Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: N9JOk/srLb4RHKUJpmgzyhAw/5gED6VMLLtksM3rbKs=
Subject key identifier: D9:88:A0:60:F7:A9:6A:F2:CA:C4:74:7D:22:A8:20:D7:18:1B:6D:DC
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019D3909912330CA225A29A8C3D650C2CD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 03F2
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: j3pp2iQOYsrFjTClWSG4tPQ74N2FW9Q9dGQOmcQ+KKo=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:23:30:ca:22:5a:29:a8:c3:d6:50:c2:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=d988a060f7a96af2cac4747d22a820d7181b6ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:2a:3a:3e:a9:4f:c1:bd:f6:dc:69:5d:f0:
bf:ff:0c:80:d9:0f:c8:58:3f:b1:21:7c:f4:de:a5:
3f:7c:2b:02:2d:4d:96:33:cd:a6:44:a7:3a:fb:4f:
3a:46:83:18:1b:3d:9b:92:04:b3:6d:05:f0:e0:75:
10:db:96:d0:b8:f1:76:be:6b:da:f9:e4:8d:03:c4:
a6:54:be:12:09:fc:2b:8c:43:1a:90:b8:a5:84:01:
53:70:7d:05:40:f5:e6:97:1f:c2:c4:66:da:04:c4:
a3:c2:7d:e8:2d:ee:db:5b:16:f8:86:45:ac:8b:5d:
f4:45:38:ab:1e:9c:e6:d2:ff:2d:ab:72:4b:b3:f1:
23:89:0d:9a:ca:02:dd:c1:73:3e:67:6d:97:0f:17:
57:fc:5a:77:04:3d:75:d1:c8:b3:4e:3e:e6:b4:9d:
fd:66:88:99:81:73:a4:05:89:55:d3:12:af:41:2f:
2d:b3:92:21:a4:bb:78:52:66:ff:29:76:d6:61:32:
44:b6:c5:f1:a9:ce:5c:67:ea:d2:93:b4:24:65:f1:
b9:ab:14:9b:f6:1c:bc:e7:9e:56:7d:38:ba:d1:0b:
28:80:89:c8:65:b9:6a:d3:2c:f8:21:dd:3f:bd:9c:
5e:14:1b:05:d8:87:7b:6e:d8:e1:7d:29:ea:78:12:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:A0:60:F7:A9:6A:F2:CA:C4:74:7D:22:A8:20:D7:18:1B:6D:DC
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d9:dd:af:02:dc:a2:4f:d0:f3:13:c4:e0:7d:f4:02:43:8f:
99:86:8a:1b:48:71:8f:f2:09:dd:f1:e5:22:eb:37:60:52:c0:
68:c5:af:9b:a5:ef:67:b0:45:00:e1:a5:f9:95:04:05:da:ed:
88:2c:0a:c0:5d:bc:1a:df:8d:c1:38:86:7c:63:57:9c:22:f3:
25:a2:d7:0c:9c:12:e5:cf:ec:46:93:eb:d8:38:d9:f8:30:76:
e4:98:72:56:7f:18:d6:6b:63:6d:9c:77:a7:a0:49:d8:5d:a1:
17:ef:fd:2e:a8:aa:d2:da:4a:74:15:75:e9:d2:04:2c:5f:38:
d8:7f:35:fc:7e:cb:1f:29:c4:34:3e:7b:e0:04:80:a0:ec:e6:
8a:0a:67:6e:52:71:f0:fd:8b:78:d7:52:c6:84:3e:0a:bf:45:
f1:92:56:18:0e:fb:2d:f6:9f:e7:1e:6d:63:06:fb:ab:7a:13:
82:3f:97:55:fe:9b:18:c9:9c:fa:38:e9:72:cd:5c:ed:e1:ee:
6a:7c:2a:b8:92:f9:6f:07:bb:37:86:21:37:e7:46:7c:5d:5b:
40:36:dd:d8:ea:c1:ca:0e:2e:fa:82:47:c0:db:35:1c:ba:04:
d7:aa:c4:ce:49:46:27:0f:5d:e5:b8:e1:3a:fa:72:ee:41:31:
db:2e:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client