Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: 7uK1+bFcfqVTNhXAxbF3lfnLsqdCfwLzYt7rLHKw6mY=
Subject key identifier: 0A:02:CD:E0:AB:A4:EF:E2:7E:30:DF:0F:63:70:B8:D3:DC:85:53:08
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019D382E8FFF8BDA783ABF057FDA83DE7C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: Cd7NuYktL6tZ53bzDJJ8daCIovs.roa (hash: tHrRvHoM3qNNxOtrBUBjddDedIMEOHYDC52UbXy47M4=)
2: i2keX2tmfJC9gpuyYPgLLi5zYak.roa (hash: iSciV2gaKioHzNvZ/l6NgMx2jf4AZrXPTduBLLjh9iE=)
3: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: a1i+iaRszUBfNoXBqUI9uGtb0vZwrwQoXeTvCYdZJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8f:ff:8b:da:78:3a:bf:05:7f:da:83:de:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=0a02cde0aba4efe27e30df0f6370b8d3dc855308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:31:16:9a:3e:0f:4c:7f:d3:68:cd:49:0b:
9a:6d:4e:3b:56:e7:08:e6:fc:0c:91:e4:08:32:67:
4b:9c:99:f4:25:84:07:13:c4:c6:2b:35:71:f7:5c:
a5:0b:3d:35:db:77:e7:aa:87:4f:c3:1c:5b:c7:c5:
cd:ab:6b:c0:c6:26:37:67:94:20:36:19:b8:24:84:
0f:89:21:f2:8c:45:5d:ce:da:f1:e7:74:de:49:7a:
31:d6:2c:c7:f4:4a:7d:c3:4c:8e:4b:6a:d4:b1:db:
8e:99:1b:d8:40:c0:0a:be:e4:9b:e4:f1:61:65:b4:
a5:39:59:ce:87:bb:89:f7:d3:09:4f:44:78:8d:52:
87:00:02:31:e7:62:74:7e:ca:de:d3:22:a1:04:b7:
75:9c:4a:ff:f1:31:33:f4:f1:7f:26:ab:3e:52:62:
f9:86:0d:e9:61:a6:23:e9:38:06:83:9e:79:f6:4d:
83:34:a7:9b:9e:1b:f7:c4:b0:c3:5c:ff:ca:90:5b:
2b:6d:d3:b7:b6:c8:10:f7:d2:74:6b:fa:d7:8d:ce:
fa:0d:5a:7d:d8:9d:6c:8e:ab:4d:8a:cb:07:6a:74:
81:6c:10:0c:e9:dc:fc:47:19:9e:86:d9:b0:1d:47:
5e:40:16:78:60:63:b3:9d:84:ba:ae:97:22:ef:5b:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:CD:E0:AB:A4:EF:E2:7E:30:DF:0F:63:70:B8:D3:DC:85:53:08
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6f:1c:26:41:00:3a:0a:f0:35:07:41:44:6d:07:6c:cf:8e:
34:f5:2e:06:9b:ed:5a:a1:3c:45:72:af:3d:f9:c9:7d:a9:45:
47:97:86:ad:d1:7f:a2:ee:d3:6e:ea:ee:05:15:33:6a:a6:18:
a7:b6:aa:05:cf:d0:15:9c:16:b6:4d:80:aa:03:39:86:20:91:
80:99:51:88:bd:c2:b5:0b:6d:25:75:d9:4e:81:5b:04:6b:b4:
bd:0e:f9:a0:6c:f6:b3:91:db:26:0f:b5:c2:e8:fa:2d:7e:c6:
a3:eb:28:c1:df:9f:a7:2d:90:05:39:1b:41:2c:38:09:cb:4d:
38:a7:25:0c:d7:2a:52:d2:d9:f4:f8:2e:df:77:b7:b7:ef:5e:
88:82:06:90:88:fb:a2:39:c8:a2:5f:eb:53:9e:70:b7:ed:e3:
14:a1:4d:f1:a3:35:c5:11:62:04:b9:2a:8c:f6:c4:7c:63:da:
e4:f5:72:60:d0:e1:df:1f:a8:c0:a1:74:23:97:ab:b6:3a:ba:
7a:a5:b7:c0:3f:d3:f3:3f:62:54:42:d7:5c:de:62:a0:a9:e2:
6e:26:36:a5:57:ec:91:a2:47:91:38:f0:76:ea:3b:3c:4e:0e:
89:37:31:56:6e:4f:8f:05:81:96:76:b5:1a:34:36:b6:26:52:
b7:bb:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:31 2026 by rpki-client