Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: khCxQwlapDQ1HAg3mb3oLTEXcWOSlHFfVYz3Olm7CJ8=
Subject key identifier: C7:FB:6B:4D:B5:D8:E3:88:18:DF:1B:62:CC:47:0E:61:8B:29:7D:F6
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019CAE6BE9E6EC650C21565E7DC608107CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 045B
Signing time: Mon 02 Mar 2026 12:00:33 +0000
Manifest this update: Mon 02 Mar 2026 12:00:33 +0000
Manifest next update: Tue 03 Mar 2026 12:00:33 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: w44YAcjht5zcma5FkZWGnospPKo5Ziv61ZssvJc50sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e9:e6:ec:65:0c:21:56:5e:7d:c6:08:10:7c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Mar 2 12:00:33 2026 GMT
Not After : Mar 3 12:00:33 2026 GMT
Subject: CN=c7fb6b4db5d8e38818df1b62cc470e618b297df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:45:ce:91:41:e4:5a:56:72:6e:00:f2:73:
17:38:25:98:84:1d:33:28:c0:26:83:fa:c2:3f:62:
1d:de:74:65:89:3a:92:4d:ea:51:6e:3b:37:0e:1b:
0d:d8:68:7c:51:2c:54:a9:bd:a2:00:1d:e6:bc:51:
d7:f3:17:55:aa:9e:3b:1d:4e:57:53:6d:4b:b7:04:
d4:f5:fc:69:ff:d0:77:76:2b:57:51:db:f4:61:cf:
c3:fe:38:86:c1:8d:db:27:82:47:8c:03:25:3b:a0:
7e:4d:01:41:0c:37:46:f7:a2:b4:f9:66:e3:85:1d:
62:6c:ef:36:dd:4a:f2:3f:8c:e5:a1:fa:e7:29:8a:
e4:63:7d:00:98:ac:c8:b4:a8:66:0a:84:6e:18:1d:
8f:36:39:97:78:eb:74:a2:54:fc:fa:6c:45:e2:02:
8f:66:23:04:31:bb:1c:60:d1:45:ce:10:b0:55:00:
3c:64:03:a8:0b:4c:36:a7:8c:79:28:57:11:71:0e:
45:45:f1:59:e2:dd:98:42:7f:45:c8:3a:1c:85:26:
9d:2a:ba:1d:bc:82:62:68:f6:c8:ea:2b:fd:b7:2d:
8b:dc:89:6c:84:a1:c4:28:2a:16:c7:d0:0d:0e:22:
06:6f:5d:db:9c:1e:cd:75:88:45:ba:5a:93:9f:30:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:6B:4D:B5:D8:E3:88:18:DF:1B:62:CC:47:0E:61:8B:29:7D:F6
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d4:d7:ad:42:06:29:14:b2:67:14:57:3a:c3:d2:28:75:3e:
48:58:58:f4:86:fd:24:96:ed:b6:12:69:08:8f:10:e4:40:39:
aa:3e:c5:fb:52:3e:25:60:3f:3a:b7:c3:dd:93:35:9f:0c:1b:
08:11:41:20:e7:22:30:28:c4:db:1f:7f:7f:84:ae:ea:98:a9:
14:e4:f2:b4:7e:05:f0:86:f8:69:e9:81:62:ab:4f:3f:da:b4:
0c:34:1f:0e:33:26:f1:9a:4a:35:db:d1:b3:e6:74:9a:28:24:
fb:6a:39:3e:8b:23:c0:46:71:80:99:22:04:ac:ad:f7:96:73:
48:dc:16:eb:24:49:e0:19:b0:d4:a8:09:a4:2a:56:98:65:54:
23:f8:e4:2e:30:43:b4:21:eb:bf:f5:65:d7:89:e2:ea:1a:45:
91:09:92:44:7a:96:37:32:2a:bd:0a:df:a4:01:45:ff:5d:98:
4f:6f:2b:a1:ce:50:13:36:a6:c8:75:9a:85:ec:1e:dd:16:ec:
1a:d8:56:81:0a:c8:4b:c7:4e:a6:4f:43:6f:35:88:8c:72:e1:
45:77:f7:35:54:a0:ae:c5:c6:9b:4f:12:5e:a9:0d:ca:0d:bd:
34:89:c3:81:5e:97:53:80:ea:93:57:12:da:04:82:ea:fb:90:
b9:44:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:46 2026 by rpki-client