Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: uhoWyNBNV++F92yCCmoqgsvFYdsafkAhZ3CuSUCEarI=
Subject key identifier: 4B:D4:6A:03:8A:98:F4:18:8C:55:E4:82:0B:AF:B4:E9:32:94:F6:F9
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019D38663DF26209250945E026BD3117B4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: ubR51Cds4Cu-cq4s4-SnRZtsMzk.roa (hash: lQGmHvc7ptwlwlQV951AxPWOdv5pPFuaggIkamXjk7Y=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: knfQEyOPT3cUpPZWeAAPF7qc9uXyl0/IvBlPxBBNtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3d:f2:62:09:25:09:45:e0:26:bd:31:17:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=4bd46a038a98f4188c55e4820bafb4e93294f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:f3:91:82:ac:5e:93:7b:0b:ac:ab:d4:78:
75:aa:27:85:d3:d9:33:83:83:b0:ad:98:78:54:08:
25:2c:9f:38:92:7f:64:b7:c7:9b:91:6d:81:d0:0d:
bc:d5:de:c2:fb:81:e5:37:ab:10:9c:7f:74:3a:11:
3c:ac:3e:91:2e:04:2d:d8:9a:ec:3c:0f:50:8c:f8:
23:b1:58:4e:81:8a:2e:bf:00:35:ed:bd:7e:ea:dd:
51:bd:e6:c1:13:eb:5d:05:77:9f:2c:0b:13:e8:fb:
91:5e:97:c2:e7:2b:7f:a5:8a:97:25:1e:27:54:a7:
8f:b0:a3:ea:84:91:c6:55:53:e4:f7:b5:43:b2:70:
d3:0f:b0:3b:63:76:82:a8:02:92:42:d2:93:de:89:
2a:02:3f:ed:b7:83:3c:2b:14:8a:c4:e4:5c:02:45:
2b:97:12:ea:1b:d8:f0:26:d9:30:8a:dc:f5:20:e0:
80:2e:1e:8c:13:25:87:6f:84:02:8c:bb:c0:d3:07:
ff:c9:cd:97:28:6d:49:95:b8:4c:0f:08:33:a5:24:
b7:45:be:71:c0:5b:84:a4:35:53:54:c6:70:af:da:
29:c5:12:a0:15:cf:fe:ae:45:cd:cc:a6:4e:bf:93:
4f:71:c0:75:02:dd:ae:07:68:b3:ce:97:c5:e5:fa:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:6A:03:8A:98:F4:18:8C:55:E4:82:0B:AF:B4:E9:32:94:F6:F9
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:09:d1:30:3c:a6:81:9a:87:a7:52:87:70:b9:de:a8:3f:e4:
1d:45:48:7b:29:77:cc:bd:58:42:53:6a:f2:9f:a6:ba:11:33:
1d:7c:78:24:ff:9b:16:fa:f3:1e:da:e6:d4:8c:c4:18:47:fc:
23:e2:54:ce:33:ed:07:88:68:d3:50:a3:b4:1b:41:ea:7f:24:
fe:56:cd:08:66:94:26:86:de:cb:50:49:4e:21:b7:86:2e:a5:
b4:f6:3d:a2:75:4c:ff:ed:d1:57:63:af:de:26:05:1e:cc:a8:
f3:99:79:63:d2:9f:85:0d:52:6e:5d:3e:eb:e3:55:3d:1c:5c:
e3:50:53:29:3b:d2:47:9d:b0:99:ee:97:6b:d1:06:22:1c:9b:
ab:80:96:ee:40:ec:19:b2:d5:30:3f:0b:b5:a9:1f:c7:c5:33:
21:65:b1:8a:d9:31:f8:2f:51:ec:31:59:e2:13:80:50:9e:40:
a0:16:6d:4c:50:27:87:96:65:49:57:98:10:9e:a1:f1:72:35:
69:32:a3:6d:14:75:71:80:8c:04:bd:e8:31:68:e2:74:56:ec:
6f:93:e9:29:27:9e:40:e6:49:dd:a8:d8:bf:f5:40:ae:7a:41:
8f:32:0e:dd:ed:47:23:85:74:5f:93:58:33:a5:8e:aa:d8:2b:
52:a6:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:56 2026 by rpki-client