Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: /BpO8KYHhD0iGHVYsQ24zHw6xRgZEZr96BBdDzoRJ0k=
Subject key identifier: 90:A1:F8:C1:C5:64:C3:CC:F5:16:CA:AA:3B:D0:1B:29:E9:1C:4B:A5
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 019CAC7E347433DC02858D719DECCA0CF711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 03:01:17 +0000
Manifest this update: Mon 02 Mar 2026 03:01:17 +0000
Manifest next update: Tue 03 Mar 2026 03:01:17 +0000
Files and hashes: 1: ro9Q9RFKhgezIN_wav4dR-eXoZw.roa (hash: bgN32+4ndLdWd2BsCVHxOm8hcnK6B9MsF19ZhVaVHsY=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: 4rb37HwiOFISgO/XH5zkTX2+ROdMXVFJ7WR7Apy79WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:34:74:33:dc:02:85:8d:71:9d:ec:ca:0c:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Mar 2 03:01:17 2026 GMT
Not After : Mar 3 03:01:17 2026 GMT
Subject: CN=90a1f8c1c564c3ccf516caaa3bd01b29e91c4ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:dd:ad:61:10:07:1d:e9:4f:5a:aa:65:85:
e3:89:43:b4:77:55:c8:8e:1b:35:a0:29:6b:18:dd:
b4:5d:55:45:39:86:02:84:cc:9f:b1:f4:fc:31:10:
ef:60:82:d6:d2:04:bd:22:d7:e4:ad:1b:84:6c:89:
63:d6:c1:02:b7:05:32:39:46:6b:ad:4a:08:15:c4:
79:10:7f:da:1f:dd:1f:05:63:16:f1:1c:b2:5f:ad:
18:95:ed:af:0f:3c:14:7d:25:e8:b6:27:18:4c:6d:
3d:c8:4d:ae:31:65:27:fe:2f:5c:ef:80:ac:f7:77:
fb:4f:80:5d:7d:4f:b2:bb:b3:fd:c4:43:f2:1d:b2:
b0:74:91:44:b3:d5:a9:e7:ca:0a:3e:5c:b0:0e:e1:
0f:76:5b:1e:10:f0:57:fe:e5:f4:57:69:c3:ef:88:
18:a7:a0:ec:d6:57:f2:44:3d:bd:36:03:0f:75:88:
b7:87:ca:98:0c:34:c3:ab:4f:c5:c5:0e:2a:8c:d4:
67:1a:a3:bb:fe:1d:fc:f8:76:60:81:c5:26:f9:7a:
20:c4:40:61:0a:7c:b1:5d:00:c3:3e:ba:22:21:15:
15:b2:5c:03:82:30:12:41:8b:5a:e2:9f:05:de:b0:
95:08:23:06:30:54:f2:4a:b5:e6:41:e0:ae:52:85:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:F8:C1:C5:64:C3:CC:F5:16:CA:AA:3B:D0:1B:29:E9:1C:4B:A5
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:20:81:9f:75:43:bf:02:19:07:e8:20:39:ea:f7:48:45:
60:2c:d6:c6:fd:6b:12:5b:d0:d2:fb:07:b4:b1:ce:1b:26:20:
24:3f:b1:cd:42:5f:f8:19:a3:30:ab:07:71:47:91:ba:90:27:
1d:b6:91:83:47:da:67:87:4b:5d:f3:e0:0c:ce:11:59:66:e0:
e5:0c:a1:93:8b:97:14:fc:81:9e:75:b1:f5:78:e2:c7:c3:f9:
4d:3f:87:d4:ef:44:8e:03:a9:2b:44:7f:4f:31:21:ee:80:5a:
d6:ff:b9:c4:c2:1c:2d:94:f9:10:c3:69:6f:db:c9:fe:83:6b:
84:a2:91:c2:9a:56:1c:d3:fa:26:d4:9b:57:e8:ad:25:cc:35:
bd:aa:c0:4f:ed:c3:fa:e8:a5:fd:c4:93:d7:e2:16:39:c6:34:
3e:47:b3:8c:0d:f0:3a:09:91:b6:ef:b0:6c:9d:0e:67:90:c4:
43:20:7b:be:27:59:13:c0:73:94:58:18:92:32:9c:f4:84:6b:
61:e0:a2:01:38:b4:01:32:c2:d5:a1:0c:93:78:ac:b9:ea:26:
25:98:37:c8:a4:b8:4d:56:23:ef:f4:a3:cb:89:18:62:85:53:
e6:c9:2c:7c:1c:31:7b:70:e7:ab:c5:2e:af:7f:15:c4:22:ab:
64:bb:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:38 2026 by rpki-client