Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: vpcuiCrm7at2/pyUlCiyesR7k+3SkfAVc8FIzPQMShc=
Subject key identifier: 8C:8F:C0:86:B4:2A:05:15:8E:8D:68:A8:7C:37:9D:55:52:2D:52:2C
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019CE47EE46907A725DD462E8FE278FAA16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0D1B
Signing time: Fri 13 Mar 2026 00:00:47 +0000
Manifest this update: Fri 13 Mar 2026 00:00:47 +0000
Manifest next update: Sat 14 Mar 2026 00:00:47 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: qSuiSWgeZJW5I86ua6RF26sd0p8lPcgLG/1STyTIxz4=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:e4:69:07:a7:25:dd:46:2e:8f:e2:78:fa:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Mar 13 00:00:47 2026 GMT
Not After : Mar 14 00:00:47 2026 GMT
Subject: CN=8c8fc086b42a05158e8d68a87c379d55522d522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:5b:ba:27:25:88:df:c4:bd:f6:c0:83:cb:
c5:95:3f:f2:95:e9:42:a4:fe:8e:f9:e0:7b:db:88:
39:45:4b:78:54:bf:6e:df:07:1a:46:9a:c2:3a:dc:
3a:e7:8f:bb:0f:77:41:1f:7f:13:00:c3:7f:94:73:
70:4e:77:34:1c:de:ef:ed:47:8f:11:81:f5:7c:63:
93:1b:0b:01:ae:9f:d0:83:50:e6:dc:15:5e:ff:2d:
37:fc:0c:86:49:6e:4b:32:fe:f5:7b:a8:c6:6c:2f:
8c:fc:07:cf:3f:1f:ab:46:fe:3b:f6:28:1a:30:50:
d7:c6:04:e0:42:81:4f:10:07:82:af:05:ca:68:55:
ed:fd:11:c0:f0:73:cc:4f:0a:34:b3:d0:52:84:00:
aa:65:d9:0a:7c:f7:8b:5c:82:7b:bb:66:a3:51:0c:
5b:7e:58:79:ba:60:4a:b3:15:80:a1:fb:f7:06:d8:
d5:74:8f:7d:db:06:d4:9b:7d:45:32:ce:b4:f3:43:
f8:ff:c6:8e:00:1f:9a:fb:d9:0d:62:5a:2c:b2:b7:
fe:34:9c:3f:b3:80:a8:5c:11:b0:8f:cf:df:a1:94:
d7:e9:ce:7b:a9:a3:f9:d5:31:c9:47:b2:87:16:a5:
bd:d2:c3:8a:0a:45:9f:c0:f5:1f:d6:04:c5:90:5c:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:C0:86:B4:2A:05:15:8E:8D:68:A8:7C:37:9D:55:52:2D:52:2C
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:9d:a9:79:00:e5:d8:53:43:16:15:a1:8a:81:af:0f:34:
08:e3:5d:45:c1:c9:d1:ac:1b:fa:2b:cc:7b:aa:cb:4d:e7:a0:
97:11:64:93:0d:35:73:33:17:2a:ce:a8:6e:0a:8f:52:b1:c9:
14:57:75:d0:f3:6d:ae:50:76:21:13:b0:b0:54:4b:e3:46:11:
35:3b:73:55:cc:1a:9d:12:f1:8c:ac:13:c5:3c:b2:63:01:f2:
ce:4d:cc:eb:d3:e4:69:41:00:dc:b9:f2:e7:c9:44:e6:80:b6:
d0:e8:be:0f:06:b8:dc:48:d8:d6:eb:f3:bd:35:bb:0c:cb:63:
97:6f:88:ab:bd:ac:8c:6e:2e:6e:d4:b9:88:4f:f0:42:3b:b3:
57:be:02:01:10:e2:dc:2c:25:ef:01:09:7d:4b:b7:29:3f:ed:
2d:d6:64:c5:5a:f3:0b:44:52:1d:e0:0e:b6:9a:d0:71:ff:ec:
9f:09:c5:5b:9e:86:b4:c8:1f:05:f7:a7:78:4e:c6:67:fa:9b:
ad:ac:7e:6a:dc:7b:1a:6d:e9:66:e8:71:4a:ae:f8:7e:30:f2:
5d:14:cc:d3:47:fe:1f:e1:31:9a:f0:f9:a6:68:b6:eb:2c:05:
e6:43:ed:6e:8e:58:ab:2a:b9:b4:84:8c:54:e0:50:39:f8:27:
01:95:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:19:07 2026 by rpki-client