Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: gn3YKl4XomzERVQgaJYW3FgiJwrLqdRGiePVKmAp8M8=
Subject key identifier: A0:2C:B0:59:14:62:EF:33:66:5C:CF:41:1F:96:8C:39:17:26:42:C3
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 019D37C10968CEA3DDEDB04F717C9829F439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: 0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa (hash: TZA+evGUSrxkMyqk95k24o509cA93t42uHVcHnI4ehI=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: fmdA5Kd1s51dgvIN0YfGZSf6ZSlypTeveWIhsz/63eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:09:68:ce:a3:dd:ed:b0:4f:71:7c:98:29:f4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=a02cb0591462ef33665ccf411f968c39172642c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:20:0d:72:91:7b:b8:72:24:6b:19:07:3b:
52:a3:ea:2b:fb:74:a1:97:c5:52:e7:18:78:19:5b:
84:f8:3f:18:88:30:ef:51:43:4f:36:69:71:58:24:
1b:57:20:aa:5f:48:59:82:ab:fa:92:f8:5a:93:64:
46:fa:f6:49:6d:62:ea:d0:34:70:8e:f0:ac:7e:c1:
f4:5b:6a:d1:fb:79:49:63:c9:6b:da:63:b2:d1:af:
8e:cd:92:8d:51:33:f2:a0:10:f7:04:cb:ed:91:f9:
66:f9:8d:66:ff:ea:a4:64:e8:c3:fb:90:2e:44:52:
49:a6:25:b3:cb:ac:88:df:a6:50:7c:21:3e:f0:b3:
b0:d6:e5:d4:8e:e0:c5:9f:6f:63:64:93:85:9a:3e:
2b:fd:12:37:fc:c6:16:de:9b:22:d3:27:7c:42:37:
70:9f:1d:c3:43:0d:39:78:ce:80:31:4e:fd:70:4e:
55:4a:71:ee:d1:c6:82:95:6d:cb:9c:52:09:3b:98:
5b:09:44:7e:d9:a2:07:67:ee:74:61:00:37:a1:09:
5f:35:48:20:d5:c8:c2:6d:b6:9c:e4:81:4d:75:05:
2f:a1:70:07:ab:2f:98:77:a8:f4:68:94:d9:05:b6:
0a:9e:37:20:b8:74:8f:8d:cb:af:db:6e:d2:f1:62:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:B0:59:14:62:EF:33:66:5C:CF:41:1F:96:8C:39:17:26:42:C3
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6e:1c:20:67:ba:dd:45:06:f7:0c:98:28:e1:05:97:e7:68:
74:e4:d5:25:ba:b0:d3:b8:68:26:af:45:8b:4f:ed:d1:1c:45:
9b:1d:28:1b:c6:2f:17:d7:a5:95:b4:1c:f4:48:42:50:2b:43:
bd:07:a9:48:68:68:90:13:f2:d6:ca:3e:d2:48:54:58:78:8c:
19:d6:7d:68:e5:f7:2f:f8:b9:8d:db:14:de:63:a1:81:cb:de:
f6:d9:6b:31:cb:e3:8f:80:84:c3:f0:24:9e:e7:53:b1:dc:4b:
b3:d8:ef:64:fb:01:c6:d8:d4:51:bc:b0:e3:4f:cc:7c:79:ff:
fd:c3:50:86:6c:09:91:5b:37:dd:30:68:f2:ef:72:2e:ed:8a:
8c:eb:af:be:72:75:f6:40:07:0c:d7:9f:79:29:d9:a5:71:91:
ef:86:ba:a4:9e:f1:84:ef:4c:2b:2f:1b:71:53:b1:c1:a9:26:
75:b0:cc:f6:88:22:f1:8e:c4:c9:a9:6b:7f:ab:30:2d:7f:38:
4a:3c:ce:cd:e8:f4:62:9e:3c:31:31:50:6a:5c:ac:a7:25:73:
c2:d0:d2:3c:a9:ae:f6:f3:dd:7f:b2:05:83:d9:58:30:60:0f:
a4:b5:c0:8a:a1:b8:22:1c:43:ae:4d:1f:94:db:60:26:9b:bc:
63:b5:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:40 2026 by rpki-client