Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: VPkermMP2X0H2UwYGynEgKk2ebdOR+9S+n6HL87NDDM=
Subject key identifier: 9B:4A:68:17:72:A4:21:01:C5:68:9F:00:0E:4D:9A:CE:1E:B7:86:7A
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019CAA901D7ECF87B2DEF1A43FED72933F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 07EC
Signing time: Sun 01 Mar 2026 18:01:37 +0000
Manifest this update: Sun 01 Mar 2026 18:01:37 +0000
Manifest next update: Mon 02 Mar 2026 18:01:37 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: Ut2QfYdt++EkfzHsQ4MlRdQN2D3LBG0cEpm+E+WOSXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:1d:7e:cf:87:b2:de:f1:a4:3f:ed:72:93:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Mar 1 18:01:37 2026 GMT
Not After : Mar 2 18:01:37 2026 GMT
Subject: CN=9b4a681772a42101c5689f000e4d9ace1eb7867a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:b8:03:1e:1f:69:84:67:54:08:91:27:b7:
9b:d0:e9:7f:d8:9b:c3:7e:50:27:2c:71:be:e2:55:
37:6e:ca:3a:61:2f:e9:81:49:22:35:b5:92:c1:34:
0c:7b:dd:5c:15:fd:b1:ba:84:08:43:0a:ea:8e:26:
8f:b9:a6:06:73:08:97:8a:ea:84:cd:a8:0f:27:45:
69:95:3d:47:4d:a2:89:04:af:8e:60:83:71:80:87:
e0:e8:6a:74:fe:98:30:86:12:f0:2c:bd:8f:3d:6e:
d3:a7:11:9a:f0:01:48:a3:f0:45:96:63:2b:93:a3:
f1:c5:ed:0e:a8:f0:66:19:a6:da:96:ae:b5:70:c3:
8c:b3:58:8c:89:80:be:8a:22:20:9a:f3:cc:83:8d:
03:02:ed:e4:c1:ef:44:38:46:33:2e:b9:02:94:a5:
53:c9:66:40:5a:dd:6d:9a:fb:4f:5b:d7:cd:39:df:
5f:33:e5:0a:13:c7:da:f2:95:5a:05:02:8c:c3:05:
d8:4a:e1:5a:a4:6f:95:35:1d:c7:2f:86:f8:94:fc:
23:4e:ce:47:10:5f:8c:f3:2a:a4:5e:71:72:54:c0:
2e:d2:91:da:04:e2:ca:0e:f1:02:0b:28:8b:df:b9:
1d:f4:26:b9:a7:64:ab:e7:6f:67:cc:a6:54:4b:93:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:68:17:72:A4:21:01:C5:68:9F:00:0E:4D:9A:CE:1E:B7:86:7A
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:56:b8:5f:b6:7c:28:8e:f4:8b:31:27:ee:ba:c1:cb:a1:
ab:53:6f:7e:9c:39:e6:25:33:43:fd:50:5f:52:0f:7f:df:47:
68:dd:aa:a0:3b:af:0a:40:a2:c0:17:5e:3c:5f:35:a8:51:b0:
f4:3a:fc:56:15:83:a0:45:28:c1:24:99:79:6a:a8:46:f8:e6:
92:da:87:27:12:1b:92:8a:ec:e2:f3:71:1b:f5:26:83:7d:dd:
5e:30:e3:7c:03:47:c7:c0:2f:c2:58:c1:a0:b5:38:df:94:dd:
65:ee:29:da:0d:b7:58:c4:59:0f:51:26:67:4e:e4:cd:e5:99:
e2:26:d2:c9:de:47:0b:f3:17:0b:c1:cb:13:8e:7c:03:2e:eb:
fb:c2:d5:c7:c3:25:d1:a0:2b:ab:f0:21:10:05:98:ed:8c:01:
0a:d1:a9:de:3b:61:18:c5:52:de:2f:f6:f8:cd:f2:35:5d:d3:
41:02:46:b5:cb:78:a4:49:00:77:47:92:02:5d:79:c4:fa:0a:
b1:06:ac:32:96:80:fe:eb:63:be:63:ab:f5:15:b3:55:91:28:
54:5c:d9:6a:b6:20:92:bb:84:15:af:90:4f:d3:de:dd:28:96:
3e:3e:ce:30:13:e0:78:96:b9:4f:f0:0a:2e:99:42:97:44:1f:
00:5e:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:03 2026 by rpki-client