752B2188FDF0E0DD3ED84BB491D2511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 09C3
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: Am59RKtvcUWqn3P2y01ATs8SdvDUUQlaNmXYn2IFQ5Y=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b2:18:8f:df:0e:0d:d3:ed:84:bb:49:1d:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=02dc350df3f6f5da311d7fba39c41fed581b4957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:b5:f2:c4:a1:79:d4:b2:2e:48:b2:b7:c5:
b4:dc:79:3c:34:72:eb:1c:b3:0d:ad:7a:56:61:12:
ce:9f:a9:c4:c9:75:77:5a:2c:38:66:04:1e:96:13:
38:b3:5a:2e:19:09:e8:46:88:54:c0:45:25:be:56:
fc:2a:61:a2:f9:60:56:d7:9d:eb:80:a6:62:e0:26:
c0:a5:ab:61:ce:38:54:9d:1d:72:27:a3:94:91:1e:
8d:63:1f:77:cc:d3:24:c4:8b:e7:e6:80:d2:1b:70:
47:bc:e4:24:be:47:d7:0e:40:26:3b:e7:6d:ff:19:
89:64:41:63:2e:a0:cf:9d:71:05:3e:31:20:81:c6:
1d:03:4a:db:23:fa:a7:90:8e:45:07:d4:14:bb:5f:
9b:df:7a:e0:03:90:95:6a:4c:94:71:84:8a:55:3c:
fa:e0:41:da:34:de:ec:52:35:92:2f:e5:e1:4b:ca:
e2:21:76:33:1d:9e:9b:21:12:f2:9e:cf:51:cc:31:
7e:9a:ee:95:ee:b1:68:8a:76:7e:e3:b6:e3:5a:4c:
f6:7a:35:98:ed:cd:77:35:a0:71:df:47:51:5a:79:
9f:30:eb:49:06:02:a8:aa:f6:7a:93:83:62:11:40:
42:01:61:47:ab:b7:63:35:14:01:8f:1e:b5:b9:1e:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:35:0D:F3:F6:F5:DA:31:1D:7F:BA:39:C4:1F:ED:58:1B:49:57
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:a0:49:06:81:21:38:98:02:ee:16:83:11:56:db:03:de:
8b:b4:8b:35:a9:cf:84:53:59:2a:c7:76:87:23:e6:4a:08:27:
03:04:b1:a7:e6:3c:dd:5d:28:dc:44:6b:9d:92:6f:b2:fc:d5:
e8:54:a0:01:ae:28:9a:15:12:69:5a:67:f2:b7:bd:24:f1:fd:
13:57:1f:42:3d:81:94:b9:8e:87:3c:73:6a:62:27:8e:ba:1b:
68:b7:88:6f:6a:78:db:e5:47:71:e8:32:50:4b:88:34:82:48:
0d:5f:d9:a6:09:58:94:de:18:c3:2d:c5:70:36:ae:38:30:0a:
4e:0f:fc:ca:04:56:a2:46:b6:22:c0:b3:f4:f5:bd:8d:83:c7:
32:3d:d4:25:ec:80:5f:c4:e3:da:ee:87:50:ef:9a:f0:7b:13:
05:d6:0c:72:83:ab:2b:f6:5f:95:92:f4:d2:6e:e1:4a:66:3f:
51:b3:50:97:f4:e9:b7:a5:e8:8d:20:42:d1:ec:18:1b:08:04:
cb:21:a0:39:a0:45:ea:98:98:99:67:92:2e:75:5b:e0:f2:58:
2d:95:c7:1b:52:b4:a0:17:63:3c:12:96:f9:79:d0:3d:e4:6d:
c5:d7:e8:67:42:0c:c3:41:8c:9a:b4:02:41:4d:3e:b4:b3:0d:
16:53:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client