Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: 6ZW2QltUJf29r78bNepGiFq7e88qu7IttBLLxTIMDdo=
Subject key identifier: B1:44:2D:D7:9C:D6:75:4C:16:D3:68:90:AA:3B:29:04:06:76:DD:3D
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 019CAA58B8E159A98B271942626C5CBFE6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 0606
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: uqno00iVqXEbyw4Jce9I4NCSd6U.roa (hash: LOvolmVlOGfS5/Lu0OZEEESsBkxydv7fTijwns2OR4M=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: UrS/hL1d+PWf0HLTp2AG5oV01uJJYF0y56vXz9fbr/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b8:e1:59:a9:8b:27:19:42:62:6c:5c:bf:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=b1442dd79cd6754c16d36890aa3b29040676dd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:f8:a7:db:6b:b3:81:ee:f0:e8:b7:cb:07:
21:bf:2a:35:d9:e9:d3:a5:85:d3:ab:d2:10:ee:34:
13:3f:15:9d:8e:f0:e4:aa:d8:13:41:05:b1:66:97:
52:ef:a0:4e:1e:fe:12:ee:f4:a5:38:d9:82:45:a3:
54:0f:79:49:01:07:64:50:7c:2a:6f:22:4f:0e:65:
4f:e6:d8:7f:3f:0f:8d:e2:25:7b:a1:96:28:50:29:
ae:ff:b9:36:98:08:c0:5a:9b:b0:62:0c:37:fb:62:
26:07:78:77:73:d3:8c:99:68:0f:30:4b:67:b0:cf:
d3:19:22:b9:8a:b6:b1:ef:2e:3c:37:a2:97:8d:57:
86:32:ed:b1:85:34:66:64:0d:7c:09:db:3d:5b:df:
37:98:33:3c:4c:37:15:3e:ed:b6:c9:74:5a:b2:4a:
fd:20:ea:8e:b1:7c:55:30:2c:13:24:78:74:f2:ef:
8c:93:ee:55:1f:44:d3:83:78:88:d1:de:b6:28:52:
dc:b8:d0:82:3a:28:45:46:17:38:11:ea:80:7f:8a:
7f:35:01:4e:69:8a:0d:21:c4:d2:4a:f5:44:bc:b3:
8e:97:8e:d9:80:8e:cb:8b:49:c8:38:d7:4b:76:f2:
b1:b0:63:27:e0:8c:f9:25:a3:b2:a9:99:c2:0b:64:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:2D:D7:9C:D6:75:4C:16:D3:68:90:AA:3B:29:04:06:76:DD:3D
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:a3:23:bd:f0:06:e2:30:2b:a5:81:1a:ff:84:dd:07:91:
7d:f1:7f:ef:c4:4d:28:f9:e7:85:56:f1:58:8f:0d:95:eb:bb:
cf:f2:1d:8c:ca:e4:d4:d6:91:0e:76:f7:38:68:33:a9:cc:49:
b3:a8:45:db:4c:4b:1b:29:7e:88:b6:f1:2f:5e:39:4b:a3:fe:
e8:dc:eb:92:a2:c3:83:80:2e:ca:92:6b:69:bd:f8:d9:7a:8b:
e1:3d:8c:9f:08:4b:df:cd:b0:3b:76:b2:9f:a2:0c:04:a5:73:
84:13:82:e4:49:dd:a2:a9:af:d2:5f:c1:14:ac:68:c3:2a:95:
e6:30:93:f3:d4:90:18:82:dc:53:56:89:fa:60:e8:29:cb:6a:
c1:f6:3e:c9:61:05:96:93:c1:d7:47:e7:a9:8e:e0:85:91:56:
e6:ec:de:e7:a9:fc:90:fb:25:54:1b:73:ee:5c:8f:aa:b4:df:
03:4f:87:f7:9d:93:92:47:aa:a5:0e:fd:24:b2:8f:a2:be:b0:
99:26:2c:47:8e:51:7e:c3:30:3d:02:b5:c7:f4:e3:db:d3:88:
23:c7:4b:95:f1:28:72:f8:c2:95:1b:cf:5d:69:52:a9:58:5e:
a7:60:50:dd:a7:58:5e:c1:40:8f:ef:b7:73:65:32:be:7f:9e:
37:d6:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:07 2026 by rpki-client