Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: //ATmb0Fgjvz6k0vE2pLIHU+wxIsDr0ilgoAL7e0Mg0=
Subject key identifier: 0C:6D:67:23:B1:9D:AC:B5:31:D0:B0:6B:FA:A1:EB:28:A8:C4:69:ED
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 019D38660B101AC9C5EDC237B934F62D4B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 0D46
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: RkG3qch8pEJIDv3JOGIWd52X2iU.roa (hash: M5MoWtPVqA3Ex0e6k8hDbIXhQvvVk+rf1YW1Yh7X0/M=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: h6Tlgv3rOERbnYD4h4iG3kbvhrGJtFEcP+I6mvQ+49o=)
3: dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa (hash: L1i0JRO7qbrA6QVK9ZBM3Dv/eB/asOSRW10wtAZmW+Q=)
4: koMekijqP-w-hV1xkItLMIte5TI.roa (hash: qrmsUlbTAaKkSWTEyxYUk3wrBnnPPwrk02ct3U7Q8vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0b:10:1a:c9:c5:ed:c2:37:b9:34:f6:2d:4b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=0c6d6723b19dacb531d0b06bfaa1eb28a8c469ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:a1:73:5c:fe:3e:bf:87:91:4f:50:c5:60:
2c:d8:35:b8:d9:af:7f:f7:13:de:db:94:de:bd:45:
84:4b:90:b1:80:7e:d2:61:34:5c:22:87:f1:28:7e:
ac:6b:db:ee:98:64:2e:3f:4a:3f:8f:47:91:17:15:
6c:6d:c8:56:db:53:39:88:cf:d9:11:17:50:cc:d8:
93:ed:c8:7a:0e:44:d7:a0:68:77:a2:10:c8:79:2e:
75:03:4a:73:bc:f2:dd:80:66:81:70:5b:0a:87:b1:
7b:35:5f:29:bd:41:06:89:2c:f3:b6:1f:69:c5:4e:
c4:c2:03:51:38:0c:20:23:34:c5:77:93:1b:48:2c:
58:f6:27:f6:28:1d:01:99:be:b4:3e:aa:c5:22:21:
7a:0b:b8:0d:ab:e6:78:91:ad:bb:7d:88:3f:9e:cd:
1e:1a:6b:65:b3:ed:92:5c:db:53:e7:0c:f7:39:39:
7f:8a:8c:b7:ce:ec:31:d1:6f:c3:a4:8c:ca:a0:ba:
38:43:ab:db:55:6c:da:1b:09:c0:5c:fd:f2:19:49:
ca:b8:cf:6c:3f:c7:cf:c1:0a:e0:96:2e:bf:28:56:
f8:e0:40:c3:1b:71:a7:a4:2d:ad:c5:1c:58:80:3b:
4c:89:38:33:7a:72:9d:03:57:ab:e8:a1:c4:63:3c:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:67:23:B1:9D:AC:B5:31:D0:B0:6B:FA:A1:EB:28:A8:C4:69:ED
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d2:29:56:e3:8a:7a:da:bf:c7:ab:b7:dd:f5:6d:fa:ba:b9:
22:3d:92:4c:a5:81:e3:55:c4:d0:85:e1:59:3f:97:cf:9b:03:
82:26:e7:af:5a:d1:be:d0:21:b3:66:a7:65:7a:8f:4b:1c:11:
17:34:69:0d:48:9e:b0:ba:85:34:19:f2:92:40:48:99:20:98:
05:b2:76:22:08:a5:a8:43:a1:09:2e:c8:7e:5b:22:68:7e:ab:
0f:6e:f6:24:bb:95:6c:64:10:7a:c1:9d:9e:e2:36:d7:d9:2c:
c0:00:48:51:0c:a0:e9:4d:d5:e3:4e:36:da:78:5c:c1:b3:cc:
fe:c9:f5:7d:00:7d:20:c4:0f:74:ca:f9:79:ca:fc:f6:c7:12:
0c:3e:f6:6c:19:b4:cb:4c:dc:06:3c:8c:79:22:c0:d8:27:9b:
43:4d:ca:7f:81:2a:39:1d:67:f7:9a:b0:cd:66:ed:c7:61:ee:
96:08:2a:cd:d2:da:66:f0:fb:00:b7:5e:96:d8:3e:7a:d2:f2:
f7:de:e9:78:7f:11:59:ac:25:b5:23:2a:88:3a:0e:3b:0c:20:
b6:a3:51:aa:a2:80:fd:08:fb:d8:e7:6a:6e:68:9a:2b:ac:56:
13:1f:51:7a:40:8d:e6:3a:58:d6:3f:9b:77:bb:f4:a9:f2:5b:
7d:66:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:43 2026 by rpki-client