Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: y7vYMwOY5aaUSam8zI64cPbwdAri2wPv1W02aJzmq9o=
Subject key identifier: 76:71:5B:1C:98:3E:43:7F:F1:66:D9:EA:B1:9D:F1:10:4A:FD:DA:BF
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019DA3AF04BD2747D11A4BF74CB232F29A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0C02
Signing time: Sun 19 Apr 2026 03:00:49 +0000
Manifest this update: Sun 19 Apr 2026 03:00:49 +0000
Manifest next update: Mon 20 Apr 2026 03:00:49 +0000
Files and hashes: 1: 4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa (hash: YciKFVkaY1et6p1gervIPcpyQE7yFFy/esyiuxYNcNY=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: H/CMsKp0DzLi2suLfp1IwzklgDASrzMqzD8REQqCrkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:04:bd:27:47:d1:1a:4b:f7:4c:b2:32:f2:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Apr 19 03:00:49 2026 GMT
Not After : Apr 20 03:00:49 2026 GMT
Subject: CN=76715b1c983e437ff166d9eab19df1104afddabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:ac:f4:e7:15:41:6f:35:e9:6b:82:96:0d:
a0:b3:bc:6e:62:3d:c7:16:5f:61:90:c2:65:6a:9c:
8e:4f:0a:3c:5e:8e:c4:40:fb:d0:01:4c:09:55:26:
b8:66:5d:9a:06:7b:bc:ea:a9:8b:66:7c:4e:90:08:
0b:ec:3e:c8:9d:54:05:75:3c:52:f3:10:6e:32:3c:
8f:64:9f:cd:8c:79:bd:2b:08:b8:8c:04:9e:fb:b8:
09:bd:42:59:1e:c3:07:73:3a:24:e8:f6:b3:80:7a:
bb:4d:d0:4c:35:fb:39:cd:b0:0f:64:62:4b:13:1b:
57:26:dd:19:a1:55:4f:52:b6:9f:43:8a:53:1f:de:
b8:91:0a:26:bc:6b:d5:cc:bb:aa:d8:f7:07:5e:75:
8c:8f:2a:d0:67:06:ed:cb:ff:7f:d6:68:f1:a5:b8:
49:64:19:3b:77:ad:3d:cf:cb:4a:7f:d6:01:ff:d1:
b3:f4:0c:16:79:d8:1d:ed:37:ef:4b:78:10:24:24:
60:a4:a6:96:1b:48:52:fd:11:d1:e5:95:8a:67:74:
b9:a0:a7:d0:d3:a6:63:9a:c4:8f:5e:e7:f6:b2:96:
89:4d:6f:fa:83:45:78:dd:c4:42:77:bd:9c:0f:98:
95:2e:80:cd:87:e6:9e:a8:a9:2e:6e:4e:cb:22:53:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:5B:1C:98:3E:43:7F:F1:66:D9:EA:B1:9D:F1:10:4A:FD:DA:BF
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:6f:83:4a:23:13:5d:65:49:f9:55:65:24:be:49:5b:cb:
c0:7f:14:00:ce:42:e3:5f:af:a7:bf:a3:d5:a4:45:2f:f0:3c:
7c:a6:ee:54:60:29:00:d8:49:62:67:6f:34:d6:bb:23:7d:1b:
6e:fe:32:bb:f0:34:7e:4f:92:23:02:c8:e7:66:07:56:67:73:
81:79:e5:44:5d:b5:1f:4c:3c:0e:08:8f:86:bd:11:12:cf:8e:
5c:21:fe:7c:93:1d:33:5d:cc:f5:3e:e4:54:37:71:55:5d:d4:
e9:26:10:12:f0:ec:df:34:e3:b2:40:d8:dd:b8:b3:66:53:93:
1d:9c:a7:4d:92:98:49:2f:99:4a:40:cc:9f:58:b3:5d:fc:08:
5a:08:73:73:70:55:c0:55:fc:fb:13:cf:91:21:1f:4b:88:35:
61:53:86:41:e5:46:bd:68:50:31:8a:ab:e8:a2:26:06:11:1e:
e3:94:e0:da:da:16:93:ec:bd:46:f1:24:2a:c5:9a:fa:55:81:
1b:45:79:b6:ca:65:a8:6d:ef:df:ff:71:59:b2:b8:3a:92:d5:
04:ce:9e:53:76:39:0d:0e:3c:81:4f:f0:0e:11:7d:f0:2f:0a:
71:bb:51:72:7e:8f:c9:a0:f3:fc:ed:3b:71:27:e8:00:4a:0e:
59:26:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:28 2026 by rpki-client