Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: f3vpNeBPbAwVPjP5+SXswCzG/PSknN3NUrwk9SiUVAg=
Subject key identifier: 0A:BB:3D:A6:4A:B7:A2:BC:6F:A2:B0:EB:2D:CE:2B:4C:28:97:5B:11
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 019D39E5B6B08EC554BA75EF7E21A35BD4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: VVrOiwc/3ryC2ajqtrUUXtWTirqXiY+w7PMqmmE3ZF0=)
2: cTl1BoIjoBM0xgKkijgr095D4yM.roa (hash: DZztADygEBvCauPefXUXIG2C159CdAX09TCUW+E8dVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b6:b0:8e:c5:54:ba:75:ef:7e:21:a3:5b:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=0abb3da64ab7a2bc6fa2b0eb2dce2b4c28975b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:b5:5f:c2:6f:44:b1:8d:9b:e3:87:41:7a:
b4:9c:77:65:e0:5a:13:0c:db:64:0c:fc:11:04:23:
9f:56:f2:02:b4:08:a0:1d:39:34:eb:eb:60:5a:9a:
b1:ad:d8:0e:c4:77:5d:8e:3a:2f:df:74:30:bf:9f:
56:51:1f:4e:ab:5e:e5:e3:5d:ce:bf:2a:b4:ac:fd:
b2:bc:56:7d:d9:7f:b8:c5:e6:5b:ad:1d:4f:54:6a:
75:f9:d5:36:11:23:d9:e2:d2:0a:e0:0c:20:82:0f:
08:54:d8:d6:d4:96:5f:39:27:7d:b0:81:4f:60:04:
fa:25:17:c1:75:a8:84:67:3c:8d:b6:b9:15:27:92:
10:ff:23:c0:f8:fe:d3:32:23:60:78:d1:1e:a1:13:
e9:d1:a4:fa:b3:1c:61:c3:6f:35:79:b5:41:0e:68:
0a:fb:a9:23:7d:a1:ee:ec:92:28:45:89:1b:eb:3c:
24:e0:3a:6f:a9:b8:c7:98:1d:30:74:aa:30:fb:7e:
dd:bb:56:3f:a8:b4:6e:af:c5:56:81:fd:eb:9c:26:
f9:89:9b:86:77:35:c2:80:53:49:de:e2:7b:aa:d0:
a6:77:9f:23:b0:d7:8e:35:f2:a1:ab:9b:3c:a6:c9:
ca:c4:d2:d2:63:5a:a3:b6:b9:2a:d0:2c:cf:fa:57:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:3D:A6:4A:B7:A2:BC:6F:A2:B0:EB:2D:CE:2B:4C:28:97:5B:11
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ad:0f:e3:3b:7a:58:5c:33:91:2c:ec:93:19:0a:0f:fa:e0:
15:c1:1e:9f:ea:6e:ac:b3:33:a1:e0:37:9c:b6:f6:6a:00:7e:
cf:1b:b1:a6:ec:3a:7b:cb:6d:9f:03:fe:8b:60:95:2c:4b:4b:
19:a4:0b:f5:5c:c5:fa:13:f1:61:4b:e5:41:b8:b4:8b:75:a3:
7f:f4:b2:84:58:6a:a9:44:ad:77:25:be:b3:31:10:79:21:e6:
65:68:5f:b5:30:04:ec:3b:16:cd:9c:48:59:fd:fb:84:73:17:
3b:d1:b2:c6:75:d2:34:6c:2a:c1:bc:6a:94:18:f9:a6:7d:fd:
b0:52:d5:0d:1e:72:a2:67:62:59:c2:fb:21:35:0c:39:5d:15:
ba:0a:e8:b7:4d:16:a7:05:b2:9d:7b:61:26:f4:da:23:b0:0f:
5d:af:fd:ef:1b:e8:1e:36:54:94:fa:40:64:14:71:0e:28:f3:
36:d2:6e:71:e9:ff:ad:36:a6:d8:e3:d4:b7:5f:36:1a:c1:2b:
12:c6:91:84:0e:01:02:03:7b:57:40:1f:d1:97:79:18:1d:bf:
f1:c3:e0:de:26:e6:02:8e:85:ff:1b:13:2f:2b:ae:47:80:e1:
33:a9:0f:31:09:f1:f0:51:c6:40:b1:80:10:f1:25:23:27:9f:
d1:c0:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:05 2026 by rpki-client