Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: iB798aSGqrwYbpRx15TfosBfj/J4HY4IoAShln/XiBU=
Subject key identifier: 3D:19:D0:4D:2B:DB:EF:11:82:79:45:0F:0C:C3:4D:56:D1:EC:2C:8F
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019D390A21AFCC850737407A93514193E51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: BZWMoF/V0kzqpiqDy5NiWvkFjgPku/g3YxsUoap4s70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:21:af:cc:85:07:37:40:7a:93:51:41:93:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=3d19d04d2bdbef118279450f0cc34d56d1ec2c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:c1:25:93:b2:f4:6b:71:de:f7:d4:63:a0:
d3:e1:2e:ca:6b:49:d1:6f:45:4e:f0:2e:6e:cc:97:
e0:8c:68:85:5a:55:82:6d:a6:33:ec:bf:bb:e9:fb:
ce:85:87:10:a7:fd:8b:9e:ce:84:2a:83:be:e0:c1:
01:59:18:ee:37:21:5a:3b:3f:51:ac:a4:40:9b:bb:
2b:e1:e5:fa:23:a1:df:7e:26:90:f2:47:b2:76:73:
a7:b0:99:4d:b8:70:5c:f7:2c:b9:ab:71:4c:2b:21:
61:17:4d:b4:73:af:1b:35:7c:fc:3b:ce:8a:17:e1:
d9:15:24:62:1d:0a:83:86:cc:1b:c1:78:32:33:f7:
5f:84:ea:c5:1d:f4:ee:03:59:cd:65:19:b8:46:74:
5e:e7:b8:ca:69:3a:4a:49:9f:f4:8e:7a:27:b9:91:
15:d6:13:ba:be:3b:13:da:ab:f3:63:20:a3:05:31:
d7:13:45:93:fb:28:1c:9a:75:ff:f5:08:f4:ca:13:
09:2a:aa:16:2d:5b:fe:de:68:30:a8:bc:a7:05:5d:
8f:2d:50:0f:cc:49:8a:bf:cb:0f:a0:4b:8c:37:66:
ca:72:bc:5c:d3:7e:1f:2f:d5:22:6a:ba:22:83:9c:
fb:2d:3a:6f:3f:ca:e3:e0:23:46:d2:3d:4f:c8:c5:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:D0:4D:2B:DB:EF:11:82:79:45:0F:0C:C3:4D:56:D1:EC:2C:8F
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:c2:e1:6a:0b:97:27:be:cc:97:ff:85:2b:75:10:8d:98:
e3:c0:84:ce:07:a6:0b:43:42:af:d8:80:08:d9:14:1e:e3:c6:
d6:75:3e:59:72:41:73:90:ab:cd:d1:39:ff:2d:71:8c:29:2c:
5e:23:fc:69:09:62:8a:a6:79:34:71:fa:f1:0c:33:2d:d5:e5:
da:69:d5:5e:c4:b9:7e:d0:18:1d:05:c8:12:c6:a0:6d:70:ca:
a7:08:e3:27:b4:94:8e:20:e6:fe:e3:49:f2:6f:b5:26:88:7a:
1c:34:d0:80:6a:ee:8f:48:d4:8d:86:f3:9b:77:f4:5c:df:0a:
5c:96:e5:cb:b3:42:c1:99:49:bf:cf:e9:a4:a7:98:59:f2:39:
db:5f:28:17:e9:3a:1d:c8:0e:3c:54:a8:cb:45:ef:34:86:8f:
6c:ce:48:f9:0b:f7:27:5a:1e:f2:a6:e4:0e:fe:d4:dc:09:13:
08:2d:3a:82:b3:c8:e5:f0:88:04:f3:19:1d:87:21:dd:0c:6a:
45:91:fa:9f:5f:2a:b9:a1:97:ea:c0:51:f6:17:a6:90:fb:4a:
c7:92:c8:f9:9f:73:84:e7:b7:93:d5:91:86:d5:5c:ec:7f:2b:
e3:97:12:0a:85:cf:47:02:7b:c0:7c:d4:da:84:42:34:e4:8c:
7d:bf:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:00 2026 by rpki-client