Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 9jtakQ6pdY28I4LPtO7ScSsvAxE4VbcXjbeJujRaxWk=
Subject key identifier: 4E:66:1A:2C:A2:BE:32:7D:69:5F:2C:BC:57:1A:7D:C5:7F:13:F9:A3
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019D38D362034B8F0D970A3B9B82DCE8ABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 12AE
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: a1VD+aPf714YPmnIVrj5H2zxEm2pgadeqUUP7gz+MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:03:4b:8f:0d:97:0a:3b:9b:82:dc:e8:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=4e661a2ca2be327d695f2cbc571a7dc57f13f9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:cb:63:3c:9a:75:4c:76:b4:ba:d5:84:d3:
e4:ab:d6:79:8e:85:c8:e3:8d:98:ca:c6:c6:1e:41:
4c:f1:52:32:f8:1b:e1:cb:e6:ab:71:28:f3:39:63:
7a:4f:c1:50:ea:9a:1e:15:5a:80:23:e2:8e:b7:32:
6f:e6:d5:07:84:ac:c2:58:80:69:58:7d:c9:cd:31:
b7:ce:07:4c:ff:08:ba:fb:3d:bc:d5:e5:94:9a:2c:
08:be:15:be:d2:ca:ac:2e:39:9d:0c:de:4d:5b:ac:
b8:ae:ab:10:c7:5a:e7:2d:95:50:eb:9e:9d:b1:83:
98:7c:db:c7:1c:35:18:c4:40:59:db:39:d4:b9:5b:
cf:f7:92:fa:67:8d:ff:a4:ee:d6:0b:b2:45:16:a6:
3e:b0:b3:73:b7:c9:d5:e9:0e:d4:cd:3f:ec:7f:c1:
ac:3d:22:81:7b:bf:02:d8:61:3c:b9:92:f0:81:bd:
61:10:9b:4a:0d:9a:68:bc:ce:88:08:76:61:d8:c3:
77:be:73:f3:16:ff:c1:1e:27:63:25:76:44:19:3d:
e8:7c:a6:54:dc:28:dc:e2:0e:58:9d:86:8b:36:06:
a9:29:24:fb:ee:cb:33:75:a0:4c:6d:ab:22:54:60:
b5:d8:62:6c:dc:38:f4:63:55:56:f0:60:c5:e8:88:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:1A:2C:A2:BE:32:7D:69:5F:2C:BC:57:1A:7D:C5:7F:13:F9:A3
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:91:d8:b6:e3:6f:68:22:ae:72:71:aa:cd:4f:1e:26:e4:82:
87:36:54:4f:c5:24:e4:76:cf:33:65:83:71:87:ac:55:42:c2:
26:62:a1:93:60:7b:5b:47:37:46:8c:71:ff:4f:33:69:10:de:
55:2a:fd:a7:05:de:77:51:64:97:cc:99:bd:47:26:dd:dc:94:
be:04:77:51:44:bd:5d:dc:7d:7e:40:7d:16:f2:de:04:40:f0:
ad:62:68:61:ba:0b:71:8b:84:66:ce:68:37:a8:69:f5:1e:5c:
ca:c0:71:61:1d:86:00:95:2a:57:89:9a:ec:d3:76:94:3d:a7:
b4:63:01:07:1b:b6:7e:49:f7:61:19:60:5e:f4:b1:5d:df:01:
a6:36:7f:55:b0:c4:43:a6:cb:10:57:2a:3d:db:09:13:bb:42:
dd:02:3f:d2:59:f2:36:3d:39:66:07:27:84:e2:e5:db:bd:ea:
a1:72:e5:19:0d:ca:1a:40:e0:e4:e8:62:74:bf:8f:bb:84:6a:
ba:3f:07:3f:ea:ba:7c:ae:18:7a:38:48:d8:18:45:6c:87:5a:
12:d6:64:6b:17:b9:22:ca:71:3c:fe:75:ce:d7:25:b4:e7:d2:
bc:32:74:5f:5a:55:fe:85:09:1f:98:49:ef:b8:99:77:09:35:
be:c3:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client