Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: lu+toFXdW/EkzBaAotRHLCf/rqFyPy5xYiV9Q7ZgpSY=
Subject key identifier: 18:DD:E2:40:D3:50:6F:5B:96:A6:08:75:B7:8E:28:2C:AD:D8:1A:BC
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 019D3866638671838EF046A7A46A61E8031B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 0418
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: nlfrfn24osfntQHsu8evHx4ar1o.roa (hash: Q2Oonu/mgcyQ29viLLMKjLOBF64WUB0mkAHoMi7xoGU=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: HPKG6+sbc/6RWjc2qVu/LZSjlSUeEjuFAoUxJzePmZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:63:86:71:83:8e:f0:46:a7:a4:6a:61:e8:03:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=18dde240d3506f5b96a60875b78e282cadd81abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:ed:e3:92:4a:e6:f0:64:da:4b:07:50:cc:
5a:33:a2:63:c2:44:3d:d2:07:18:88:63:fd:12:fd:
06:3f:bd:f1:77:b7:31:01:f6:66:a9:fc:52:cf:e4:
11:48:ac:91:64:38:30:ef:22:c0:48:b6:17:6a:d9:
79:68:50:cc:5d:15:dc:59:d2:ca:14:f4:aa:49:81:
7c:e3:a1:c9:ee:64:06:74:2e:47:62:65:d7:80:75:
5a:b9:bb:7d:a8:2a:59:fe:6f:7f:3d:82:fd:07:4e:
ea:1a:0e:db:2a:36:b2:5a:9b:d6:bc:e6:57:f6:bd:
47:00:41:e7:8d:33:89:0f:36:d3:30:33:dd:e5:e8:
40:b4:d9:db:df:03:8a:e9:dc:94:29:1a:45:50:55:
4d:1c:5b:c5:e1:fa:e6:e3:4d:67:c8:52:36:96:12:
fd:da:b2:6b:14:20:82:4c:ea:ae:9f:69:72:b1:49:
bd:17:c5:e0:31:b2:26:c1:46:ea:0b:41:55:97:5e:
32:52:70:e3:1d:85:d5:86:42:cf:05:e8:80:bf:c2:
74:67:f0:b4:a5:36:c5:63:1c:64:6b:29:31:00:c6:
4a:76:8a:5f:f0:70:60:1c:ef:1a:c7:5c:88:df:7f:
08:bb:47:0d:9f:0a:ea:5b:d3:7f:ce:0f:be:4f:6f:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:E2:40:D3:50:6F:5B:96:A6:08:75:B7:8E:28:2C:AD:D8:1A:BC
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c5:3c:db:d2:37:48:c6:14:5c:05:b5:9a:de:c2:95:7c:8a:
15:a9:a7:9f:e9:78:99:af:a9:1c:f1:53:72:9f:3e:47:52:c2:
68:3a:8a:3c:79:2d:75:c2:66:18:d3:13:b3:f1:72:c1:e7:78:
00:52:42:9a:45:c8:1b:b5:c4:64:b6:e6:e3:f6:77:8b:8e:2a:
73:a8:d9:5d:20:7a:0d:1f:43:60:b1:ba:e9:0b:86:bc:9d:87:
00:33:9d:3c:2d:83:b8:69:4e:ff:de:92:d0:cd:7a:ee:b9:3c:
36:02:58:b0:88:2c:57:a1:0e:bd:29:07:af:78:66:71:c6:dd:
bc:36:5e:a3:cd:b9:91:2b:93:37:2d:a4:02:44:40:ae:d2:99:
c3:7a:56:53:bd:bb:f4:d8:e4:9d:59:1b:66:35:00:e1:6b:e2:
ff:63:44:1f:44:fe:c9:13:0a:0a:ec:4b:7d:d9:47:1f:4c:52:
74:72:ec:9b:cc:57:45:8c:93:fd:a5:2f:f5:c2:dd:d7:9c:39:
b1:8c:69:3a:2e:31:a4:e8:83:6e:b4:76:6f:f9:62:57:5a:72:
72:c2:65:7e:1d:69:72:b1:5e:c0:4d:5e:c2:d2:b3:76:d6:6c:
cd:bd:ed:f8:89:8c:b1:e5:12:39:ed:98:5a:52:75:5d:9b:63:
97:bd:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:52 2026 by rpki-client