Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
File: zBqFcqgF1h5ozxIIu9CEOad43eI.mft (raw, json)
Hash identifier: eNALcqYTnFtPggLkXWsWGhfyAQBoPGbAZvFPJaYY3yM=
Subject key identifier: F0:5E:B9:E9:47:22:2D:E6:06:DF:B3:72:CA:00:88:74:3B:37:E1:BC
Authority key identifier: CC:1A:85:72:A8:05:D6:1E:68:CF:12:08:BB:D0:84:39:A7:78:DD:E2
Certificate issuer: /CN=cc1a8572a805d61e68cf1208bbd08439a778dde2
Certificate serial: 019D39098583D4FD4D12FEC8EB0047B98DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqFcqgF1h5ozxIIu9CEOad43eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
Manifest number: 09
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: 1KFYu4jy7l9aS9TUPXk3DANIqRI.roa (hash: njXP8EpKLgeDLlRTelpsCQZaLi9KdwzoO/HaFQGDV1o=)
2: zBqFcqgF1h5ozxIIu9CEOad43eI.crl (hash: E1xn7zUmmxwWNLpFt3RpTtuVoKHRNbNmQM41+zwFkx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqFcqgF1h5ozxIIu9CEOad43eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:85:83:d4:fd:4d:12:fe:c8:eb:00:47:b9:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a8572a805d61e68cf1208bbd08439a778dde2
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=f05eb9e947222de606dfb372ca0088743b37e1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:fc:77:d1:8e:3b:0d:06:00:5a:4d:a1:8b:
46:21:d2:5d:d2:c4:13:bf:10:96:e1:7a:ba:43:b8:
4b:57:56:3d:78:58:96:d2:43:90:d8:c1:f2:c0:03:
00:d1:57:14:d6:86:7f:19:4f:3c:4d:bb:a6:b1:e6:
21:a4:d8:6c:5d:ba:5a:91:4d:0a:f7:48:88:f0:86:
a0:23:d7:dc:0d:35:10:5d:11:ef:d4:60:a7:ec:35:
2f:d0:c1:f0:b6:70:76:13:64:34:85:0b:ab:21:10:
3d:bd:e9:ee:f8:2d:e1:94:be:62:f1:e1:a8:74:ec:
ad:dd:4d:20:e4:b6:a7:74:bd:2d:0f:06:fe:c5:39:
0a:0c:49:04:7e:b6:7a:21:31:63:b9:74:4d:03:40:
7f:a9:6b:41:b4:d7:c6:70:a7:24:e5:25:ee:75:74:
19:f7:a9:e6:fa:38:df:c5:99:cf:c0:cf:02:b7:23:
33:8e:3d:0c:34:7f:ab:60:c5:5e:e9:ad:79:1a:55:
a1:ad:20:1c:12:9f:a2:4c:1d:bd:d6:92:0f:bd:06:
37:f0:a0:a3:b3:2b:39:76:fd:23:28:08:67:a4:6b:
ee:10:e5:c5:52:d0:83:77:b0:6e:2f:9b:11:3a:79:
40:e6:bd:23:8a:ce:24:a6:9c:d0:5b:73:29:e0:b7:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:B9:E9:47:22:2D:E6:06:DF:B3:72:CA:00:88:74:3B:37:E1:BC
X509v3 Authority Key Identifier:
keyid:CC:1A:85:72:A8:05:D6:1E:68:CF:12:08:BB:D0:84:39:A7:78:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqFcqgF1h5ozxIIu9CEOad43eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:ab:5c:ba:bf:dd:2b:22:df:50:24:96:f1:51:ad:40:f6:
c9:bb:2a:6f:51:94:bc:fb:a7:5d:eb:22:4a:3b:b8:cd:bc:00:
d7:97:bf:3c:80:b6:57:6a:70:5c:bf:60:3b:18:42:9c:17:aa:
50:62:ce:f0:c1:50:98:a5:5d:ab:df:f3:a0:ea:dc:95:99:6c:
81:8f:62:cb:22:8e:97:53:15:03:54:af:71:7f:1e:05:c8:45:
4f:3a:76:2e:2f:0f:d5:00:b6:b7:3e:e7:69:1e:b3:40:b6:1a:
9a:18:7e:c6:0f:05:08:0f:b8:8e:bc:35:0b:06:b9:05:a8:8f:
d4:f7:58:6d:16:82:12:c2:27:c3:9e:9c:17:62:52:9d:0d:c0:
be:28:66:6c:28:12:41:97:11:da:85:5f:a1:97:8c:f7:58:a7:
21:f9:d2:d3:d6:fc:23:cc:5b:9a:7d:36:ac:3f:db:35:42:36:
94:55:b5:17:db:78:0f:78:a1:ca:74:9b:74:84:28:85:52:9f:
16:33:9f:1b:9b:6a:99:8a:5f:4b:ae:fd:24:e5:c6:b9:44:8e:
b7:3d:77:09:dd:97:f6:db:02:6c:75:c1:96:2b:f5:05:20:8a:
a8:8c:6a:0e:eb:1f:02:38:f3:73:3c:8f:2a:9e:16:66:a7:cf:
eb:2d:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:41 2026 by rpki-client