Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: Ooyw4X3dGywn91bYhUGAVk4c4Q1kANOt86W47iE3Zos=
Subject key identifier: 73:6A:BE:4F:06:6A:E3:95:0A:28:19:7D:A6:51:99:C0:AB:70:38:69
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 019D39AE521AFA3C4FF02B7B3BB8917E3E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:18 +0000
Manifest this update: Sun 29 Mar 2026 13:00:18 +0000
Manifest next update: Mon 30 Mar 2026 13:00:18 +0000
Files and hashes: 1: UeUe4RXxbJQuYIv96jVkIPMvTEA.roa (hash: rx3GrZrvfU17csdIhw9Rnh2rg66M56CJ6Ya4mGIIvXs=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: FJ3eQSGwqJ42rMltLFo/DTDZC3JwEwAkpOQzXs/rUKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:52:1a:fa:3c:4f:f0:2b:7b:3b:b8:91:7e:3e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Mar 29 13:00:18 2026 GMT
Not After : Mar 30 13:00:18 2026 GMT
Subject: CN=736abe4f066ae3950a28197da65199c0ab703869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:85:2d:d1:95:48:1e:a1:54:df:60:90:9f:
13:5c:46:6e:7f:77:ff:45:22:d5:2a:84:fa:0d:3d:
99:a4:6f:10:ed:2b:71:26:ec:e1:00:59:02:a2:ad:
cd:e6:1d:ca:8d:67:03:17:dc:88:be:47:fb:cd:17:
5f:f5:26:4a:ba:4b:2f:ed:d3:e4:7c:16:11:42:2c:
95:1d:4e:67:51:24:6c:d1:97:19:b1:ff:52:b8:5f:
29:d6:01:8c:b3:53:8e:29:63:77:0f:21:70:ba:29:
f4:1d:dc:1c:98:ec:b1:ba:64:25:19:77:b5:21:d8:
5e:3d:22:80:9e:5f:43:05:c4:ae:de:11:30:c2:22:
37:b9:2e:43:10:87:de:d3:c1:a7:54:1c:64:63:f5:
ed:b5:3e:58:c1:3a:38:e8:92:b4:da:f8:3f:7a:99:
f5:f6:8f:c3:30:74:1b:25:df:06:1c:ab:16:45:57:
fa:64:c2:0b:95:15:77:e9:0c:37:0e:c5:97:ae:4f:
56:98:a9:a6:e7:c1:86:60:84:c4:67:78:a5:95:91:
1c:af:1d:26:3e:9e:a2:a2:77:ba:19:99:47:38:90:
34:57:db:e0:8e:93:7c:05:8b:e9:38:1e:99:d6:e6:
cc:2f:db:56:f3:83:6c:e2:de:50:d4:6c:8c:2c:d0:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:BE:4F:06:6A:E3:95:0A:28:19:7D:A6:51:99:C0:AB:70:38:69
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:41:20:08:35:3a:7a:d1:a0:65:4b:71:ce:7d:04:ed:07:
90:c6:e6:f6:ef:a5:77:62:ae:ce:75:c0:f3:6e:63:94:9a:5e:
22:94:d6:23:c1:ba:41:0c:0c:65:8d:f6:78:6f:29:20:1b:e6:
3c:87:90:74:cc:c7:5e:db:07:8c:bf:79:5b:27:55:2f:3f:d4:
41:48:07:cd:a8:e2:92:09:32:1c:78:20:54:c2:81:da:a3:e6:
a2:1f:13:12:6a:38:43:a3:07:ca:ff:44:77:25:6b:f7:35:33:
3c:e4:22:aa:1b:07:5a:ca:28:3d:a5:80:08:20:24:6f:e2:52:
83:09:d4:73:8e:20:21:e9:06:9b:83:8a:6b:fd:45:b5:26:10:
25:81:c0:ae:dc:ea:55:1f:d6:f5:f4:fd:4c:0c:70:64:25:52:
52:72:a4:cb:35:d0:bb:ba:a6:83:6e:78:df:2f:32:6d:60:d7:
ac:c7:9b:a4:6f:3a:bf:83:8b:62:dd:94:1c:8a:ec:f5:00:b1:
70:16:84:c5:35:70:30:e5:29:a8:19:dc:77:b2:80:be:cb:77:
cb:88:16:68:d9:6f:f8:4a:e3:24:c5:cf:42:41:91:56:02:d1:
00:60:c6:89:39:5d:ef:be:85:fb:3c:1a:4d:3c:9b:c3:da:27:
89:15:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:44 2026 by rpki-client