Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: sbIbuh/OOIZkuUJzxWN/H30Ld9b1bUZUTYlgUW7LkIQ=
Subject key identifier: 63:96:7C:02:00:8F:02:DE:EF:07:E4:56:A5:89:4F:06:96:CF:D9:D2
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 019CAA58AEC5ED67AF424D71004C37AB65FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: fkd283Bsf9wbBl+GHKIWHrBL9infR321LBaF71WcRtY=)
2: fSnqZnwOIrhOfhDZkhdGS2yAncE.roa (hash: SVnN30Tg3P99sk9b/ymDGPmYqstKVPGeMKeKX2k4XeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ae:c5:ed:67:af:42:4d:71:00:4c:37:ab:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=63967c02008f02deef07e456a5894f0696cfd9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:0e:88:6a:8c:dd:df:5c:67:e8:82:8f:c3:
65:f7:f0:68:7f:4a:a6:7c:b4:8c:1a:8f:5f:7c:b0:
96:05:62:f2:d1:10:68:24:72:20:39:af:5a:c9:bb:
29:3c:49:a5:4f:1f:2d:48:2b:4e:22:ef:61:1e:bc:
70:5e:f0:fa:d5:83:37:02:a6:8d:fd:82:05:73:a4:
08:b7:91:a5:3b:6e:97:c0:d5:4d:b9:dc:6f:b7:33:
74:0b:6f:94:53:1e:27:9a:d8:95:6e:e7:84:2c:01:
c7:52:0f:78:03:1c:18:32:ff:fb:24:c6:7b:6a:c9:
b6:b0:d6:30:30:c9:ef:2e:a2:ab:cb:39:7b:ef:42:
84:ec:38:31:1f:1c:fd:82:ef:d1:2a:ed:6a:20:4f:
10:50:40:80:a2:ff:50:93:c4:7b:29:b7:b6:52:c0:
04:25:7b:aa:4c:ae:90:9d:5a:97:02:8e:60:95:18:
b0:a6:16:a3:ff:88:f4:fd:cf:72:35:03:10:71:96:
23:fd:62:ac:04:a8:fd:8e:18:ce:a8:5a:16:b9:e4:
0a:a3:21:14:2d:27:63:25:f0:f1:8e:01:14:ae:02:
c7:83:e6:21:74:8f:c6:85:56:6c:84:89:2f:b6:69:
8e:26:ed:26:f0:f7:69:a0:1a:a8:d1:4c:33:c9:fd:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:7C:02:00:8F:02:DE:EF:07:E4:56:A5:89:4F:06:96:CF:D9:D2
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:a0:ea:f6:6c:e7:e3:ab:81:3e:c4:45:f8:29:96:f5:be:
ff:a9:85:e0:d4:45:5d:39:9c:62:ba:67:49:b2:bc:81:73:39:
d6:f5:0f:e3:23:dc:4c:90:bb:f4:e3:b6:3e:6b:02:02:54:ca:
7a:4e:5f:14:77:11:e0:2a:dd:26:3f:2e:3d:c9:4b:0a:eb:fa:
73:33:2a:e4:d9:56:56:46:3e:c4:c5:82:52:ba:63:82:f9:33:
31:df:9c:4a:95:41:16:c8:cb:44:ca:bd:2e:f4:c5:b9:05:67:
ac:32:8c:8c:66:90:52:1d:1b:8e:15:5b:55:21:e0:bf:9f:52:
1d:bc:33:bb:73:b6:0f:7d:3c:f2:9b:a8:27:4e:ef:48:56:b2:
75:7e:83:a2:b6:69:13:7a:91:81:7d:56:e3:40:f9:48:b9:ce:
9a:21:ad:c7:c6:ca:9a:3a:05:e9:cd:24:b4:b7:61:3b:98:d7:
04:28:4b:e8:18:76:aa:f5:0a:0f:fc:31:2c:3e:57:26:94:53:
3c:0e:d7:f6:e3:e8:c1:c8:49:71:a7:d2:83:a4:8a:23:40:fb:
ed:72:e5:8b:7f:7f:9e:4e:08:7f:9c:9c:e1:16:ff:c5:d9:fd:
83:d9:7a:17:6f:e0:8e:e8:0b:0c:65:bb:f3:a6:86:62:11:67:
41:4b:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:24 2026 by rpki-client