Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: 5+rdY4Pgq2YEjoDrTS5LdNee3OSpr1GU0sTRG5U3/Fs=
Subject key identifier: 73:16:1C:E8:47:4E:81:0C:4B:73:AC:54:63:57:DD:0E:FF:6A:23:00
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019D38D32ADE03663EF58AF860233BC2630E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: GZnYZD++PKqqxg62yyNf6yjKaYHaoTGrmqf9fiPRhPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2a:de:03:66:3e:f5:8a:f8:60:23:3b:c2:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=73161ce8474e810c4b73ac546357dd0eff6a2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:33:25:9b:79:90:ab:c7:02:1f:70:3c:ff:
4b:fa:e0:b8:c6:89:3b:22:cd:69:45:b4:93:12:e8:
19:12:6e:36:5f:e4:00:e0:71:54:8b:1a:f7:80:3c:
91:b0:11:4e:32:c4:a1:3b:3c:e7:17:b1:7f:d6:83:
e5:d8:1b:9f:3f:e3:0e:30:7b:64:ee:d4:34:ce:d4:
ab:18:61:6b:c1:14:35:78:76:9f:5d:50:2e:83:61:
3b:de:76:65:d1:c8:ab:15:0a:ef:b8:15:d3:de:75:
65:51:34:b7:6e:6e:11:d4:d0:c1:9e:f9:34:0c:07:
c9:3a:f2:9f:d0:0d:dc:ad:2f:67:f1:8f:c8:47:b8:
11:ea:b7:0f:9e:b0:a9:df:da:b1:13:e0:72:49:17:
5a:da:43:95:9e:ff:f9:7e:07:ef:8a:4a:fc:ed:70:
ac:cb:b8:67:15:0f:b3:60:5d:e3:51:54:d2:f0:2a:
b4:5d:0a:17:98:89:a0:fc:e7:35:4d:af:5d:13:c6:
d1:af:e6:80:d1:93:d3:fe:7c:8a:5d:e3:32:09:a7:
69:fe:65:7c:00:ee:0e:f4:22:d6:7f:0f:7b:55:3d:
3d:05:21:f8:f0:02:28:7b:46:5c:71:4d:ab:10:0a:
b5:20:be:59:a7:35:ba:57:d4:61:55:76:80:b9:7a:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:1C:E8:47:4E:81:0C:4B:73:AC:54:63:57:DD:0E:FF:6A:23:00
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e2:9f:4f:ba:36:25:3b:0e:55:e8:67:4f:5d:dc:04:7d:38:
1b:7f:bc:60:99:63:ca:1c:75:58:93:e1:58:25:eb:c2:ef:b4:
a6:01:d4:5b:0c:5b:02:5a:07:f4:c9:1a:74:6d:e4:d1:c1:f3:
4d:e3:f4:93:6b:a8:10:95:ba:44:e6:60:09:46:48:fa:60:cc:
55:fc:a0:15:51:03:a1:e0:da:4b:6e:0c:76:d5:27:b8:2c:58:
f2:16:d7:aa:11:c3:d0:d4:48:23:f5:e0:97:c3:fe:85:b4:f7:
bb:64:77:f4:34:f3:51:c8:fe:27:23:68:95:f4:36:2f:23:3f:
3c:2b:15:a2:7d:bf:d7:d9:45:87:7c:8e:7e:ff:cd:2e:0f:a4:
b8:f3:43:5a:c3:0e:1c:78:f5:a1:68:73:83:9f:9b:3c:7f:11:
4c:c8:b7:b1:8f:36:23:a0:33:d6:f2:b2:a7:35:e3:9a:a6:c5:
33:46:89:6a:89:7e:b4:93:9f:c6:b1:47:68:4c:90:c8:8a:82:
47:66:96:61:55:56:b7:24:60:c4:cb:59:be:b9:c5:8b:dd:4d:
74:e4:3b:a7:a9:1c:ee:3d:3d:8f:c4:cf:a4:fc:71:3e:22:8e:
53:12:67:7a:fd:2d:b7:e5:52:87:a0:fe:41:b7:e4:f7:0d:00:
49:ae:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:31 2026 by rpki-client