Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: L+hu3fK6ZdeqoLUe7VfVMGmp7POT60+qqtQCdQtHR6Y=
Subject key identifier: D2:D2:B6:B5:E3:7E:7D:2F:18:E5:6A:82:AB:89:25:51:D3:B9:87:32
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019CE335659653F3F874FA687AAC3A741F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 18:00:53 +0000
Manifest this update: Thu 12 Mar 2026 18:00:53 +0000
Manifest next update: Fri 13 Mar 2026 18:00:53 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: BhBLw+f/vqV3x/lbglg1FHSWJT2G60kZIpQeWLknsCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:65:96:53:f3:f8:74:fa:68:7a:ac:3a:74:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Mar 12 18:00:53 2026 GMT
Not After : Mar 13 18:00:53 2026 GMT
Subject: CN=d2d2b6b5e37e7d2f18e56a82ab892551d3b98732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:a5:90:ed:32:92:5b:2a:ce:5c:03:fc:0b:
af:c0:69:04:e4:c5:6b:90:84:61:a8:0b:c0:24:5d:
73:73:07:2c:3b:c0:36:08:e0:6a:81:2b:ae:48:7f:
2a:ac:42:51:f2:72:3a:4a:ca:9a:38:c8:2f:e7:55:
b5:c8:e1:d9:74:a3:d8:09:a8:17:ef:bc:e4:3f:b2:
ca:c3:66:86:9c:ef:47:07:d0:e9:07:97:11:ff:77:
a6:63:05:84:a2:38:b8:b5:22:f5:bf:7d:ee:f4:be:
8f:02:07:06:b6:b2:9b:ea:3d:41:d6:18:ff:3b:99:
de:3b:1a:33:2f:84:a6:b3:71:70:3b:e7:63:6c:8a:
3d:17:f6:45:17:2f:c5:77:6f:89:9b:41:e5:29:37:
0d:9a:5b:5d:d8:7f:34:22:11:9a:af:ea:ea:f2:1c:
e1:88:3d:7c:8a:e0:97:1e:c7:03:91:eb:5b:c3:1a:
5b:9b:ca:c4:6c:b9:27:59:50:02:43:27:a3:ff:9e:
0b:98:30:eb:d2:4a:89:d2:3d:ce:a0:bb:1b:d8:14:
2b:b8:a8:d8:60:a9:d0:1b:46:f6:aa:d3:cb:43:21:
49:a1:6e:88:0b:84:5a:e4:e4:44:f8:80:dc:11:6f:
91:46:c0:2b:f0:2a:92:b1:1a:e6:fa:be:15:01:16:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:B6:B5:E3:7E:7D:2F:18:E5:6A:82:AB:89:25:51:D3:B9:87:32
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:a0:18:93:c9:43:e7:24:e8:a8:56:c9:cb:b2:da:f0:dc:
5d:7f:8f:55:b4:0c:02:ab:8b:d8:31:25:27:cf:57:41:08:e8:
8c:11:4b:ea:12:24:14:df:64:c9:8c:4e:7a:22:06:0f:7e:cf:
38:37:7d:24:35:dc:11:d8:99:d7:30:57:f6:56:6c:0b:19:ec:
df:5f:ba:1b:86:92:58:74:73:d2:a0:a0:47:e1:b9:0b:a4:9a:
97:09:e7:f4:72:74:eb:e1:83:1d:3f:04:c3:7d:37:32:85:27:
ba:a0:7e:02:d4:48:a5:87:77:93:a9:58:94:65:90:e5:22:1d:
4e:15:1c:d2:a5:be:a5:80:f8:2f:cc:63:95:60:6c:2b:4c:dd:
ad:fd:92:88:cd:1c:8c:de:eb:ec:e8:d2:b1:fe:09:f2:07:22:
4a:a6:67:b6:81:10:18:cc:79:ce:fa:d7:c9:11:78:6f:7a:0c:
12:24:f6:79:8e:e5:70:53:94:94:ad:93:5e:6c:30:ca:00:13:
bd:94:d0:b7:94:99:89:3d:04:d1:ba:ec:e1:e2:c8:fd:36:aa:
15:5f:3c:63:d5:cf:af:7f:ce:3a:8c:92:5a:44:d4:88:fc:b0:
04:87:9a:cc:55:e7:d5:7b:56:7f:27:91:84:7f:70:00:52:3b:
05:17:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:13:01 2026 by rpki-client