Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: LRb+XiGaEb+1tJVLa6Apb4xqW4ZsZOwix7nlal86Z6c=
Subject key identifier: 4D:06:B1:B1:8D:1E:7C:03:03:0B:22:72:D8:4F:58:30:59:0C:99:FF
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019CAC7E2E7841BA311C5A31B42212EDF89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0CFE
Signing time: Mon 02 Mar 2026 03:01:16 +0000
Manifest this update: Mon 02 Mar 2026 03:01:16 +0000
Manifest next update: Tue 03 Mar 2026 03:01:16 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: X4bT0C9PCW+8ynitBwzedhTD5BCyzs/tDDgjon/PvL8=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2e:78:41:ba:31:1c:5a:31:b4:22:12:ed:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Mar 2 03:01:16 2026 GMT
Not After : Mar 3 03:01:16 2026 GMT
Subject: CN=4d06b1b18d1e7c03030b2272d84f5830590c99ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:74:e0:a4:12:7f:9f:ec:a5:99:d6:f2:17:
32:1f:0e:c9:37:ee:77:be:df:e7:e3:1f:82:b3:47:
42:c2:75:ef:b8:53:2f:36:fb:a7:de:a9:34:e2:7c:
e6:63:57:f2:99:a0:84:5a:66:6c:92:d6:da:6b:c2:
22:5c:31:19:59:e6:7d:e7:5e:2b:2e:73:65:f8:2e:
cb:45:73:54:f2:8c:87:11:f8:2e:39:51:3a:a3:7f:
ed:15:09:e9:7d:d5:0c:e3:69:62:fe:f8:ff:fa:e0:
73:18:d9:ac:b1:54:81:d5:91:e6:18:b9:c1:0d:b3:
c1:51:63:82:e5:ef:04:75:c1:48:02:a5:46:6f:9e:
b2:a8:7d:8b:77:4d:f9:ec:8f:ec:15:53:99:20:aa:
00:05:4d:61:ce:81:63:28:2e:3c:c9:9b:f8:54:12:
58:dc:02:f5:b6:d1:2d:ce:5d:1a:34:0b:bf:30:7f:
2c:7b:37:26:c6:5b:66:ff:90:ea:22:a0:53:74:56:
64:5c:0d:41:ee:d8:4b:f5:e0:38:61:dc:05:08:af:
22:23:73:ac:4b:da:6a:1d:c7:f3:65:32:c4:21:86:
39:a6:20:be:6d:51:08:fd:74:56:1d:24:83:46:a6:
44:c5:f5:c0:ca:f2:cf:fc:1a:5d:93:95:f3:06:ee:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:B1:B1:8D:1E:7C:03:03:0B:22:72:D8:4F:58:30:59:0C:99:FF
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fc:5c:fe:63:5b:57:76:8d:89:3e:d0:b0:eb:50:d5:8d:da:
0c:19:35:02:a8:d9:4f:f1:ba:24:eb:18:17:b6:2f:de:92:e1:
f8:24:5e:e4:32:6a:8c:cf:b6:f8:ca:39:88:40:0b:2e:bb:34:
e6:e1:af:b0:5b:3d:b2:81:78:a3:2b:7d:e4:2e:83:46:71:39:
90:47:d1:75:5a:38:55:a5:34:98:45:e7:a5:fc:be:b3:ae:69:
24:8f:24:19:e6:14:20:4d:70:ea:e4:47:7b:bf:36:f7:1a:67:
ef:7b:66:af:46:fb:8c:63:36:46:14:c7:7e:75:f3:b8:1d:75:
52:d1:fa:99:57:33:c4:bd:ce:b0:31:c4:41:be:f8:47:a3:51:
92:30:a8:8f:9d:ba:e6:dd:c7:8e:17:ab:38:1c:9f:ec:37:a5:
4a:3b:37:08:79:16:6f:97:6e:98:99:39:fb:c5:11:db:f1:ec:
7f:7c:6b:93:64:2d:4c:c2:ba:a3:d2:da:f2:e6:74:97:bc:86:
8e:de:d0:cb:63:56:48:49:47:6f:9c:1e:b2:43:72:8d:fa:e1:
82:4f:3f:59:e8:05:9e:85:70:97:f1:35:2f:74:be:10:c2:4c:
79:ea:10:29:1a:3e:2c:90:22:49:7a:64:34:df:dc:b5:d9:b4:
19:45:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:03 2026 by rpki-client