Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: 9REUCb/UvCZKfnF69JDqmMAVHx5KwH0atX0/2GdCOPE=
Subject key identifier: 8C:35:75:FA:40:AD:4B:07:DF:F3:37:05:12:85:69:AE:B0:56:EA:E1
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019D390A3453F7E20F026A4674DF354B5AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 0445
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (hash: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: rTtPDHjvklB0qKEVjIv2OpZCC1NIrgXEsWmT6oaM6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:34:53:f7:e2:0f:02:6a:46:74:df:35:4b:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=8c3575fa40ad4b07dff33705128569aeb056eae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:10:85:01:3e:68:eb:38:f1:ed:1c:4c:25:
c9:35:e8:02:e4:65:45:35:11:ba:c2:f1:5f:f8:e2:
47:ef:4f:a2:44:24:4e:a2:4d:95:b4:ba:50:46:39:
a1:a8:4a:06:84:77:9e:89:cb:82:51:42:f0:57:3b:
3e:ec:29:51:e8:8f:57:b1:ae:98:f5:9d:13:3a:0e:
63:d3:66:30:a0:76:68:b5:39:43:1c:01:eb:0e:95:
8f:df:cc:f0:f3:20:c4:75:fc:47:02:4b:53:bc:e9:
b8:b2:cf:cd:62:86:2a:1e:ab:6c:12:c0:fa:48:eb:
44:df:55:48:a0:53:92:d2:fb:da:00:af:bc:f9:99:
e0:e1:de:f2:75:1b:a7:6d:1d:ca:8f:db:26:99:ee:
03:20:d5:de:4e:2b:39:6d:82:63:19:70:24:2b:8e:
dd:02:c3:b5:c1:a8:55:e9:c2:aa:97:56:e0:3f:f9:
1b:80:ce:99:03:ef:45:5c:38:bf:ed:57:cc:65:3b:
b7:16:b2:ad:fe:f8:11:b9:a6:de:52:e1:3a:8f:69:
0d:60:54:30:aa:f9:25:2f:3a:0e:38:dc:64:eb:31:
de:f8:97:17:95:8d:d8:3e:eb:8a:89:bd:e1:fd:75:
62:78:f4:c6:00:b8:66:68:33:a4:18:7f:46:6b:1d:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:75:FA:40:AD:4B:07:DF:F3:37:05:12:85:69:AE:B0:56:EA:E1
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5b:6f:c3:3b:f1:9c:6f:1e:ae:bc:63:13:4f:4f:6d:06:a4:
33:97:f0:2e:eb:fd:7f:f0:2b:82:77:b4:3d:5a:05:49:e9:a5:
94:23:3d:76:3e:a1:d4:84:e8:57:a7:fc:84:20:6f:96:66:39:
71:bd:a4:13:cc:62:a5:1a:d6:25:5a:42:42:83:91:eb:03:ec:
df:5b:e0:80:d8:e5:23:37:72:b7:2c:2b:8c:53:ce:ce:10:2f:
74:77:8b:d0:a5:5e:3f:d9:c5:42:fc:45:96:af:d4:96:d2:cd:
57:d7:39:f4:7a:91:03:b5:26:b2:b9:40:7c:0f:24:14:85:24:
7f:09:14:78:20:40:31:40:5d:93:51:b8:30:6c:47:7e:d3:b5:
2e:7f:33:da:f3:a2:28:47:44:47:55:d3:b6:63:5e:9f:30:54:
25:3e:f4:12:65:e6:4d:82:5b:34:d8:cd:32:d1:25:6f:1f:b5:
76:3e:3f:f5:73:2d:90:6c:b4:03:0e:60:40:48:65:0c:16:8e:
f9:55:4d:60:45:ae:91:2a:7c:bd:31:d9:ae:7d:c5:ea:9e:78:
35:ae:5f:e6:09:fd:ba:5b:97:2b:07:92:d5:91:b4:69:b0:59:
9d:76:72:3e:a2:11:18:ac:9a:e5:d2:46:53:43:eb:d5:7f:ca:
a2:5c:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:34 2026 by rpki-client