Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: 4ps88BMHrCCYcMWJPJiVTfy1LFBmDmZ6SboJpMs1Bc0=
Subject key identifier: 3D:9B:9F:3B:49:C0:D2:F3:98:D5:80:73:93:31:E4:0A:32:C7:F3:7D
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 019CADFE72A9EBF776DCD6A12555A3094E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 0830
Signing time: Mon 02 Mar 2026 10:00:59 +0000
Manifest this update: Mon 02 Mar 2026 10:00:59 +0000
Manifest next update: Tue 03 Mar 2026 10:00:59 +0000
Files and hashes: 1: EGCxmj_3P4OdgMPqYMZRoqDAaa0.roa (hash: F/HUrp6QsLnvcSoouuAdZYE36oDXQmOSKH9XVdoGe+Q=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: NIo8Ueezt/TYmDSOiSObpVBbyZC+Blfpw5j6mtRf0Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:72:a9:eb:f7:76:dc:d6:a1:25:55:a3:09:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Mar 2 10:00:59 2026 GMT
Not After : Mar 3 10:00:59 2026 GMT
Subject: CN=3d9b9f3b49c0d2f398d580739331e40a32c7f37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:6c:11:ba:41:d6:57:5c:f6:10:99:09:38:
59:32:79:78:d7:3d:29:e4:eb:46:74:6f:54:03:88:
e6:31:05:b6:79:7b:71:f3:60:c5:76:e9:cf:e9:83:
f3:03:87:8e:e1:28:99:ba:30:7e:3c:2b:6e:4c:c9:
81:c0:46:ae:90:9c:6d:8a:90:55:c8:19:6f:12:3b:
be:af:fb:e2:7a:7f:84:f5:ec:99:55:6e:f0:52:9d:
59:24:c1:0d:2d:6d:fc:15:44:06:68:d7:c5:81:47:
01:d3:61:e7:36:b3:a8:3a:9f:fa:74:54:be:75:af:
8f:82:9c:ff:3c:4a:93:c1:ff:5e:21:1c:52:f8:6e:
ec:fd:67:bf:ce:ee:45:04:4f:1a:dd:f4:b3:d1:e2:
6c:a7:ce:ae:b5:fe:f1:01:da:91:3e:f3:f3:ac:9c:
d1:fb:58:6b:7b:63:f4:f0:f6:a5:77:06:00:92:95:
2f:a3:bb:c7:8a:78:50:08:b3:75:9f:e6:c5:65:41:
21:dc:4b:d4:2a:7e:47:d6:83:f7:6b:e3:91:69:de:
c4:27:14:7d:0b:99:2b:84:06:39:e2:1a:1d:22:a9:
1c:93:20:57:81:ca:1c:36:8b:3a:ae:11:96:f0:72:
05:63:04:bc:8a:0c:ed:0d:96:6e:2f:9a:ef:b6:ba:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:9F:3B:49:C0:D2:F3:98:D5:80:73:93:31:E4:0A:32:C7:F3:7D
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:02:8b:f7:2c:06:ba:9c:2b:23:5f:36:70:dc:8e:e7:8e:3c:
6a:70:5e:bb:17:1e:12:c8:7d:0f:70:c8:45:14:25:dc:44:95:
dd:78:99:cf:70:27:4b:3e:fe:cc:98:18:ed:8b:4b:11:d5:ff:
e5:a0:2a:b5:0f:f4:4e:c6:af:e2:7c:f7:41:45:5a:7e:7b:02:
72:6a:64:ef:03:f3:79:bd:f4:c0:8a:cf:12:4c:b2:a5:66:77:
ee:de:29:b9:db:f5:34:62:56:c5:5c:ec:c9:2f:8e:e6:ce:f9:
a2:45:56:08:dd:8f:d4:f2:a2:f3:52:8a:74:d1:3f:a8:ca:49:
0b:77:19:45:d5:a4:10:d0:66:26:bb:df:81:e6:39:82:70:ed:
3a:c1:7c:9e:3b:46:f7:9b:01:59:4e:fa:e5:3b:7e:3f:38:14:
62:38:16:b0:68:f3:db:2e:d0:8b:46:44:b9:8c:9d:61:80:78:
d4:43:77:04:76:eb:c6:ad:ea:89:cf:f1:d7:c8:78:3f:1e:d9:
09:c9:16:a8:a8:99:a7:b6:da:32:30:e9:a5:4a:ae:63:b9:35:
98:ee:3f:6e:60:4c:1f:ac:a1:2e:3d:d1:bd:82:f4:91:cc:3e:
d4:dc:79:ad:97:d6:1a:2d:86:fa:1d:db:98:45:87:14:44:20:
46:99:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:59 2026 by rpki-client