Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: sVudq4G64y7omI2rWlIJeOvVAqubYPXMBAZjz8IC0vE=
Subject key identifier: 1C:11:7A:80:0D:64:F4:2E:9D:5B:38:CD:1C:18:DF:56:C4:18:C1:1A
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019D397798FA767FAD0883FEFE7A260DE663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0DDF
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: O2gYXWLOZ1baGkkO6V4ffkZOf14.roa (hash: 0azU39AJWRQ9GwuVFR5XGckgzC3aJ2sgglAZkdjKoC0=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: dDKXCJC5vI9SsFQ0FLTKZTckcAF0e8Y2iauJhmg1PE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:98:fa:76:7f:ad:08:83:fe:fe:7a:26:0d:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=1c117a800d64f42e9d5b38cd1c18df56c418c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:51:b9:84:35:37:6f:21:a3:a1:9f:75:c4:
b0:dd:b8:cf:41:9c:6a:b4:78:ca:65:ae:5f:98:50:
49:b3:87:da:0d:03:d8:dd:14:16:a4:41:e7:38:1e:
64:29:c6:4c:5e:11:9b:bd:a0:20:48:bf:7f:3f:1a:
f7:1f:75:c2:c7:d3:74:53:f7:ca:51:13:2e:8d:8f:
54:28:98:94:c3:2f:c1:ab:f8:1a:b8:70:ab:f9:b0:
a2:de:d9:84:1f:d2:b4:a9:0a:d2:8d:c9:9f:45:35:
59:b2:c1:56:0a:b4:12:73:52:bf:60:19:ab:ff:7d:
2c:c1:9d:68:64:9f:fd:b2:fb:51:57:4d:78:7a:60:
7e:8e:26:be:ae:c7:92:9d:93:85:ba:2c:ca:dd:34:
c9:e5:43:b6:08:72:79:a9:50:61:d1:a6:b5:a5:6a:
5b:ec:73:b8:61:1b:36:0f:fa:49:d2:06:20:f1:53:
7f:b8:50:7c:76:1c:85:53:6a:77:bd:64:03:23:f1:
f7:6c:60:ab:1f:13:03:eb:58:30:74:f0:c0:c7:a7:
89:08:b3:9d:b9:95:92:c8:ef:d4:1c:3d:c8:42:32:
da:c7:cf:5c:8e:de:10:3b:39:91:57:ea:0c:8b:ef:
cc:f1:b9:d0:ac:8d:14:6c:aa:9a:9f:80:2b:12:23:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:7A:80:0D:64:F4:2E:9D:5B:38:CD:1C:18:DF:56:C4:18:C1:1A
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:f5:5e:74:4a:2a:a6:d4:1b:cb:60:c1:77:6d:be:f3:b0:
53:79:70:71:f3:3b:7a:e8:a9:85:39:f1:59:00:50:a3:1c:da:
e8:9f:5c:17:61:2d:84:41:dc:23:3a:9e:30:d9:48:f9:6e:9a:
40:23:f9:e0:b4:4f:6f:b6:ed:1d:eb:77:c5:4e:a9:89:8f:95:
f8:71:ba:6a:b4:13:48:de:70:c2:c0:b3:a3:23:e6:26:a0:ca:
ab:75:3e:50:f8:c4:91:fa:b0:95:91:23:0e:ac:e6:cc:07:1f:
b4:04:94:09:31:d2:4a:97:49:e2:10:4d:58:15:8a:bb:8f:b8:
98:ae:3e:f8:f2:2c:4f:46:c7:81:fa:cb:05:14:92:5e:cc:5d:
01:09:d4:2c:70:54:5c:a6:0c:b1:03:c3:a8:d2:9c:0e:c7:05:
d9:58:be:46:7a:29:6f:0c:22:43:22:ca:4a:81:57:0d:d8:9c:
08:95:72:18:67:7b:89:5c:a4:54:f9:75:c0:3c:7e:0e:be:f7:
d4:56:ed:97:b6:6d:07:fe:c4:bf:d9:d3:eb:05:c8:27:41:f4:
8b:83:9f:59:e1:07:b8:7d:78:58:3e:f7:bf:12:38:5b:f6:6c:
5f:97:3c:11:e4:4c:b0:55:ff:7d:76:10:16:99:0d:ad:48:9a:
84:2b:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:14 2026 by rpki-client