Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: WluApzS1EiEwtbKcRj2k1u/02cDWTF2z1ITouZXd1nk=
Subject key identifier: DC:50:F1:13:1F:30:B9:E5:73:78:CB:95:BB:0E:F5:B6:0F:F9:17:13
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019D389BADBBB60E28BD425714F7E4887712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 1457
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: u1c4WuaEv1/YoXYVJBVWfoF5R+0qxPOAGFEXSV+5hf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:bb:b6:0e:28:bd:42:57:14:f7:e4:88:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=dc50f1131f30b9e57378cb95bb0ef5b60ff91713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:ba:35:10:a8:12:66:d8:59:33:a5:62:79:
2b:61:40:6c:95:d5:1b:f2:77:02:ae:19:15:f0:a3:
1d:e0:26:cd:fd:9a:bb:c3:ea:94:d5:a3:6c:eb:02:
a4:cb:5d:e2:b9:2e:3a:71:7f:23:42:a1:c3:ea:f2:
06:2b:07:96:4f:d6:d3:8e:bd:e4:c1:99:28:71:74:
06:15:d1:74:3b:07:37:e1:e1:58:c8:17:13:f6:83:
5c:a9:e4:d6:51:02:ea:88:b6:9b:79:56:b0:8d:91:
71:14:52:a6:f6:c5:24:9c:2a:7a:56:77:b3:21:22:
ac:81:e9:13:c4:5e:22:4e:6a:1d:99:83:2a:81:68:
80:01:3b:d3:20:04:fc:5a:71:c7:64:1c:1f:f4:f8:
0f:dc:5a:6c:0e:80:21:7e:46:11:4f:70:f4:35:6e:
df:0e:a4:ef:26:86:ce:c2:54:77:91:8a:19:a3:84:
ef:39:05:13:a8:73:55:ec:ec:c5:cc:74:ce:80:52:
30:a8:56:22:db:ce:49:61:78:0f:ab:a4:67:4d:45:
d2:d9:56:77:46:d0:02:3e:90:ce:53:9a:82:35:46:
93:07:50:2a:57:09:42:06:24:4c:1c:ac:81:ac:76:
3b:de:14:3d:da:53:13:02:df:16:5d:94:e3:af:d7:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:F1:13:1F:30:B9:E5:73:78:CB:95:BB:0E:F5:B6:0F:F9:17:13
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5e:0b:24:0d:43:c2:73:93:35:dc:af:64:cf:ec:82:2b:fa:
0e:25:9c:3f:bb:f6:b1:d0:82:12:74:af:5b:10:23:ba:e6:58:
63:c7:00:5e:14:1e:c6:0f:34:42:3b:e9:5e:52:0a:a0:7f:da:
41:76:7e:1c:74:0c:69:aa:dd:ee:d7:ca:e4:bb:77:34:5e:8b:
3e:db:cf:4a:83:e9:52:8e:b7:52:81:3b:63:76:71:f8:83:f8:
50:64:4f:32:a3:2f:bc:f9:b7:99:56:97:be:f9:f0:47:89:1f:
f4:20:c6:0c:e2:35:ed:2c:9a:bd:c5:7d:3e:55:26:e7:81:87:
35:6c:dc:90:c3:fd:fe:ff:fc:c2:41:b0:9f:e5:22:fe:5d:bd:
e0:35:48:5d:15:5e:23:59:48:28:b2:e8:0d:f3:93:f6:bb:5b:
b5:f5:e4:41:66:9e:ce:36:a1:c4:9f:aa:e3:78:62:19:8f:19:
4c:df:b9:cf:b7:da:c0:f4:d9:0b:2b:d5:e5:e0:40:2a:d5:cf:
04:97:92:4f:bc:85:59:2a:bd:9a:7e:72:75:0d:f8:9f:27:73:
f4:ae:ff:de:49:17:4f:2e:bf:07:a7:7d:16:d7:7c:8d:68:fb:
b0:50:8f:98:18:b3:e8:ea:1c:80:27:cf:89:50:70:25:de:79:
28:20:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:57 2026 by rpki-client