Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: rNDNVyG6NdEDXReNc42wYfZwAiKrNRbMfoTHtM3Yknc=
Subject key identifier: 07:4D:49:B5:DB:B4:70:C2:07:5F:BF:94:F0:1F:07:BC:8A:0F:9E:BB
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019D37F7833F8976B115DB14AFC07BACC969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1762
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: 7/XVULuHY9HFJOEgtLFa2yveev7Dgwh8cagW8RqcLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:3f:89:76:b1:15:db:14:af:c0:7b:ac:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=074d49b5dbb470c2075fbf94f01f07bc8a0f9ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:e8:c1:fe:49:64:c1:ee:c8:e5:28:2b:bc:
42:7f:cc:57:d9:35:9f:36:26:04:68:4b:26:1b:c9:
4a:f7:a1:68:0c:e8:c1:74:65:27:0b:e2:4c:63:8f:
30:b6:b9:7c:5d:1d:84:59:15:9a:26:1f:ca:3c:de:
ba:f5:00:c9:6a:3f:e0:be:a2:44:fe:90:6b:db:02:
b6:5d:2a:9b:74:e2:12:c4:66:a9:94:98:97:95:7b:
f7:60:2c:96:d9:5f:a7:e9:b2:69:49:70:62:c1:ad:
a5:d8:b9:81:25:76:78:4c:33:6b:5d:d0:98:49:49:
bc:94:09:6b:68:b8:3c:f7:1e:48:6f:7e:14:97:7f:
5e:df:d0:c3:ba:bd:9c:a7:36:77:75:aa:c1:e6:79:
21:17:70:d5:3a:d3:40:91:b1:0b:5f:cb:1b:98:c8:
47:79:82:4b:75:69:2c:a8:9c:83:ea:a4:ad:2e:42:
ed:2c:62:43:d2:8a:d3:d5:69:cf:36:4b:bd:c9:03:
1f:4b:67:f0:a5:fa:f8:be:4e:ce:78:5e:1b:0b:3a:
f6:34:c3:75:d3:8b:5e:06:d9:bf:c6:78:88:58:c9:
45:92:b9:97:ef:d7:61:f5:72:d6:6e:9b:25:ec:57:
cb:0c:09:9a:46:61:fb:ad:6c:38:fc:b8:ab:ed:97:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:49:B5:DB:B4:70:C2:07:5F:BF:94:F0:1F:07:BC:8A:0F:9E:BB
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:c5:d4:d2:07:7f:66:57:cd:e4:2e:af:28:9b:02:71:0e:
80:c2:c4:2d:7c:27:92:4f:35:ac:e9:49:c8:63:b9:1d:99:5b:
2f:0b:31:6b:b0:23:48:8d:f3:3c:23:b8:69:a4:7c:97:a3:4f:
6a:6e:62:0a:6f:e7:0f:b9:55:bd:60:fd:89:0b:03:e1:73:13:
56:76:6c:53:5a:93:15:12:92:3e:23:fd:ec:d4:27:81:71:b5:
11:83:bd:1a:35:ba:14:81:9f:97:de:d5:ce:62:42:ac:85:b3:
6f:0b:75:c6:ba:0c:5d:2d:ff:d4:71:df:20:05:fc:16:9f:94:
a0:9f:b5:aa:07:76:31:98:cb:f5:1f:66:b3:af:e1:b6:86:08:
55:da:4d:c0:40:9c:b1:e0:29:e8:de:f9:f4:5d:36:6e:53:53:
c7:78:55:e5:39:7c:f4:c3:49:d6:2a:3b:de:31:d3:b5:22:31:
25:95:c5:69:f8:e4:58:d8:70:53:a0:1e:83:76:23:d0:0d:43:
3d:ca:cb:fa:d4:1f:1b:86:8b:57:ba:2b:52:f5:db:59:3f:7d:
9f:af:af:10:46:4e:2d:4d:ef:33:ab:25:b1:bd:68:29:c4:40:
da:85:cd:2b:88:0b:2a:fe:d8:c0:97:6a:72:5d:cf:ee:6b:a5:
c3:8b:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client