Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: NYoS42cAJZKLwbqtaMkFQLlrvANB+MLrm2K6Gp7ExhU=
Subject key identifier: B9:ED:1E:01:55:3D:CD:8B:1C:41:B7:8F:4A:D2:84:06:25:14:8A:C8
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019CAD5A6AAFD9F8BFD11708C8D656FCA0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 07B9
Signing time: Mon 02 Mar 2026 07:01:49 +0000
Manifest this update: Mon 02 Mar 2026 07:01:49 +0000
Manifest next update: Tue 03 Mar 2026 07:01:49 +0000
Files and hashes: 1: ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa (hash: yOnugz5IMt/r/ItObFdGYTlUVT1M5hQ/rMrPgRDzlRk=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: Vm8YNC3Z3JEaDw3TG76OYIBr3apiBiXTV4ELKZW3DKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:6a:af:d9:f8:bf:d1:17:08:c8:d6:56:fc:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Mar 2 07:01:49 2026 GMT
Not After : Mar 3 07:01:49 2026 GMT
Subject: CN=b9ed1e01553dcd8b1c41b78f4ad2840625148ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:4b:7f:02:8e:29:ac:38:38:fe:e7:0c:da:
f7:c8:16:11:90:7a:c3:15:c9:f0:0f:b8:3d:1e:66:
29:0d:cc:60:e2:a5:de:d2:6a:9d:fc:11:ec:35:a1:
d0:fd:fd:07:c7:9a:8d:11:79:25:a1:2d:12:ee:b8:
c5:c6:7d:ca:82:7b:8f:35:d7:21:48:29:dc:b7:68:
81:50:08:00:8a:82:ef:88:b5:b3:7a:7c:f7:b4:27:
a8:11:57:1a:ac:cb:bf:c7:64:93:78:81:df:99:a0:
14:0f:3e:32:b1:ae:9e:7c:38:56:cb:32:5c:40:56:
be:28:42:16:ac:61:53:0b:b9:e2:31:e5:69:b0:4b:
3d:a0:3c:6e:cf:55:21:69:01:3d:cf:b1:5d:ee:4a:
ac:ff:5b:13:9d:0f:5a:3e:6d:96:82:e3:52:1a:74:
9b:d7:42:c1:ac:4a:53:a4:de:f5:3e:e5:61:0c:b0:
ab:24:e2:86:6c:4f:d3:2a:36:e3:07:8e:67:ac:e0:
fc:09:cd:b8:cb:2f:32:4c:54:02:6e:f4:a2:85:90:
35:01:71:04:78:dc:a2:4c:88:82:52:3f:cd:0a:97:
1b:ea:65:48:ab:34:c5:df:6d:1d:a7:56:8f:05:a5:
07:d8:5a:55:6a:cd:34:cb:f4:28:9b:dc:08:ac:c1:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:1E:01:55:3D:CD:8B:1C:41:B7:8F:4A:D2:84:06:25:14:8A:C8
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:54:be:7e:2f:f0:68:83:b6:91:c4:69:18:0e:43:c5:46:
8d:2a:d5:cb:27:06:10:03:82:e0:05:3e:55:b8:12:3e:14:3d:
1e:27:3b:bb:f8:94:db:ff:f3:79:36:b8:a0:06:8b:de:73:8c:
82:7d:bc:f1:11:bb:ae:85:e7:1b:8b:d3:ed:56:a1:c3:82:57:
bc:a7:5c:cb:55:e7:e0:d5:36:17:af:5b:5b:3d:ca:59:da:91:
f9:9a:c8:b7:bf:90:09:a5:d1:a5:5b:ac:f6:09:65:a5:79:64:
4a:36:08:d1:ba:06:b4:bb:43:3e:19:ab:07:c5:e4:d2:f6:87:
7b:d6:8e:b1:4c:c6:83:b1:f7:63:fa:c5:03:42:63:8e:24:28:
c3:20:f2:d9:48:ec:89:d5:a7:57:52:fd:6b:a3:ed:b0:86:ce:
ff:ea:71:a6:70:9a:32:7d:6c:20:64:3c:48:8d:46:36:1c:b9:
73:5e:6c:ef:28:10:ff:7e:79:b1:ec:a4:17:2c:f6:6e:9e:62:
d2:3f:2a:bf:1a:d2:10:d0:34:a9:1f:50:5e:37:62:f9:ea:1e:
cb:28:99:55:46:e9:da:e5:a7:05:68:46:c5:24:c4:b8:fb:19:
d6:91:b9:d5:14:8b:b7:8f:44:6f:b8:5b:22:12:ff:a5:ad:7c:
49:86:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:39 2026 by rpki-client