Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: kqskAALxkgvhhAyYRVCy5TBYSRIiF7iO6VA96ZhZRtU=
Subject key identifier: FB:87:C3:F7:1A:7C:9B:A4:EA:F1:6D:B5:43:EA:5D:1F:32:AC:F9:24
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019D37F70A21DC3A89DB59241B89CF17C08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 1352
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: PT62C61CPHdRc2fJbDVDuVJRXj0.roa (hash: QoRuxKV7gftAIFcmKvKd/abqm9YeDR7k0cYgqnasPfc=)
2: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: VkRABjlorfmzgEM+OZf4D629T5ROzTR/J9Ftuzx67AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0a:21:dc:3a:89:db:59:24:1b:89:cf:17:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=fb87c3f71a7c9ba4eaf16db543ea5d1f32acf924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:db:94:20:03:6d:af:08:fc:c5:ae:9a:92:
1e:db:6f:59:ad:1b:a3:e3:c9:61:93:ee:9e:24:e7:
06:4f:8e:ac:9f:d2:f5:86:7f:07:01:29:8f:b6:95:
99:3b:b0:29:fb:87:fa:dd:a2:85:88:f2:0d:ac:d3:
ab:a6:a1:9e:af:8c:7b:25:ab:ce:0b:9f:9f:93:9b:
f2:35:14:25:69:81:10:06:4e:09:a7:d0:4b:ee:ac:
15:5d:7b:04:e1:8f:f2:c3:81:48:e6:86:62:dc:2b:
f1:cf:fe:50:af:5a:ec:df:02:1d:be:72:60:a2:3d:
11:8b:d7:4a:e7:58:ef:41:ec:9b:c2:e3:15:3d:b5:
8f:c3:7e:02:b7:a1:fd:d3:18:15:2d:02:f7:b9:e2:
61:8b:f3:47:61:7b:5c:c6:e5:9d:2d:f6:7a:ac:a5:
7a:31:50:fc:89:8d:ba:e2:9e:c5:55:06:a8:ad:51:
6d:91:3e:5f:33:8d:5d:90:f3:19:97:eb:38:db:73:
87:ac:27:1d:08:5c:7c:ed:6b:f2:e9:c3:e3:52:f5:
d4:52:72:e1:07:a9:b1:54:33:a4:86:62:5d:26:15:
4b:e9:07:44:00:88:b7:a7:34:24:9d:39:8c:a8:aa:
5b:e0:0e:ea:92:c3:cd:0c:20:7e:31:0b:fe:22:2e:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:C3:F7:1A:7C:9B:A4:EA:F1:6D:B5:43:EA:5D:1F:32:AC:F9:24
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:99:b4:f5:51:0b:f0:15:47:7b:86:bb:58:cf:3c:54:16:cb:
73:e6:14:36:ae:8a:b6:89:f8:26:0d:75:3b:35:4f:ed:50:3d:
92:33:4c:cd:70:bd:bd:e9:dd:f8:a8:66:4e:12:0a:0f:89:8b:
ab:2f:e4:d3:86:3b:4e:7a:8f:3b:c2:97:1a:8b:0c:8f:4c:f7:
cf:ab:80:c9:f8:85:d1:96:a7:2a:12:f6:69:66:dd:6f:34:f8:
7e:8d:98:b7:b1:7a:f2:4d:f1:a8:38:8a:3e:f5:a8:1d:76:29:
48:67:3b:be:00:ef:57:06:c4:8a:58:ba:16:41:17:00:15:14:
cc:b4:06:14:c2:1b:60:e3:19:5e:89:3c:0c:11:b1:17:a9:d9:
44:e7:7d:f6:1d:49:13:e9:f5:dc:7d:22:d8:b5:0f:3e:52:3d:
1d:00:4b:9a:c4:d8:62:1f:49:8c:23:f0:5c:d4:a3:83:67:bf:
ed:f6:ef:fe:c6:0f:c5:3d:a3:62:54:1a:29:82:6f:90:31:6a:
67:71:50:6d:14:0b:cc:31:14:1e:43:1e:10:d0:65:2d:fd:29:
13:64:5c:26:f0:03:85:49:90:0f:d3:1f:5b:5b:47:ea:32:16:
01:d2:57:8d:8b:01:e2:aa:3f:7e:96:a7:be:a2:39:3e:86:fb:
d1:2a:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:13 2026 by rpki-client