Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: 8HRIDL+nLAplVPpaQUUSXDfGhqMyEy9iLMdK+NmIOEU=
Subject key identifier: D9:EB:76:63:78:0F:14:8A:E5:C8:03:58:8C:45:A9:B7:EA:F8:F3:5B
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019D3865A23C75AEA19DBCB9DBA899962096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 026A
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: JH9G1UNhWWOzQLdT0dbpsQn0YGi4M8zNbDKzwnYHlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a2:3c:75:ae:a1:9d:bc:b9:db:a8:99:96:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=d9eb7663780f148ae5c803588c45a9b7eaf8f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:b4:95:c6:33:ef:1a:5c:44:21:0b:a7:7e:
83:d1:b1:99:ec:3f:43:74:77:dc:bb:3d:80:cb:8c:
23:eb:d2:e1:f0:99:22:a1:f2:9d:ac:db:cd:1d:a8:
12:ac:b0:64:82:f5:74:ae:6f:8d:cb:a1:e1:cb:11:
d2:85:41:b7:62:18:a2:b2:31:6c:4b:a6:12:af:8e:
ab:cf:50:ae:3c:e3:6e:7a:71:fd:8e:88:50:e9:c5:
5f:94:84:d2:ba:e5:61:14:6c:44:4d:e3:d6:33:02:
1a:f0:35:86:80:0d:a3:17:fa:40:26:39:5b:8e:03:
91:0e:c2:64:06:3b:29:3b:17:e7:c7:f8:0a:43:6f:
48:c1:75:fc:fe:1e:53:71:69:dd:d3:84:df:7c:bd:
9a:db:3f:62:f8:3b:69:77:a7:bd:90:02:a2:00:ef:
cf:76:b2:b7:c8:02:e8:21:79:4b:65:f8:3b:a5:ec:
7d:1d:94:d1:99:03:cb:ea:63:bf:37:39:4d:b7:f3:
95:5f:f9:86:3d:4b:1e:17:0f:2d:9d:6b:0a:51:80:
11:65:0b:e3:18:c3:6d:c1:c9:66:f4:55:8d:ff:38:
75:5f:6e:1a:b7:12:8c:26:7a:e2:a0:59:e6:0f:6e:
bc:c0:2b:41:0c:4c:f8:0f:ad:ec:3b:af:05:7a:60:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:76:63:78:0F:14:8A:E5:C8:03:58:8C:45:A9:B7:EA:F8:F3:5B
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:bd:80:dc:a4:ea:4d:8b:a0:7b:28:f3:03:c2:29:a1:dd:
46:75:0e:7d:75:3c:fa:5f:37:d0:1e:8c:30:2e:35:72:ba:25:
0a:5e:bb:e7:08:8e:81:b8:74:9e:b7:e0:4b:7f:cb:94:a7:63:
2a:3a:6e:9e:26:e9:cb:3e:1c:09:85:77:e8:46:e9:e1:d8:60:
ed:6b:30:cc:21:00:ad:cf:89:f7:9a:12:c2:7b:19:66:b5:25:
48:8a:ea:08:53:62:05:53:63:e8:12:8d:00:00:16:50:21:0a:
8e:17:da:f3:54:66:c4:0e:dc:91:18:0c:cb:04:e4:8e:ca:3b:
12:91:e3:9a:de:74:c1:8c:7d:c5:f0:1e:fe:20:7f:8d:46:31:
78:ce:ff:73:e0:39:0d:cc:92:a2:1b:38:4b:53:a0:e3:03:28:
8c:81:98:06:aa:37:9a:ad:15:d5:9b:bc:2b:a9:f9:01:47:77:
01:16:70:2b:41:c7:08:c8:d7:47:61:3f:c1:2e:c1:2e:d4:ca:
18:15:81:e0:7d:35:4d:9c:f7:b2:b4:6d:80:fe:4d:26:aa:39:
a7:90:29:ac:bf:d6:53:10:f8:f6:a7:a0:01:b3:b6:8e:6f:05:
18:85:2c:0c:a9:96:01:fa:77:ba:90:f1:24:8b:46:4f:03:0e:
8e:83:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:31 2026 by rpki-client