Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: PouJmuFP3SOzunUMWZKWZvv/FE8QSF+NtP2neratszY=
Subject key identifier: 62:8C:DA:E6:1B:94:91:89:40:7F:6F:50:6A:76:97:D9:93:D2:EA:9E
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 019D389C5B36A76D0A220BBA368A3550292B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 0BC5
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: vP550p7smweDyzsFJJdi4XYXyu4.roa (hash: yk6RvM+MwSA+1cZ2k4NblzZafqg5JzamkxWGdJ15e3A=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: 6ldYObkSLdCXDPlAVHoHkwMff4wFOIAnB/jMQ4P6ASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:36:a7:6d:0a:22:0b:ba:36:8a:35:50:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=628cdae61b949189407f6f506a7697d993d2ea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:59:38:8d:71:3b:96:3f:72:be:4c:03:76:
aa:34:53:0e:3f:57:22:10:10:5c:ad:00:4b:cc:f7:
af:80:80:2c:4b:5c:80:80:52:fa:d4:b7:ed:84:cb:
82:7c:3f:67:8e:ee:e6:fa:fb:9d:4c:32:0f:90:a7:
2e:cd:8a:2a:07:e2:e1:7f:fc:07:16:71:83:34:1e:
a3:ea:40:f3:b7:53:33:6b:aa:f3:a9:86:95:93:6b:
02:e0:db:43:cb:de:ad:96:1b:5d:ed:c6:f8:11:fe:
01:ed:8f:8f:8c:ed:e4:c6:36:d4:96:27:3b:21:e0:
bd:04:6e:09:95:14:ba:27:14:a9:2a:5d:4b:f7:3a:
77:b1:b0:9f:97:5d:bb:11:22:40:8b:93:9c:4c:7b:
c6:59:da:4e:af:12:f6:0b:65:d0:8c:99:9b:48:51:
d3:17:19:10:68:93:c9:56:19:a3:e2:57:ce:4d:6f:
f1:68:a6:1a:0a:b6:53:97:36:12:8b:e5:79:2c:c4:
43:b2:ce:b9:0f:74:cf:6c:78:57:f6:5f:54:eb:51:
da:8a:48:61:1a:c7:ad:3d:bc:f9:79:56:14:02:b7:
6e:9d:31:ac:47:c5:66:6d:5e:93:10:2f:15:9f:e3:
24:c5:d9:30:8a:c7:65:8b:31:8b:fd:d3:d8:72:98:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:DA:E6:1B:94:91:89:40:7F:6F:50:6A:76:97:D9:93:D2:EA:9E
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:77:46:dd:b3:18:c2:55:9d:52:76:ef:f3:ab:8c:c3:85:
81:14:a4:b6:0a:a6:9b:ea:d4:ab:06:1b:50:3e:24:50:46:25:
9a:d3:b4:a1:1c:bb:24:4c:66:78:e4:e2:84:0d:55:64:21:6d:
ef:0e:31:47:22:5d:0e:26:cb:99:be:39:30:8b:08:bc:21:e1:
61:1e:25:64:15:63:91:a6:42:1a:b9:cd:8c:15:79:c6:bf:89:
d0:26:f6:ba:96:31:17:19:08:86:57:f1:70:1b:60:02:1c:28:
37:c1:43:06:73:c6:d9:99:2f:f8:8c:ad:fa:8f:3c:50:e2:35:
de:6b:e6:3e:23:f1:85:93:df:06:88:38:0b:52:a0:60:6d:e6:
95:af:5e:8b:1f:1f:78:80:cd:05:11:88:8d:7d:71:f6:5f:45:
5f:1b:18:0f:63:86:3f:18:90:26:8e:a6:95:a8:15:76:c0:1b:
32:21:64:bc:af:d7:a1:45:10:56:22:dc:4e:78:fa:4a:0d:07:
58:93:78:27:7c:56:6f:4e:c4:de:5c:6b:b6:9b:12:e8:ad:87:
28:a8:d2:bb:ed:f6:36:63:fb:f9:cf:a2:69:d7:ae:35:9c:ca:
44:93:8b:30:f9:81:17:e7:e9:df:26:1b:01:5d:8f:7e:5d:09:
d1:ee:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client