Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: tdwRsDYDpbpDjCC0WZDxY6oSNSfN3nNlju+M0Kb8zu8=
Subject key identifier: 6A:CD:A6:94:58:11:C3:E9:3D:A1:EF:F7:79:C7:1F:82:96:B8:63:D5
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019D390A3303B02CBBC15C5146F3D9387E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: GiLRiv4zUbiilyFJpKK-23nRrjw.roa (hash: Kbnw8RS+Cm1uYqFyCwki9S+J7BCZ8MZV4GQgLuCN37I=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: 3pV+2Mos8kJQt+CFCJbn0aW5tzmNs9mhaKDYziWy484=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:33:03:b0:2c:bb:c1:5c:51:46:f3:d9:38:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=6acda6945811c3e93da1eff779c71f8296b863d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:6a:e4:0a:ec:b5:03:66:5a:c2:03:e2:fd:
6d:12:01:1e:4a:48:6d:24:2e:77:e4:fc:67:cc:76:
8a:d2:c4:60:bc:e9:65:ea:c7:d6:54:50:29:6a:eb:
78:68:ff:86:92:99:e8:be:17:9b:8a:04:91:20:6c:
37:bf:b5:92:b5:38:84:96:50:ba:88:cb:a6:47:cf:
23:1b:c9:9f:52:8d:4b:ce:fd:e0:17:70:94:cb:11:
8f:c7:ae:bb:6f:c4:30:06:c5:d6:2f:ee:7e:51:4a:
cc:e9:c9:e7:5a:80:b7:94:1e:f8:b4:39:b5:a6:ab:
55:68:c6:48:d8:11:1b:1b:d9:3c:51:9a:f8:49:7f:
cc:ad:ce:00:37:fd:8c:55:7d:fc:4c:51:1b:59:1b:
f4:c4:6c:ab:1c:75:4c:f1:7a:ba:01:db:6e:96:5b:
79:ff:ef:d1:0b:80:ce:59:93:0a:ea:d0:9e:cf:5c:
b2:26:42:a6:5a:d4:93:e8:e1:f3:68:76:52:05:d6:
15:67:de:6c:8a:43:da:02:e8:9b:20:14:73:4a:d2:
ce:e2:83:96:c5:07:7f:24:b0:0f:63:4d:66:d5:d1:
f0:f1:da:ec:df:d9:45:ef:45:63:99:44:2e:3e:5a:
96:14:15:a7:ef:7b:67:89:eb:3c:8b:e7:69:1f:2f:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:A6:94:58:11:C3:E9:3D:A1:EF:F7:79:C7:1F:82:96:B8:63:D5
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:1b:46:3d:72:ff:c2:41:de:e8:ec:37:42:9c:e0:19:6c:
91:c8:f7:7d:71:74:af:e6:0f:83:37:d4:22:18:b4:15:ea:18:
f7:9c:8e:b6:88:73:b8:14:f7:74:4b:85:63:13:09:e7:aa:e6:
70:07:a5:49:be:5c:a3:25:16:2c:26:fc:81:ad:88:d6:64:76:
38:91:a1:24:00:c0:c0:5a:4f:ab:3f:f7:60:f8:69:e4:58:92:
a7:2a:e1:db:9f:e7:85:e4:45:aa:8c:38:84:a4:61:20:31:3b:
f7:f2:a3:60:81:fd:31:2d:09:8f:30:49:33:0c:1e:7e:f2:e3:
2b:76:ed:d0:ee:a5:e8:c8:c6:94:74:17:c7:3a:af:ce:3b:77:
8d:af:d0:37:d0:0b:64:5c:be:03:fc:c6:68:db:95:8b:1b:71:
bb:5a:1c:1d:43:44:d8:59:6c:81:ac:a4:41:e5:a6:25:9c:e0:
a9:7f:bf:6c:57:67:1a:b3:46:1b:d4:b4:7f:76:e1:26:34:dc:
20:bd:cf:f3:c7:0d:42:35:71:70:c0:9f:8a:76:dd:36:94:22:
f1:fa:42:38:95:fb:0a:3a:5c:34:22:9b:c6:d8:a1:e2:f6:c1:
b3:94:2f:b4:5f:84:6c:c8:b9:d8:0c:6b:97:8c:f7:1d:41:18:
e0:17:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:43 2026 by rpki-client