Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: 3ugqmcAjEgGuNnlGUx453YRyFcHWJyF3qzxwOtdbIcQ=
Subject key identifier: 3D:A6:6E:C4:F3:87:05:83:C6:A8:01:E6:41:25:F3:EE:E6:18:E6:20
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019D37C0268418E7435789450CF9E29C1A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 02BD
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: r5BdorKkw4C3Tkma9x2DQVOgfqS9NfUAb6v0CBTaunY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:26:84:18:e7:43:57:89:45:0c:f9:e2:9c:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=3da66ec4f3870583c6a801e64125f3eee618e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:aa:49:8f:d1:1d:18:99:50:2a:69:29:de:
0b:98:aa:a8:c7:28:cd:a8:e2:23:6c:f6:cb:25:d1:
56:d3:d0:f9:11:b7:8e:05:1e:b3:8e:9f:a5:a1:d2:
e8:17:8d:5a:a2:22:c7:27:1e:85:28:99:74:81:25:
3e:9d:40:1d:ab:3c:18:43:d2:1f:e0:69:09:95:4e:
fd:a3:ed:76:62:a5:ae:43:88:4f:2d:57:4f:cc:06:
80:17:6c:e4:89:cf:96:ae:c4:03:aa:00:a6:2e:5d:
05:df:e6:69:be:dd:65:62:a5:c0:b7:f9:98:d9:9a:
07:04:62:55:56:50:3e:b7:85:f2:c1:2a:6d:0a:32:
2f:66:cb:1e:78:7f:6b:ce:3e:21:3a:49:99:02:52:
ba:3a:1e:d9:67:9f:bd:96:55:b4:3b:19:bf:e8:d6:
3e:a5:a3:e2:59:c9:eb:60:79:15:58:1d:34:86:41:
90:2d:6f:ef:92:a2:77:12:fd:12:a9:3d:51:ef:b9:
23:59:e2:b2:d2:f0:cc:80:46:dd:ce:7d:d0:a6:8b:
72:9e:bd:7b:5f:18:0c:40:5b:02:73:11:9b:c2:8d:
b5:ed:59:89:c8:fa:dd:45:21:ba:70:1b:d7:9b:89:
40:bf:3f:b8:07:73:a2:11:7a:5e:45:7b:db:94:7c:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:6E:C4:F3:87:05:83:C6:A8:01:E6:41:25:F3:EE:E6:18:E6:20
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7c:6e:3a:79:ff:1e:05:fb:af:b6:5d:e2:72:32:f0:8a:0a:
4f:9b:7d:fa:48:1f:bd:ff:a9:b8:25:a1:fa:69:05:e1:8f:6a:
ab:c1:08:f8:bb:3e:39:86:3a:54:0b:2d:6e:86:ca:cc:e5:f0:
80:eb:e3:18:f5:38:2d:6e:89:1d:16:de:18:90:99:3c:6e:14:
cb:8d:e5:0a:2f:92:a5:5d:d0:89:28:1c:3b:0a:a8:7b:3f:69:
a9:7a:6a:84:33:24:56:ad:2e:ad:c4:63:95:13:00:08:13:35:
df:e3:78:36:a9:cd:17:f3:85:66:40:75:84:f1:0f:5e:2d:15:
ee:fe:70:cd:c1:b1:e8:ae:7b:62:6d:5d:21:2f:65:d9:ea:01:
7f:38:a7:51:01:88:fc:93:48:3b:60:c0:f6:1d:de:1f:d4:0c:
6b:2a:21:85:9a:b1:7d:aa:eb:a8:34:a6:ed:47:a5:dc:2b:f5:
b0:e7:94:e2:87:b0:93:ce:a4:d5:ba:37:6c:1d:84:89:61:a7:
4f:89:8a:69:7e:e3:8f:d3:52:4b:e9:d1:21:8e:31:3e:88:22:
9c:6f:ff:69:8e:fa:cf:b0:5c:d7:99:56:42:76:08:bd:8f:67:
d1:5d:7f:63:a4:65:e1:eb:f8:a7:af:bf:ed:0b:78:76:61:04:
23:ca:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client