Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: oQeZfhNFR6kgCDvuRVUOzSpm1VXd2heHRIy1aRMfcPQ=
Subject key identifier: A3:AB:E8:74:F6:11:10:28:CF:88:20:26:74:E4:82:F8:41:BB:DB:EF
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019D37C0150E8787B7C026134C842DB4DE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 1041
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: m5cCxh_PhsabAGIRJfH-lY0-6rI.roa (hash: sPrlMxEkxZrDcF6KQs3latR2l78VhegB/Bdy2kmEXaw=)
2: seVR3O1dae1fOLAeXT1ZaF261rk.roa (hash: JmrPbibwTZTU1bBXfvUDUkidxKjk9p3hVn5swMWj1a4=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: n5wGxm5cfPLOVrszLO74gMEpU5TiDasHyqueFOFuYeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:15:0e:87:87:b7:c0:26:13:4c:84:2d:b4:de:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=a3abe874f6111028cf88202674e482f841bbdbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:48:52:84:b9:a5:57:ec:bb:9f:82:8c:5f:
06:f6:f2:4e:d3:97:92:06:e6:d2:82:d7:8a:85:94:
02:77:a0:97:03:59:e0:fb:5e:34:34:9f:59:15:f2:
c7:db:e1:9b:aa:8b:38:1b:3b:ad:3d:d2:41:81:18:
21:ca:fb:e5:86:29:88:7b:0d:03:74:b3:1f:6a:2d:
cc:0d:88:0c:04:60:da:98:e6:70:18:07:6a:0a:b6:
9f:4b:8f:e0:a2:de:be:eb:1a:3b:71:60:7f:9a:0d:
2c:1f:50:b1:e7:d4:b9:f8:07:01:76:51:1c:8e:49:
bb:87:7b:46:7f:94:75:b3:83:db:51:89:c8:e8:83:
b6:96:f9:74:6b:69:4f:da:73:e3:99:06:8c:3e:07:
04:19:cb:cd:26:93:69:8c:dd:f1:4f:15:fd:8e:43:
c7:01:44:f0:7d:64:fa:d2:55:ed:ef:23:51:29:44:
4f:d8:22:5f:a8:93:04:9b:ce:dc:58:e4:d0:a1:a7:
85:8b:42:de:e2:0a:bd:a7:dd:f5:d2:51:55:f2:1a:
76:17:9d:9b:69:c5:b0:55:d0:04:42:f8:63:63:e8:
6d:8e:44:39:1f:38:2f:bf:35:7f:04:67:4a:3e:42:
4a:e7:01:de:da:4c:a3:91:67:02:16:f0:aa:16:6d:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:E8:74:F6:11:10:28:CF:88:20:26:74:E4:82:F8:41:BB:DB:EF
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8a:6a:85:47:3c:5a:5b:fc:5d:47:30:b0:e0:e1:99:5c:a3:
1b:d4:c4:4c:58:f6:4b:95:07:2e:af:ce:90:ac:21:7f:c4:70:
2c:83:a6:79:64:88:65:32:64:4a:d9:26:31:7d:df:15:29:a8:
87:c1:1c:2b:99:40:32:05:31:89:1b:66:33:e4:bc:98:50:7a:
cb:1d:c6:83:29:56:d8:ce:92:78:96:61:35:a1:36:e5:da:61:
f6:5d:9e:9f:29:aa:dd:aa:ae:91:5d:8b:15:3c:51:95:f6:d1:
5f:6f:e2:58:7a:04:d3:67:5b:e7:e9:bc:9d:bd:7a:80:8b:93:
f7:55:cd:73:1d:4c:81:b5:d2:37:10:a3:87:ac:d2:37:d5:e2:
57:17:7a:a1:46:33:e1:c5:27:17:f5:64:b4:cf:d7:02:2e:90:
f1:0c:c9:63:d5:e5:7e:47:37:d9:8e:3e:13:ef:db:4e:08:6f:
a3:04:be:cd:f9:50:83:d9:4b:1f:0c:b6:54:b1:bf:e6:f6:9b:
02:f1:fa:b7:2a:5f:e1:3e:d3:25:a2:28:a7:96:f8:bb:59:0f:
bf:f0:59:66:42:e4:c8:90:03:1f:57:3e:09:05:59:f2:43:d9:
0e:70:d0:1f:f7:fc:8e:3b:58:7c:e0:d3:44:85:1d:a6:d5:2f:
48:4f:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client