Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: QqrcFt7qcvfyhW3F8VZS2MLYN8hessfV0hnhEg4do7o=
Subject key identifier: 7B:36:85:F4:87:EF:1C:D0:B1:A7:EE:89:48:0C:84:E0:ED:A8:81:2A
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019CAAC7130BC43E00A65C68948735AACBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0B89
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (hash: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo=)
2: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: WnTi5rEQjU5ZjERHPzz+e1uZuaAYFCzCaVlwWONUMQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:13:0b:c4:3e:00:a6:5c:68:94:87:35:aa:cb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=7b3685f487ef1cd0b1a7ee89480c84e0eda8812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:04:fc:a6:7d:88:84:f9:be:51:e0:bd:e2:
29:33:55:09:59:cc:7f:08:b1:0d:9d:29:a2:a4:c5:
e3:36:f6:34:78:66:4b:dc:6f:fa:bd:04:88:78:3a:
5e:5a:4a:f2:f7:cf:fb:5f:fc:a2:cb:e0:2b:e8:6b:
42:27:07:d8:a6:2f:8d:60:cf:78:14:e3:fa:19:63:
fd:48:86:37:3c:31:b6:29:12:1d:8d:38:51:ec:f1:
85:dd:94:e2:f4:ef:98:63:28:d7:02:d4:6a:41:19:
81:eb:a2:91:44:32:61:e2:af:ae:7c:55:7d:d4:45:
d9:d7:74:82:65:63:a0:e8:63:1f:34:5a:c3:7b:39:
f7:77:27:c1:68:09:ef:f9:3b:dd:65:f6:33:b2:d1:
3d:00:68:d9:df:03:3b:58:66:44:7e:d4:b0:91:36:
24:f1:d0:8f:66:91:ae:86:a5:ff:d6:b8:f8:06:0d:
e5:7a:76:8b:5e:20:62:4b:b5:20:d5:60:5c:af:e9:
d6:ea:90:bb:b6:25:c8:63:7a:53:50:a0:2c:9f:8a:
bc:5e:26:2e:9b:7a:d0:ce:a9:b3:ca:d5:aa:80:d1:
98:60:c5:6a:e6:ab:52:fd:3f:2e:ae:41:ce:43:79:
63:9e:f1:21:1b:a3:04:a0:1d:01:c9:f3:0b:d0:4e:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:85:F4:87:EF:1C:D0:B1:A7:EE:89:48:0C:84:E0:ED:A8:81:2A
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f9:a1:a2:8d:73:b4:4e:b7:92:a2:71:bd:07:2a:ab:d6:93:
68:3f:2e:0b:67:14:5d:1f:f0:c5:3f:68:46:7c:5c:e3:42:8b:
1f:ad:09:76:0c:0c:47:89:f7:63:30:ca:fe:ca:85:3a:fd:84:
f5:d7:ee:90:24:83:5a:13:71:07:34:38:26:d6:2f:68:fd:b9:
1a:dd:3c:b1:0c:09:38:e1:0a:ab:20:5c:65:9b:90:17:65:31:
44:80:89:94:dc:b9:fb:bf:51:99:fe:ca:34:5a:2c:c6:0f:81:
dc:b2:af:cf:6a:b0:96:4a:7a:cd:be:c5:86:88:d8:de:c6:f8:
c8:02:45:12:2e:e2:53:28:97:b0:b1:00:16:cf:cc:71:86:60:
60:5a:da:6f:da:e6:c7:d6:54:b9:fd:6a:05:a3:7a:78:e8:30:
7b:7f:ea:ed:2f:14:15:61:e8:a5:61:9b:97:61:62:ac:7a:2d:
16:00:a4:be:bc:a1:03:50:40:ea:95:99:4b:62:b0:66:2d:12:
bb:77:3a:f7:df:47:8e:ff:9f:36:4f:14:0d:50:cb:68:fa:64:
da:1a:9f:cc:3b:00:d2:bf:18:b8:a0:1e:a6:f7:f7:ce:79:13:
f4:76:d8:0c:47:a7:84:5f:be:f7:c0:52:42:d3:7a:6e:56:33:
f2:e3:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:42 2026 by rpki-client