Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: ehu2IKLDyGGg3aA0TVPfUIEnA/cwaebzqpOhT9Ke3nA=
Subject key identifier: D5:B2:7B:63:DE:45:7A:FB:4D:52:30:DA:74:52:40:48:B2:E2:33:79
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 019CE6A457B01FB11BD1D92BB9AE0EC466E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 176A
Signing time: Fri 13 Mar 2026 10:00:55 +0000
Manifest this update: Fri 13 Mar 2026 10:00:55 +0000
Manifest next update: Sat 14 Mar 2026 10:00:55 +0000
Files and hashes: 1: 7haT3jVvApw9FyZ6uSoSIfkRf8g.roa (hash: EI0ydjb3oepUOGh8wjxT6lCNnyR3bTdkhLSTfWnO5Vw=)
2: J4Lf5avBmz21tWITnn1S9vJPttA.roa (hash: patPnmmSQAUpJeWtoZy2NYmGtov23YpUvkpjiDCxUNY=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: hQu6C/FvwPY9vbyX0eviJfc3R1oPGLwYGvgRZsulxNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:57:b0:1f:b1:1b:d1:d9:2b:b9:ae:0e:c4:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Mar 13 10:00:55 2026 GMT
Not After : Mar 14 10:00:55 2026 GMT
Subject: CN=d5b27b63de457afb4d5230da74524048b2e23379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:26:fb:6e:99:ef:5a:79:77:79:a8:b6:ab:
d3:39:f6:4f:e3:c9:aa:ad:8f:76:6f:7b:55:a1:7e:
6d:48:d0:8f:ab:39:4d:15:f2:85:b5:6a:00:da:0c:
17:21:3d:d1:a5:9d:d1:11:fa:ff:3c:0b:75:55:36:
21:23:33:df:25:c0:16:5f:6c:9c:03:3d:a6:f6:6e:
78:cc:8d:9c:f7:fc:fe:71:01:9e:31:9d:af:01:08:
f1:0b:89:4a:96:94:e0:73:91:55:9f:68:77:9d:68:
d3:72:bb:56:e1:49:f8:af:5b:52:06:f5:6c:ab:6d:
7d:ad:2d:ac:89:99:ad:76:c7:d4:45:48:e1:95:d5:
37:2d:5b:31:44:77:8f:66:41:23:7e:86:74:a4:2b:
18:c1:20:22:d7:e9:cc:cc:99:5b:31:5f:75:10:82:
04:0d:4e:64:96:fa:2b:d3:97:ea:53:7c:c3:bc:3d:
3b:8a:25:a3:eb:f3:da:73:31:7c:e8:a7:45:e4:c3:
c2:84:25:43:48:d0:4c:9a:82:1e:d6:03:a8:39:1e:
7d:86:02:a2:b6:bd:cc:c7:cc:85:95:34:ff:47:d4:
ef:02:4a:47:bc:ed:44:86:c8:0d:31:b9:d8:26:ce:
24:2d:e3:98:1d:f8:12:f4:28:8d:51:08:38:eb:ce:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:7B:63:DE:45:7A:FB:4D:52:30:DA:74:52:40:48:B2:E2:33:79
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:99:a7:d5:d0:8b:9f:19:01:a1:8f:60:8e:6c:3a:83:af:
8a:de:9e:64:b7:9e:96:9d:54:46:a2:8a:60:4f:04:0f:78:bf:
00:4e:68:4b:fa:04:99:b7:d6:e7:2d:a6:95:7c:44:5a:5a:b7:
89:94:d8:b0:38:08:58:54:fe:3e:69:49:b5:7b:e1:75:ec:15:
6e:cf:59:9b:b4:0f:4f:3b:50:1a:b8:c5:88:c2:02:73:b4:93:
0c:c7:c7:9d:ca:7e:a3:30:5a:0c:ca:27:3a:aa:16:62:67:49:
76:2d:40:88:f9:0f:eb:e9:fb:96:54:7b:4a:88:70:c4:1d:fc:
0b:c1:fe:66:c0:24:34:fb:df:dd:95:a2:fc:c9:8e:9a:e9:e6:
52:63:07:3b:da:3e:d6:69:93:9e:04:a6:ae:ca:4a:ef:7c:ec:
10:13:a9:dc:bb:d1:6e:bf:7b:0d:f5:0e:87:9a:34:33:04:44:
6d:31:f7:aa:71:77:ef:4e:2b:a7:c5:0b:a9:e4:50:b3:c7:53:
85:bb:02:87:16:b9:73:f2:0f:b4:96:b3:d9:5e:11:0e:e4:7f:
8c:8a:d3:14:09:8d:61:a5:e5:31:62:7a:ae:44:19:e3:45:1a:
6d:cd:c3:0c:45:a0:e3:7e:f6:ae:7f:29:85:44:46:d3:34:66:
d7:1e:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:27:04 2026 by rpki-client