Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: GLEiCpXmsKz13pndxx/QTUf44h05EX8Uetiqj1c0rd8=
Subject key identifier: FD:D3:73:62:55:0E:27:6C:87:31:8E:02:1F:B8:39:36:4B:58:63:D5
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019CAA21CC3DC01A814AC204BD2CA19878EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 09B6
Signing time: Sun 01 Mar 2026 16:01:07 +0000
Manifest this update: Sun 01 Mar 2026 16:01:07 +0000
Manifest next update: Mon 02 Mar 2026 16:01:07 +0000
Files and hashes: 1: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: M6SvnkeKsgLT7shYByXdBY24NkCMmHculPTMlI3xUGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:cc:3d:c0:1a:81:4a:c2:04:bd:2c:a1:98:78:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Mar 1 16:01:07 2026 GMT
Not After : Mar 2 16:01:07 2026 GMT
Subject: CN=fdd37362550e276c87318e021fb839364b5863d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:2d:90:80:c1:bc:be:b6:e7:ea:41:40:16:
07:b3:45:6a:e7:a0:ef:26:d9:ea:d8:93:d8:ff:57:
ec:04:7e:be:b8:a5:3b:78:c5:bd:a1:02:e4:af:49:
a9:53:ae:09:3c:3c:5c:43:c1:48:89:8a:f9:a8:45:
8b:7e:95:d7:ad:ef:b5:18:61:4d:bc:63:83:c7:5a:
6c:e9:f3:90:26:a3:c1:fd:8a:96:7a:8b:57:ca:ef:
fd:a1:4e:eb:af:12:20:4c:c5:90:de:ee:0c:25:05:
88:9a:c8:9b:58:7a:03:e8:65:89:f5:ec:5b:25:ee:
7e:ea:1b:34:be:7e:ff:24:da:2d:35:4d:fb:47:c2:
30:5a:7c:d3:74:95:fa:8f:80:0a:28:98:d9:37:cb:
77:0f:c3:e2:e3:c5:96:09:3a:0c:7e:8c:a5:99:3e:
d2:95:d3:f2:f5:9c:07:21:a1:5e:0a:d7:13:ee:4e:
e6:40:e1:71:10:85:da:34:f7:00:e1:4a:8f:2f:c3:
28:3d:66:0c:37:3a:7b:62:5d:6a:01:e9:c7:70:fa:
17:a6:32:b8:ea:34:90:a0:a3:c0:14:d2:58:a5:9b:
0a:3a:a2:42:6b:26:78:af:8c:3e:4b:e1:e9:5e:1e:
77:7f:83:06:fa:4a:46:4d:9c:76:c4:7e:ad:6f:e8:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:73:62:55:0E:27:6C:87:31:8E:02:1F:B8:39:36:4B:58:63:D5
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:26:8e:43:3d:7b:24:a2:fd:28:f3:18:74:9c:1d:d0:b6:51:
b3:c4:58:34:f6:98:a3:b0:af:18:cc:38:cf:dd:d1:76:65:09:
15:b6:38:0b:24:6d:71:8b:c0:c3:d8:74:6a:35:4f:36:5d:a3:
02:96:cf:9e:94:af:93:32:ce:c7:9f:b8:f2:17:0a:82:a0:d0:
7f:0e:e1:2e:df:3c:48:43:94:a8:f6:59:6d:37:f5:14:b3:c8:
6f:fb:c8:f9:d3:0f:c9:00:43:43:fa:97:ac:2e:32:7a:2a:d7:
3f:fd:4b:7c:d1:a5:e4:aa:83:38:d1:69:23:21:a9:02:ce:18:
e9:01:d2:da:a5:d8:a1:4d:d7:07:9f:85:07:5e:2b:2c:40:0b:
db:d9:73:fa:33:f3:00:f8:33:0b:e1:60:38:21:a3:78:91:f0:
4d:7e:29:f3:75:09:7f:ed:53:80:e7:e1:8e:d7:ad:d4:41:45:
9e:26:fa:15:16:51:08:77:a3:9e:14:f0:30:9a:be:23:9b:2f:
25:51:5a:9b:28:bb:10:86:53:f3:db:c0:15:21:be:f5:8f:48:
0e:d4:84:fe:7e:5e:6e:c6:44:2d:1c:3b:b9:09:48:a2:e7:5c:
56:04:ee:4a:e2:73:7d:69:f8:67:b7:c6:10:ea:f6:51:1c:bf:
4f:cf:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:38 2026 by rpki-client