Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: ocD+XQcQc8sL2xnVKMC9yXZ2IwZW7oEgY0UA8nXuGAY=
Subject key identifier: 94:32:93:8E:78:93:09:B4:72:23:95:59:10:09:66:CC:B4:9C:67:24
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019CAC7E2EEE68B563C45DAA7906EEFE740C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0B82
Signing time: Mon 02 Mar 2026 03:01:16 +0000
Manifest this update: Mon 02 Mar 2026 03:01:16 +0000
Manifest next update: Tue 03 Mar 2026 03:01:16 +0000
Files and hashes: 1: 4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa (hash: YciKFVkaY1et6p1gervIPcpyQE7yFFy/esyiuxYNcNY=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: 5fPYCkw2dsAaGY86+m1HSXUeaomzsuDKrfpwY0ujcIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2e:ee:68:b5:63:c4:5d:aa:79:06:ee:fe:74:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Mar 2 03:01:16 2026 GMT
Not After : Mar 3 03:01:16 2026 GMT
Subject: CN=9432938e789309b472239559100966ccb49c6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:0c:ac:38:70:68:87:61:ee:4a:f4:31:88:
90:bf:33:45:5a:59:3b:22:9f:43:37:6e:e2:aa:8d:
5a:ef:b8:fa:fa:48:bd:57:59:f1:ac:e1:39:0b:f1:
3b:8f:5a:6f:5d:9c:cb:c0:20:6f:c0:99:ea:0e:ce:
3c:e1:d1:d4:d0:57:dc:1a:d9:37:9c:c4:ca:5e:5f:
cb:fa:26:fc:b8:76:49:f0:77:b0:79:aa:cb:69:5a:
a6:4c:87:44:e6:d8:63:5e:4a:c3:d4:2a:8e:27:66:
93:33:ee:70:3b:1f:ef:03:43:fb:37:84:4c:cb:4c:
42:10:4c:bc:9a:ff:bc:f7:90:82:ec:ed:cf:1f:09:
d8:39:2a:8a:61:97:e3:2e:91:1e:00:05:67:c4:a5:
b1:ed:cb:21:78:83:19:8e:18:a1:da:1e:11:3e:bb:
3d:88:61:00:83:1f:33:ed:a1:44:f8:13:f1:04:1f:
61:44:29:85:15:8d:8e:f3:f1:cc:a9:de:7d:23:1c:
0e:63:14:14:f8:a7:a7:c5:9f:41:c5:77:c8:55:83:
83:f2:dd:82:8c:62:56:c2:7e:6b:e0:71:7e:d9:e1:
77:38:78:18:f9:88:d9:83:fa:2b:51:df:b9:6e:d4:
38:e2:9d:33:91:9d:a7:ff:d9:cb:82:d9:c8:bf:a4:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:93:8E:78:93:09:B4:72:23:95:59:10:09:66:CC:B4:9C:67:24
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4d:eb:2c:c5:f2:85:34:bd:1f:82:e5:d2:cb:df:d1:be:6e:
3e:98:a3:97:df:0e:c0:ca:8b:2f:9e:23:20:47:f0:eb:24:01:
4f:c3:49:4c:a3:9f:7a:4a:fd:4a:a1:54:65:06:fc:11:c7:63:
25:3b:f2:6a:f9:fb:d5:2d:9b:66:74:e3:84:aa:14:9c:b3:67:
b3:a2:1d:01:97:09:8f:76:3f:69:10:d6:af:cd:4d:12:bd:7c:
81:60:bb:ea:d2:8b:fa:1f:23:10:9a:59:06:77:b8:1f:ec:95:
a2:40:f0:5a:46:31:2e:99:78:15:33:08:f8:20:95:21:88:fc:
d8:19:fb:9e:70:68:01:5c:94:4b:bf:63:cc:8c:e4:b8:0a:98:
6b:b4:6a:4f:b4:2e:d4:d5:83:2f:96:75:2e:20:f1:0a:ab:cd:
6c:6c:42:e6:76:a9:d5:d0:a7:93:64:d5:ee:ab:a8:a7:ae:c9:
f3:44:f2:93:94:33:e1:e4:ff:f2:31:25:52:2f:e2:f0:ad:69:
ed:a7:8c:a7:5e:bd:8b:d9:a6:11:e2:c9:88:88:89:43:1d:d5:
d8:d4:1f:6a:d6:c0:59:52:e3:67:63:52:d4:1c:6b:9c:6a:04:
06:ed:11:98:a7:43:6a:5d:17:b9:95:7e:a6:cc:61:32:0b:9a:
a7:0d:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:29 2026 by rpki-client