Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: vXgQUdujkCACX7wvF0pXVpEbRmxV5LWKs6BUxJdzl+w=
Subject key identifier: C6:DE:22:AD:F6:6E:BC:5A:01:4B:3E:3B:DA:E6:D0:AF:B4:3B:72:3E
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019CAA5862533D524192AAC628D4E4D41322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 097A
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: z2iMX03ZwNyex6srVzq9+kBOfUbROeaU9HqHxyHHva0=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:62:53:3d:52:41:92:aa:c6:28:d4:e4:d4:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=c6de22adf66ebc5a014b3e3bdae6d0afb43b723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:fc:05:94:d5:ef:d1:9a:78:ea:b0:12:e0:
d4:8f:51:d6:56:4e:19:54:d8:39:75:40:ff:80:b1:
8b:5e:09:1e:76:65:23:14:79:44:15:2a:23:81:80:
fe:14:aa:41:4f:95:f3:f1:67:5e:1f:0e:82:02:45:
82:02:8b:a4:b1:77:98:15:62:43:4d:df:ac:dd:12:
1f:d8:a1:19:8d:b5:6f:d1:17:36:0a:25:e0:98:b2:
db:df:51:83:e0:b7:7b:41:04:2d:6f:05:46:aa:9d:
66:1e:1a:90:bb:e7:65:31:49:3b:00:48:e5:0e:cc:
9b:67:6d:5f:46:bd:b1:5b:75:01:b3:4e:b8:37:bb:
1c:94:88:03:eb:cc:61:b2:33:04:c4:bd:90:75:5e:
1b:a7:15:cf:28:b7:20:f5:28:ff:1c:39:31:3b:77:
61:79:18:c8:f8:7a:8c:27:50:93:a1:d7:55:d4:8a:
a7:5b:c4:aa:d0:a6:f8:b0:1a:0d:41:b7:9e:eb:95:
ff:04:7b:c6:4e:d9:ce:65:79:f6:8e:49:0b:f1:50:
92:0f:4f:a8:0a:a4:b8:d5:df:cc:ca:15:4e:6f:3e:
b5:7f:34:a9:e5:fc:77:f8:b7:a9:45:58:7b:08:60:
c5:f2:f8:90:bf:a1:d2:53:4e:e5:86:46:05:78:00:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:22:AD:F6:6E:BC:5A:01:4B:3E:3B:DA:E6:D0:AF:B4:3B:72:3E
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b8:22:d0:13:cc:4b:2c:32:d2:26:9a:87:e2:d5:ba:ee:ef:
b1:b8:14:c3:78:35:54:38:e4:3a:82:ba:40:3d:64:de:ef:ba:
f1:b4:e2:5b:2a:da:b8:75:f5:d6:27:f1:25:a5:1c:68:f2:09:
82:82:54:83:35:47:06:7d:49:93:22:f6:18:9d:9c:5f:12:60:
b1:91:da:1f:0e:af:b7:a5:89:fd:06:60:a2:bb:0c:38:bb:64:
92:fd:b7:61:47:59:7a:ba:82:da:bd:42:18:d5:73:bf:29:57:
e7:b6:f5:52:6c:84:47:20:a6:7a:83:a3:54:ea:07:01:25:23:
e7:1b:24:19:9f:13:d0:3b:41:22:fe:ff:53:68:bb:59:9e:e6:
5f:58:4d:4d:a5:c3:59:33:e0:66:75:81:53:dc:6a:f0:60:1b:
7c:a9:da:9a:37:54:7e:05:91:ec:d1:9d:bc:fd:de:71:6b:fb:
b3:f1:4e:41:33:6e:ff:a8:b9:9a:49:7d:ef:32:4c:df:52:0f:
1a:a5:a7:bf:08:6e:3b:30:7d:4f:cd:8f:24:8d:34:cf:d3:29:
2a:9e:cd:c1:7c:78:6e:9e:e2:90:9f:b7:b1:60:23:9c:bf:f3:
be:b9:cd:aa:91:9a:50:51:0b:bf:32:07:2d:05:ef:b0:5a:b3:
1e:49:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:03 2026 by rpki-client