Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: dL7J0X2Ur4A+UEvo4ehEHkhbXAawa3z7nQDajy7vclE=
Subject key identifier: 4F:84:1F:E2:B1:F1:C4:B0:64:C2:27:70:54:03:57:3E:95:7F:B8:DD
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019CACB4AF7500A26378EC1E725ABC7FF389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 03A7
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: /QZYbuxxMqW3q0P6zeVO6cOfisc4BeZU4JvHwBjgGBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:af:75:00:a2:63:78:ec:1e:72:5a:bc:7f:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=4f841fe2b1f1c4b064c227705403573e957fb8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:b6:84:d0:eb:f9:02:db:e1:21:0a:84:7f:
98:3a:b2:fc:d5:d3:3b:ca:4e:1a:20:4d:86:8d:6a:
b7:98:47:aa:eb:e1:d9:e7:d4:ef:e0:2f:f8:f3:49:
a2:9a:27:8f:9a:43:c4:a6:17:d8:17:f3:74:6f:dd:
ec:94:29:6c:39:ea:ca:49:47:7a:1f:c7:a0:5b:f0:
96:ff:d4:84:c5:c6:94:37:3b:ef:26:1e:f0:d8:cb:
32:c2:cc:0a:e6:23:14:4e:8c:96:47:fd:51:c2:49:
c6:7d:de:86:a0:98:5c:c7:b8:af:25:43:0a:c7:76:
61:60:31:d7:17:cd:f8:87:f0:6f:5d:14:86:61:69:
3a:c1:ff:e2:16:cc:bc:ef:85:71:4a:22:59:58:8f:
4a:bc:81:be:0a:22:d6:e0:67:68:b2:4f:2e:0b:ff:
e0:33:66:dd:2b:e2:3d:5b:23:25:75:de:a6:e9:43:
f1:5b:01:6d:d7:63:0c:3f:af:fd:6c:d9:d1:21:75:
27:53:78:6d:50:91:d2:5b:15:b9:bd:8c:d6:db:30:
7f:c3:76:44:e2:cb:f4:24:80:b2:05:79:86:52:21:
cd:02:1b:d3:de:e2:e3:e2:88:35:4e:a6:b4:85:6a:
a1:34:7f:6f:7f:05:12:78:bc:18:a8:f3:b2:f1:3a:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:1F:E2:B1:F1:C4:B0:64:C2:27:70:54:03:57:3E:95:7F:B8:DD
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:14:46:1a:d5:43:e8:ec:2d:71:ad:65:ec:b8:28:47:60:
e6:8e:83:cf:fe:10:0f:2f:76:52:b2:42:85:0a:aa:c5:96:b4:
93:16:5d:85:c9:3b:a9:e2:32:8e:8f:ac:de:b0:0e:08:76:01:
37:ce:66:e9:13:4a:1d:21:e4:0c:12:55:d1:75:fd:be:31:b7:
ce:0f:b4:60:e9:79:b3:24:51:94:dd:69:c6:0d:8a:b5:bc:da:
41:21:3b:c4:58:bc:73:ed:35:f3:4c:2f:e2:64:41:3f:60:08:
12:9e:6e:86:ff:12:2b:c1:c2:bb:2b:79:28:2f:91:a4:0b:14:
89:66:9b:b4:47:b6:af:f5:13:1f:9d:db:f1:9b:b2:6d:9d:f1:
22:80:f7:da:79:1f:7e:4f:ae:72:ba:b1:6e:c9:16:11:35:6e:
98:93:8b:3b:7f:65:ce:c4:55:b8:2d:ad:fe:59:70:dc:1d:05:
6b:45:5a:75:b3:c6:67:ba:4a:ab:9e:17:89:20:d5:91:d2:db:
2a:45:af:3d:81:88:33:fd:c1:0f:7f:fd:1d:b5:e9:1b:f4:33:
f3:b1:b9:52:f8:6d:4e:de:3c:b4:93:43:05:5b:10:98:2f:af:
bb:95:ff:fd:19:7c:10:11:21:5f:02:60:27:0e:9a:f3:98:b4:
cc:19:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:17 2026 by rpki-client