Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: qdNuMm/rm5P+k4hEVwGg37Tu1aYGioq/B+akDBw08Ks=
Subject key identifier: F9:ED:5B:74:25:8D:59:98:2F:9B:DE:01:47:19:C7:BC:D4:A7:C5:FB
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019D382DFC3B8580BB8561219D2513EDFA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: fTTCA4DCKNZ2/RJvvOEQBYUq6W3SrRnP92Cwhfinj9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fc:3b:85:80:bb:85:61:21:9d:25:13:ed:fa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=f9ed5b74258d59982f9bde014719c7bcd4a7c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:9e:96:27:88:9e:27:a4:ac:a5:95:3b:11:
e7:43:41:34:65:55:e3:60:4a:d7:79:5b:a1:ee:d9:
07:28:32:9d:9a:f2:08:31:c2:6e:be:7f:5b:b8:91:
33:6a:6d:49:14:de:ef:07:5d:d5:58:a2:a7:b5:96:
4a:69:29:ee:79:26:87:c5:fa:b3:db:d6:22:1c:43:
be:c4:a7:e9:4a:7c:90:94:0c:63:55:e3:7f:f1:bd:
df:e1:ea:24:51:8e:b8:91:8f:19:24:49:dc:a3:71:
bf:09:b0:dc:ff:13:23:6b:be:f7:2c:5e:0a:9e:e9:
cc:bc:53:30:ff:91:a6:99:91:08:65:61:98:4a:57:
f7:e3:cd:a5:40:1a:1f:7c:33:8f:8b:35:09:d7:48:
be:1e:20:ec:16:77:0d:d2:30:94:dc:bf:ed:e1:b6:
a0:8c:b1:c8:69:d5:4c:5f:63:f0:e4:57:5d:24:50:
3c:76:7e:28:47:9f:30:f8:2e:64:01:85:f0:45:fe:
7f:2c:e6:e4:eb:5b:74:3f:00:f3:1e:ed:8f:45:e5:
92:ea:be:f2:8a:10:e2:f7:cc:a5:f8:6e:f3:2a:3a:
d0:72:20:83:3a:df:a0:59:72:d3:e7:2f:81:27:2d:
54:54:20:08:e2:72:7d:65:da:b9:15:bf:43:6b:df:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:5B:74:25:8D:59:98:2F:9B:DE:01:47:19:C7:BC:D4:A7:C5:FB
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:37:52:d5:4e:fe:52:3d:42:85:da:59:c2:ab:ee:95:cf:35:
5c:9d:e8:fe:0c:14:b5:ff:16:9c:aa:58:54:62:fc:62:b0:84:
8b:7a:3a:21:e4:8e:de:c0:db:67:66:3d:57:41:fa:db:5c:8d:
19:ad:78:5f:5e:01:cf:a5:62:a2:76:31:c6:e7:c8:36:cb:2a:
7a:a1:a4:e8:c6:96:11:99:e0:b9:44:8b:ee:43:28:3b:c3:62:
56:a7:b6:90:f6:5d:1f:df:d5:eb:f2:d0:1e:bb:df:2c:0a:d2:
71:40:18:c4:31:94:42:62:ea:fa:e7:32:f3:df:56:9b:2c:50:
ac:c7:f7:5d:25:a1:46:0c:c2:56:44:fb:2f:35:cd:3b:30:72:
2a:79:14:98:0e:7f:8a:9e:b1:8d:8a:93:9e:dd:1e:9a:56:02:
50:5f:0c:54:e5:68:e6:f5:09:00:75:f8:cc:4c:96:cf:82:86:
28:54:31:03:10:69:e7:ef:0b:73:b8:d4:23:fd:52:e4:48:1b:
e1:20:44:78:33:b5:30:79:7a:20:cb:03:25:bc:95:70:a2:d9:
90:12:5b:6d:00:b1:d3:ad:9a:87:9b:f2:5d:a7:aa:e2:9f:49:
4b:7c:f0:f1:7d:25:ba:11:a9:17:6e:67:a2:ea:ab:20:0d:ec:
2d:ac:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:40 2026 by rpki-client