Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: vZS4Je26MwTSvLVD886iM3brRMbcUMdE7aU2qY581L8=
Subject key identifier: 28:2C:D3:F8:C7:BC:52:AB:B0:F7:D5:DD:8A:8F:02:B8:F6:F9:AD:8F
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019D38662A6D668D3C3691EE31A03627F5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 0C
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: rZVrX4R9e2fNYeOd1NSJ/Ja0BzysuEfKnyiOeWFWPUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2a:6d:66:8d:3c:36:91:ee:31:a0:36:27:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=282cd3f8c7bc52abb0f7d5dd8a8f02b8f6f9ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:52:9e:95:ae:aa:1a:ed:78:ad:75:b9:b0:
80:41:96:20:80:f3:8a:57:ee:fa:cc:fb:a8:a5:6d:
e6:28:ec:06:32:de:cb:a3:44:98:a6:05:ef:f5:f5:
0f:bc:c9:b6:34:a2:49:65:2b:77:d0:4f:c6:c2:1e:
fa:13:9a:13:03:71:0a:bc:1f:44:b6:42:c1:4d:fb:
e0:dc:3f:ca:95:6d:90:d8:a1:18:18:c6:77:95:6e:
a7:14:de:65:b3:7f:81:1b:f1:21:a6:a9:e6:f7:f8:
77:aa:b1:08:5f:55:2d:b8:ac:63:5a:e3:58:aa:d3:
2b:a3:d0:13:64:a2:61:0e:58:6f:fc:8f:fa:38:24:
4c:54:cf:13:f8:fc:f8:d8:52:2d:1f:da:5a:f6:ba:
ac:39:c5:56:0a:57:28:a7:f6:53:f1:c2:4f:ff:a1:
00:43:9c:ee:83:0d:01:b1:b4:6b:65:89:c7:e0:0d:
c1:a3:4b:3e:c3:56:57:a5:19:a5:88:63:ea:b8:70:
45:ec:92:26:7a:9a:20:fb:82:3a:ed:05:cc:8d:0e:
11:c5:a2:6c:14:57:5e:8e:96:f1:1e:a0:50:49:83:
97:80:b9:1e:b6:3a:a0:8b:f2:f6:a6:a7:cb:35:79:
16:25:97:ac:8f:51:a2:14:5a:9c:56:e6:78:da:32:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:D3:F8:C7:BC:52:AB:B0:F7:D5:DD:8A:8F:02:B8:F6:F9:AD:8F
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:08:2f:fc:06:fe:1e:60:9a:4b:f5:87:e1:fe:4a:47:6f:
aa:e0:92:73:11:19:f4:86:e0:97:e0:5c:67:23:f0:1e:8c:49:
97:46:05:ed:a7:cb:67:ca:d9:fa:bb:3e:49:bc:f6:45:66:5a:
88:43:b6:55:c1:0a:d5:4f:72:58:f9:0a:bc:1f:6c:1c:3b:4d:
28:a5:3a:76:59:1c:71:36:41:76:ae:cf:4d:0a:84:84:f6:5a:
cb:5c:4d:19:d2:60:8a:6a:7e:b4:58:e1:cc:d0:e3:e7:87:63:
9e:af:53:78:d8:74:b6:da:25:9b:bd:55:e9:fb:78:b5:16:30:
4c:d6:5d:96:8f:e7:86:8f:d9:8a:20:34:66:b0:4a:ff:89:5c:
38:81:a0:73:9d:f2:76:fc:2f:eb:41:db:72:26:29:13:9d:04:
a1:9a:b3:ce:97:51:b0:83:29:ba:2e:4e:fd:59:1e:a2:d0:ce:
c6:55:4e:eb:14:19:e6:96:10:cf:19:8f:86:21:68:d2:88:8b:
f9:2c:a9:62:93:79:a0:5e:89:71:16:45:1c:f9:a7:b7:ac:1e:
f1:8b:9e:37:76:d8:aa:d6:77:e9:53:a5:fb:ff:bc:1e:30:e3:
ad:b4:03:f1:f8:94:76:63:a1:f9:02:86:14:b9:19:24:ce:5e:
27:5a:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:42 2026 by rpki-client