Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: mMYWBHX7g3r+OdhvXQ57nsEz+Mc4vC7M3ujy38hXnSI=
Subject key identifier: 7B:6E:4E:CF:E3:83:4C:6C:C8:AA:83:3A:B0:B6:BC:45:F1:1D:48:F5
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019CAA21BA1026C6F81345D2A87F6AB1B514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1188
Signing time: Sun 01 Mar 2026 16:01:02 +0000
Manifest this update: Sun 01 Mar 2026 16:01:02 +0000
Manifest next update: Mon 02 Mar 2026 16:01:02 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 2Tq8EOFwZLCRJ3f0QEGVqPfsTcppKAFphOdtELrU+Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ba:10:26:c6:f8:13:45:d2:a8:7f:6a:b1:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Mar 1 16:01:02 2026 GMT
Not After : Mar 2 16:01:02 2026 GMT
Subject: CN=7b6e4ecfe3834c6cc8aa833ab0b6bc45f11d48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:41:90:5b:0f:cb:3c:cd:1e:92:ae:9b:34:
24:38:5a:ba:e6:ae:90:82:d5:db:6a:e5:ae:4c:90:
f8:0c:a0:eb:20:c3:7e:dc:04:68:d4:da:e2:3b:d1:
bf:e4:f8:af:8e:45:eb:34:11:44:8e:c9:b1:05:06:
c9:c3:8e:80:db:42:21:6c:9e:e9:ce:8c:98:2a:8b:
2c:b5:7d:a0:ee:09:d5:9e:26:6a:57:2e:d9:e9:ac:
89:a5:38:af:7c:54:bd:a5:ea:54:33:d3:ed:a4:97:
33:67:f5:1b:b8:ba:32:89:8e:3f:01:23:32:1a:1c:
cc:62:c9:18:68:7b:37:dc:32:6c:9f:35:ad:6e:c6:
c6:c6:a8:09:1c:4d:4c:d1:95:1e:1c:c5:26:f2:fa:
b7:66:8b:b6:22:ac:d0:c7:51:83:b4:97:74:45:62:
87:0a:ec:1e:b8:a7:04:b5:51:03:40:c2:3c:be:02:
30:f0:09:4a:4a:b3:47:5b:64:fc:33:97:dd:20:d6:
16:f4:25:2f:4d:db:5d:f7:48:fe:18:94:f5:e9:d3:
34:23:0a:fd:71:22:8a:5e:e6:e5:4a:d5:aa:43:7f:
4c:4c:49:7b:0a:2c:26:03:51:28:65:9a:fb:ef:80:
e7:1a:d2:62:af:a5:15:2a:57:f5:1e:61:15:f4:9c:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:4E:CF:E3:83:4C:6C:C8:AA:83:3A:B0:B6:BC:45:F1:1D:48:F5
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ea:cc:02:ae:32:a3:46:20:6d:a0:b2:45:5e:c5:f4:30:5a:
26:4e:b8:76:0e:eb:d2:5e:1a:56:db:ae:b7:be:52:5d:c3:ab:
7b:1d:b5:8d:6f:c1:71:20:85:a2:a5:c9:1e:2a:51:5d:50:5f:
d5:18:10:f7:02:f5:31:e0:86:31:bd:75:6e:5d:fb:2f:4a:c8:
2f:96:a1:23:22:8a:ae:c8:5a:8b:16:92:59:3c:cc:41:0a:ed:
95:7a:30:8e:ea:10:c6:b9:d9:62:9a:14:5c:f6:c3:00:9c:86:
18:b5:1b:c9:80:7d:07:61:fa:98:db:c8:c5:e6:36:6a:f0:a4:
fe:07:1a:d5:60:a3:87:59:e4:34:02:bc:67:a1:6c:09:1a:98:
4e:90:81:c5:c0:3a:53:a8:a3:fb:a0:d3:ad:14:4f:82:74:02:
fc:c4:4a:f1:81:af:7d:6a:3d:5d:62:be:1e:06:64:ed:e3:d0:
70:5c:77:63:3a:f8:78:ac:fa:a8:64:da:e4:e3:8f:bc:7e:c3:
6b:0f:5e:5f:7f:b1:fa:7d:7c:81:48:27:7f:01:6c:15:ed:71:
9a:52:37:66:b2:a6:a7:c0:a7:c4:8e:a1:16:bd:e1:62:6a:42:
80:e7:2a:e9:b9:a0:70:22:ba:85:6a:eb:ab:c1:a2:87:a3:d7:
2c:51:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:18 2026 by rpki-client