Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: YmiEbV6gtKpVGWLpielyFocDnw1+xCiWYkf5T1Tr00g=
Subject key identifier: 04:13:DE:1E:A8:4F:68:93:B0:EC:CA:91:4C:A9:A2:D1:11:21:79:DA
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 019D3752D45F359A30A000C7452E23F6A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 11A2
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: fjoKwTx2R3Mik47bGhlRTfG3RyMpfF/BnBfSMvRwTcY=)
2: pf_a0nfpbks_qkQ4qrr2kzaKRXI.roa (hash: vxuQLy7AbojQx6rQzhF+7IW/BG/BLw5H+3NoMpcGW1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d4:5f:35:9a:30:a0:00:c7:45:2e:23:f6:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=0413de1ea84f6893b0ecca914ca9a2d1112179da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:91:8e:2f:c7:c0:08:ac:39:1b:c7:cb:9a:
40:f7:73:7a:cb:08:a9:da:92:5e:c2:64:26:db:fc:
e2:48:19:94:73:4a:ca:f0:08:c6:b4:d5:8c:ec:b2:
e1:17:05:ca:df:d4:9c:61:7a:8e:5f:bf:53:2b:10:
39:81:5b:1b:97:15:f7:a6:9b:23:43:f3:8a:6a:fc:
bf:88:df:57:2e:08:35:02:2d:f5:77:9f:d1:a6:a2:
56:f9:e1:17:13:31:45:52:7a:b3:d5:98:ff:5d:5d:
f7:2b:85:37:f7:5f:85:a4:c9:65:d7:96:9c:68:cf:
25:e4:8e:fb:40:3e:7c:9a:6e:7a:a9:07:e4:23:67:
bc:b1:20:17:a2:75:6f:ca:a1:a7:36:19:38:d3:c0:
9a:a8:05:e2:b2:20:a9:3b:7f:f1:ed:1b:32:f0:66:
70:77:3d:f5:a7:1e:83:3c:90:7f:ab:bc:43:0f:7b:
27:e8:fe:19:53:42:de:e4:0b:dc:d1:56:7a:c9:43:
b8:ca:15:fc:f8:a9:28:46:98:0f:7b:d2:9b:3b:16:
6f:1e:39:12:c7:ef:5e:bc:d9:17:a6:3d:4b:a2:7b:
45:e0:1d:ea:ed:30:53:a7:32:4d:ed:87:e5:f6:ad:
fc:c6:53:70:21:91:d9:a7:94:62:88:05:44:16:84:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:DE:1E:A8:4F:68:93:B0:EC:CA:91:4C:A9:A2:D1:11:21:79:DA
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ba:5e:ec:fd:a6:5a:ba:5f:b5:b8:f9:ff:fe:3f:9e:0c:ca:
4c:ba:63:0e:22:7d:e9:82:3d:66:66:96:01:ad:b3:64:a9:7e:
03:8a:ee:93:90:8d:9a:30:d4:31:82:a6:f1:09:17:f4:a9:5a:
03:51:7f:f1:95:f0:4d:49:2c:47:5e:5a:00:6f:c6:2b:4d:3d:
e5:dc:fb:7e:d4:7d:82:4f:fe:2e:f6:dd:71:e9:05:85:19:78:
f0:7e:ad:16:e9:e1:68:2a:32:32:46:8d:65:34:62:37:0e:9e:
06:cb:4c:69:99:99:a2:af:55:32:8f:e6:71:4c:a2:90:2d:39:
c4:a6:ae:fa:09:f8:46:13:80:a3:6e:b7:2f:5b:89:62:a5:32:
84:51:50:86:44:a7:00:9d:ce:13:32:fb:ce:0f:45:41:6e:6f:
5d:9a:aa:7d:3d:de:c2:d8:da:24:51:ba:26:44:98:20:49:93:
f1:43:33:35:56:67:47:e7:b8:69:8b:6e:1b:14:5d:d9:94:1a:
5b:14:84:75:77:f7:4a:2d:22:dd:d6:1a:54:08:3a:97:71:ef:
05:9d:da:e9:9a:cf:43:e4:5e:17:97:ab:a0:bf:81:f8:72:af:
4b:65:e3:ce:8c:cc:f3:a7:3c:cd:69:c7:4e:b5:f5:29:cf:5c:
d3:98:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client