Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: TaiU2Dk7PotlTuA88LhymZpwOyHoBNAr3SQFRU3XbHg=
Subject key identifier: 15:E8:4C:E6:42:DE:4A:CB:1A:32:2C:12:5E:B2:67:18:05:A4:BD:E7
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019D3AC185222CAAE6CA1D6EC223E495DCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 11E4
Signing time: Sun 29 Mar 2026 18:00:54 +0000
Manifest this update: Sun 29 Mar 2026 18:00:54 +0000
Manifest next update: Mon 30 Mar 2026 18:00:54 +0000
Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: jpuBNvG4fooBtjCzsHnblvvbmHszzIBXW22RLTublt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:85:22:2c:aa:e6:ca:1d:6e:c2:23:e4:95:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Mar 29 18:00:54 2026 GMT
Not After : Mar 30 18:00:54 2026 GMT
Subject: CN=15e84ce642de4acb1a322c125eb2671805a4bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:9b:f2:0c:ab:20:97:c5:cf:d1:6b:d2:9f:
2d:94:4d:77:c9:ba:41:47:5c:0b:0e:92:7d:f1:3f:
95:b8:54:7a:67:f2:c8:96:ca:85:65:94:bf:92:9d:
ff:34:3f:f1:bc:33:4c:24:55:76:e7:af:c7:2f:22:
ae:b1:76:ee:6f:bf:0d:dc:c2:45:4a:e1:a8:e5:59:
53:44:75:5e:61:33:46:9a:c7:a4:31:ed:3f:b1:3b:
9d:59:b1:1e:b5:53:ff:5a:48:12:92:ea:30:ad:ab:
d7:51:ae:a0:28:12:c3:c0:50:ae:fd:a2:e3:0a:99:
85:e8:32:83:0b:a1:45:ac:3a:d9:5f:f2:d4:02:30:
8f:6b:6b:f3:af:1f:3c:6c:59:79:1e:77:20:2f:40:
85:19:9a:e8:fa:12:3b:54:c5:fd:87:b3:4e:ac:fb:
a3:88:ef:82:b1:5f:2f:b7:8a:be:01:d3:31:54:29:
d6:35:9b:8f:82:dd:fc:62:73:f1:10:03:37:3f:41:
31:c9:75:b1:a0:d2:a9:be:f8:43:2c:de:c9:b9:55:
c8:b6:16:6f:1e:59:f8:d3:fa:bc:7f:c8:73:b5:2f:
be:9b:bf:c6:57:78:a9:9c:c6:ab:d0:53:70:6d:6a:
34:eb:25:30:6b:c9:3e:dd:8a:23:07:1b:1f:f2:16:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:4C:E6:42:DE:4A:CB:1A:32:2C:12:5E:B2:67:18:05:A4:BD:E7
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:68:13:8d:64:b1:a8:e0:be:f6:f4:14:75:c0:56:54:a6:
a9:e0:d9:69:93:94:84:bd:10:8f:27:0c:f8:96:99:d1:2e:d1:
db:ed:01:bd:33:0a:a1:42:42:92:ca:70:fe:7e:67:82:6a:56:
12:5d:a3:67:ef:a0:cc:de:30:0a:23:33:f1:33:cc:53:31:08:
40:38:b2:cd:d0:aa:f1:bc:8c:4c:1f:5e:ae:ae:8e:4c:f1:af:
a3:14:dc:ca:21:57:8e:f4:7b:19:f2:2c:5e:23:eb:01:97:41:
2b:58:b8:25:c3:d3:5c:61:4c:da:71:f0:b6:a8:6a:2d:cc:d3:
6d:fd:2f:78:b9:44:2d:2c:5f:9a:1e:0f:d5:c3:3b:e5:df:fe:
79:16:b8:ef:11:5f:d1:03:0d:4e:01:aa:1e:32:69:19:11:a4:
be:fb:46:e9:f1:3e:9f:59:5a:60:28:96:00:91:fd:cc:79:27:
3e:22:e7:78:db:7a:ea:71:2e:e0:c4:cb:7c:3e:99:00:ba:38:
2e:4f:3b:4b:0d:ae:a9:23:b1:b5:bc:2e:ec:70:60:c6:38:1e:
1e:89:7f:70:d7:fd:76:a4:44:54:77:29:34:04:65:89:aa:d7:
a0:a4:0b:b7:ac:61:19:35:1e:e1:a4:2d:58:93:02:c2:f7:54:
e0:b4:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:41 2026 by rpki-client