Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: Qk0EfFI7NM8OLQ9I0YlADfYtXazsI+L/cp4gwMqI7HU=
Subject key identifier: 40:0C:FB:96:90:F6:DC:74:6B:C9:B0:48:50:89:6F:99:31:1B:DD:F1
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019D39410F213DF80A089180FF12D96CD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0840
Signing time: Sun 29 Mar 2026 11:00:58 +0000
Manifest this update: Sun 29 Mar 2026 11:00:58 +0000
Manifest next update: Mon 30 Mar 2026 11:00:58 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: o+Bk4zeW8Lzj86LdvoVcMi9wqMb/D5zequGv4on1gcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0f:21:3d:f8:0a:08:91:80:ff:12:d9:6c:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Mar 29 11:00:58 2026 GMT
Not After : Mar 30 11:00:58 2026 GMT
Subject: CN=400cfb9690f6dc746bc9b04850896f99311bddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:ce:d8:71:0f:72:97:4c:4f:a1:c7:82:bf:
cf:40:0a:34:c2:6f:ec:28:86:a1:5e:67:bd:1c:7f:
08:e6:d0:aa:67:4b:bc:7f:a0:e8:e6:72:52:e4:8c:
28:5b:56:f2:5c:61:06:71:56:39:03:52:0d:20:43:
b0:04:9f:72:d7:70:34:3f:d1:52:1d:34:96:a9:c1:
ca:f6:4d:1e:25:b9:52:fc:8d:79:65:a7:1c:fd:e0:
c4:75:a1:ea:32:d0:e2:6c:2a:70:58:8f:24:1c:ed:
83:19:61:98:60:68:53:40:aa:91:11:0a:c1:25:5f:
72:9e:4e:7a:ab:9e:1b:32:3f:27:b4:8a:54:cf:ed:
b8:45:3d:5c:71:e5:60:09:f4:10:ac:94:cd:8e:a6:
71:59:a5:70:46:30:50:93:0b:92:a8:b1:89:36:95:
46:b4:ec:ad:2d:73:a5:14:1e:36:b7:fe:97:f5:af:
4d:8a:3f:ec:44:73:ed:dc:03:a7:6b:16:f8:8e:cc:
8f:74:82:cf:f7:21:76:9c:7d:db:ac:a8:c3:4a:35:
63:1f:84:dc:fb:cb:5d:f5:84:2f:f4:dd:a1:e7:51:
06:04:00:e3:65:ad:5d:8c:ab:36:12:08:95:0d:fc:
5f:9b:17:27:18:8d:6d:56:75:16:15:ac:f6:53:16:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:FB:96:90:F6:DC:74:6B:C9:B0:48:50:89:6F:99:31:1B:DD:F1
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:5d:cb:26:56:7e:b9:a0:d9:fc:a5:40:23:de:de:4a:62:
4a:bf:26:3c:00:47:d9:22:84:cc:98:20:62:58:62:83:f3:87:
1b:d4:78:59:d2:bd:b2:68:f8:bd:2b:97:2c:76:76:9f:70:c4:
8a:80:f1:89:fb:7b:29:91:27:1e:b0:a1:e1:c4:e0:52:a0:6f:
98:2c:cb:91:24:89:dd:52:54:9f:53:43:ed:47:75:3b:61:22:
c3:5e:05:0e:53:68:2e:f1:e5:c6:30:28:58:45:c9:3a:6e:dc:
33:83:3d:33:08:90:87:70:d5:8e:b2:44:08:0b:f0:9e:b7:4c:
4d:6e:f1:45:01:e1:5d:b4:d1:e0:2e:31:c7:e7:0f:4f:71:f9:
e1:91:f5:1a:64:94:59:36:fc:4b:46:fc:68:fd:0e:67:24:00:
0d:65:91:66:26:12:26:47:dd:16:5e:53:f5:77:6b:a3:64:ff:
b9:3d:bd:3a:44:47:8b:f1:7c:4d:f1:bf:c4:a5:20:18:a7:65:
e4:25:29:99:68:ef:af:32:88:f4:26:7d:01:de:10:27:60:f5:
c7:4e:75:e9:64:fe:f7:b5:1f:45:aa:8d:7a:87:9f:bd:c0:33:
43:fa:46:f8:44:dc:2b:7d:ae:00:a6:3f:31:49:16:ab:94:d9:
bb:16:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:34 2026 by rpki-client