Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: 7Xcnx4mwZlxSJ0YCDjcscjLhllJewHc/wfMuob03wdo=
Subject key identifier: 23:E3:8B:4A:63:EB:21:89:AE:D6:F2:6F:BF:02:C2:46:2C:73:64:69
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019D38D2FCE56A37CB3BC5175CA55A1BE5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0141
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: pyKYl/BdmcTSpZEwP6iGt9ZUyq3z3I/E+66LuQAvVbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fc:e5:6a:37:cb:3b:c5:17:5c:a5:5a:1b:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=23e38b4a63eb2189aed6f26fbf02c2462c736469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:1e:a7:c6:f7:20:54:d4:c6:59:1c:9e:42:
39:c1:c9:1c:05:22:16:43:30:27:04:48:35:28:59:
00:d4:bc:c7:90:e6:b9:22:91:3d:51:81:20:fe:2d:
b0:20:5a:d9:15:45:fc:40:a8:9d:74:17:fe:94:f8:
97:01:58:07:1c:d2:f8:57:93:18:dc:75:af:39:6c:
5a:13:a6:e6:fd:1f:88:8c:1c:36:dc:5b:df:76:71:
e6:ec:4f:46:ab:97:6d:29:58:fb:ef:81:3d:a1:8a:
1c:ce:44:81:53:25:37:b3:14:f7:57:3a:e1:cb:90:
d6:83:b5:5d:4d:13:8b:f8:c4:74:f2:db:21:7a:5d:
a0:98:a5:5f:82:9d:49:14:d2:33:8f:55:02:e0:d1:
3f:33:26:82:70:be:c0:b8:44:22:f7:1a:7a:c9:5b:
0f:26:27:08:32:53:13:76:ec:eb:91:aa:52:5d:1c:
fc:b6:55:ce:29:3d:50:c7:a3:c1:20:5a:3b:e9:f4:
0c:30:3b:07:fd:65:43:fa:c2:2f:86:95:aa:79:8c:
7a:97:c3:5b:1d:cd:2c:b1:be:0d:31:a7:21:fb:5f:
2d:7f:26:f6:1f:42:c3:bd:be:37:da:06:0b:98:a4:
4b:97:9c:68:5a:fa:54:bf:b1:53:45:e3:06:e9:e9:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:8B:4A:63:EB:21:89:AE:D6:F2:6F:BF:02:C2:46:2C:73:64:69
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:45:3a:3d:e9:67:34:75:8c:a4:39:f3:1a:46:ad:3f:4b:0b:
7f:9a:c0:14:05:5f:a7:a0:ac:a4:0b:8e:ef:94:ba:3d:3d:53:
71:04:9e:52:67:a9:fc:a1:fc:49:4f:27:9e:61:d7:31:26:89:
12:61:6e:cb:c5:f8:b3:67:72:97:71:53:6a:3f:35:0d:3a:a1:
a6:61:b7:bf:cc:0e:e2:09:f4:e2:aa:8f:49:86:7f:64:7a:77:
8b:40:c1:90:6d:c4:7a:ec:59:89:5e:4a:e0:f3:b7:de:25:0d:
cd:51:58:1c:fd:a9:72:46:c4:62:b1:77:4b:bd:c3:5f:0f:55:
e8:87:8a:c1:ae:a2:5e:5d:92:66:cb:aa:87:a4:db:93:8a:f3:
74:4b:2a:ea:35:82:fe:76:5c:d0:be:b0:4d:c2:84:2a:d7:e0:
c7:5a:51:89:79:70:83:a0:1b:95:ca:d4:72:8b:3e:e3:1f:3f:
85:ad:8c:2b:26:f2:a4:51:49:37:4c:fe:40:e0:63:a1:d7:6d:
a8:73:21:ac:03:11:e8:8b:78:91:1f:19:9f:84:b4:39:1e:1c:
7f:b9:d4:52:14:3b:ca:1a:2b:60:c1:4d:95:3e:7c:de:f8:42:
7d:a5:f3:94:b6:e7:ff:97:5a:d1:1e:ac:8a:36:19:b0:b4:5c:
74:58:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:07 2026 by rpki-client