Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: p2VvOTf4KSoH61rWr6yx7ZjECVOIHDiZkY7ksDKaRfk=
Subject key identifier: 3E:85:D3:E5:29:9C:85:C4:40:D6:21:10:84:EF:0A:AA:23:C6:61:1F
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019D38D2D580C53FA75465F3E4CBD2FB48C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 0859
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: rVO37CdUQiDsPnPUBWkJWEN8yHU.roa (hash: zSEofIQOLxbgh2NSVkGuDXmZbljjzQDcpH66ByIJTs4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: Zr8rqthbZntFXDgJX7a+Ew5rULXBbkMMYSa8wNyhV4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d5:80:c5:3f:a7:54:65:f3:e4:cb:d2:fb:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=3e85d3e5299c85c440d6211084ef0aaa23c6611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:d7:16:8f:35:a5:0f:27:cb:60:bd:33:e2:
7f:33:14:26:39:12:e1:59:b6:0e:77:73:bc:30:72:
39:ac:d8:ac:1f:33:39:d6:ba:d7:41:28:d7:cf:bd:
61:fe:db:5a:c6:85:65:1b:09:04:78:9e:50:10:b2:
f1:71:24:6a:ed:74:bd:89:ad:05:2e:84:8e:b2:00:
91:1c:4c:83:bd:9a:4b:51:32:c8:0a:02:c5:32:16:
8d:a1:28:b7:3f:63:57:c2:91:fa:b5:04:8a:0b:6e:
ca:48:c2:cd:60:48:63:bc:ef:0a:ce:3a:56:c2:19:
92:2e:96:e0:e2:f4:e4:9e:ce:7c:ba:df:41:3d:dc:
73:ae:83:6f:99:4c:48:9d:c7:5d:1e:6d:cb:82:0c:
d5:cd:0d:40:39:9c:dc:44:49:ee:5c:b7:ff:18:1e:
0b:d2:5f:51:d2:56:5c:e5:17:a0:e3:07:64:dd:11:
b7:bd:38:1c:c9:d3:d8:2f:30:f8:f1:33:f0:2b:0d:
ad:55:1c:ea:e2:56:3b:a4:2e:0e:08:4f:57:62:9b:
e5:bc:ad:75:6e:60:2a:be:6d:c5:a0:24:ba:79:d7:
28:15:be:9e:88:5d:f5:88:dd:9f:17:ee:f9:42:a3:
f9:68:f4:1b:c8:b2:73:80:3c:c6:1b:1c:ab:b2:f4:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:D3:E5:29:9C:85:C4:40:D6:21:10:84:EF:0A:AA:23:C6:61:1F
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:81:d4:f2:e6:dd:50:77:1e:67:45:f4:f1:fa:97:e6:5b:
b2:44:a8:52:c8:55:35:72:8b:2d:ff:cc:1c:59:d1:cb:5b:85:
8b:bb:51:99:35:cd:6d:28:dc:b3:69:4c:32:ac:8d:64:87:7f:
0d:6b:54:bd:41:ac:81:77:26:df:6d:a7:bb:06:38:7d:90:dd:
de:ae:08:65:7c:fe:d0:22:d5:68:e6:55:3d:ef:c1:0e:01:49:
7d:aa:bf:a2:b8:8c:31:35:4f:4f:bf:3e:f6:c7:39:4e:13:30:
95:f4:5d:2a:c8:81:92:dd:5f:e1:1c:1a:ec:ec:a1:22:99:79:
38:52:27:b3:cf:43:48:3e:05:f8:70:a9:fd:63:5a:04:a7:4f:
ff:31:7f:99:c7:fc:46:f2:46:10:53:8e:b0:ee:30:be:ac:e3:
00:4e:aa:3e:7b:d1:18:63:58:da:25:3b:fc:6e:ae:cc:11:39:
04:3f:5a:bd:4f:02:07:61:b4:0b:ff:c9:82:db:29:77:ba:ad:
65:c0:23:e6:80:23:64:05:ea:4b:1a:cc:9d:77:82:38:3b:df:
cd:52:64:79:39:65:a3:1b:55:d9:99:b4:11:76:80:ef:71:cf:
d7:1b:be:9e:67:52:96:c0:a2:03:53:2b:7b:0e:2f:c1:54:a6:
97:3f:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:47 2026 by rpki-client