Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: WKfgRK8OqbUdx02sbArx0rKwo3Hf41SsMJ30Fw61H2Y=
Subject key identifier: 56:A1:5F:26:D1:6D:AE:82:4C:3F:10:64:44:85:AB:34:37:36:EA:BE
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 019CACEB72879032B18A0C6A1C3F3A13F0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 10F6
Signing time: Mon 02 Mar 2026 05:00:37 +0000
Manifest this update: Mon 02 Mar 2026 05:00:37 +0000
Manifest next update: Tue 03 Mar 2026 05:00:37 +0000
Files and hashes: 1: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: xlUaJUgDyeppt4/5+qYkrPoH83ieB+1HoC/wI/SvMaI=)
2: cMLXGA_6lhirTspoM9xrh1-1Z2c.roa (hash: tb3jenRFfrVxLNPvDmSsDeJNfF95+Hv8OEEMT0bRA9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:72:87:90:32:b1:8a:0c:6a:1c:3f:3a:13:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Mar 2 05:00:37 2026 GMT
Not After : Mar 3 05:00:37 2026 GMT
Subject: CN=56a15f26d16dae824c3f10644485ab343736eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:4a:34:d7:b6:5c:54:9c:31:31:ee:31:ad:
45:b8:ff:f3:3a:ce:be:0d:81:28:24:18:ea:78:c0:
78:82:19:a6:7d:13:39:e6:f8:d8:87:9c:a0:8c:50:
88:03:88:0f:dc:e3:b7:7b:59:4e:ba:fe:45:40:c1:
21:10:71:5c:33:51:66:a2:7f:68:47:cf:7f:01:53:
35:71:97:53:d8:2c:7c:f7:17:40:01:67:c9:85:96:
8c:fb:52:e4:77:88:58:33:d8:70:32:5f:0f:58:d6:
a7:bd:b8:03:80:9e:18:1c:3d:f5:34:42:57:27:a2:
8c:7d:ee:83:9d:49:66:94:98:25:42:48:04:3e:fa:
f6:f1:27:ae:65:f8:f8:cc:be:de:9e:f5:6f:6c:00:
f2:ea:ae:99:f9:6b:29:ea:32:ea:09:f4:c4:2d:d4:
91:38:25:d9:73:86:59:6f:82:21:a2:ac:a8:fb:b0:
67:bf:7f:e4:b6:aa:06:48:42:b5:a4:f9:2b:8b:7c:
bc:92:29:74:55:d9:46:14:14:44:34:11:19:a6:a7:
d4:7a:9e:0a:f0:08:ac:25:2c:e6:da:1f:cd:b3:a0:
b6:63:67:c0:c9:0a:9a:df:d9:43:b5:04:eb:37:38:
1d:42:7b:98:2f:59:3d:d0:8b:5e:07:0b:22:e0:17:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A1:5F:26:D1:6D:AE:82:4C:3F:10:64:44:85:AB:34:37:36:EA:BE
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:52:bb:39:57:4d:1d:28:60:7f:8b:40:9f:87:21:0a:fd:
1f:f2:a7:dc:aa:a8:29:3f:3b:0d:fe:87:df:cf:7a:b2:93:7e:
7b:c0:2b:ad:1c:cc:52:dd:f8:5c:ed:46:12:6c:f1:cd:d9:95:
71:dd:96:0b:aa:ef:42:e4:6c:ab:e1:8a:2c:5b:df:3e:cd:76:
2c:71:2c:ba:bb:44:f4:9d:cf:2b:ac:53:5a:4a:f6:d3:49:a7:
14:76:75:32:0e:82:bc:97:c1:22:8d:69:71:b7:28:23:09:b1:
7e:32:a8:d7:93:5d:91:ca:9a:d9:42:00:c0:4f:b6:f8:67:8b:
28:7e:1e:5d:76:f4:82:bd:f9:89:1c:8a:35:25:c5:31:18:38:
60:80:71:40:7d:14:06:dd:78:ad:e4:20:b0:44:c4:cf:1d:4a:
a7:39:57:c4:c3:bd:42:62:b5:c0:e6:82:9b:04:f4:47:14:5e:
92:29:5e:dd:bc:3c:d6:83:7d:d1:71:32:90:86:77:9e:06:6c:
25:96:91:44:bf:42:48:4c:2c:57:ab:81:40:f4:fb:5e:74:46:
3d:01:8d:b8:ad:fd:a4:5a:bc:d7:ee:a8:80:45:74:70:ed:5e:
c4:6a:e3:e4:08:69:ab:9b:cd:0e:39:4f:bf:e8:a3:e4:8a:fc:
bb:aa:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:58 2026 by rpki-client