Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: 4XHQy4k/2efHVSAmvqyQUUrJtM5q5RDaMd6OeAn3tVI=
Subject key identifier: 1E:4D:19:09:A8:45:2E:11:7F:CA:77:D4:D7:B4:CE:79:8C:5B:DE:40
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 019CABA1BAEF7ACCF9CBDFCD4E5BB91E6936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 0936
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: 5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa (hash: 242jMsYVWeBLhjugJFcXOkAL1qz3e8MYr9rwKIXdUO0=)
2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: rkISjFlF6geXzUQtDyIQasKaQQlRgfBh+6qdzpds0+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ba:ef:7a:cc:f9:cb:df:cd:4e:5b:b9:1e:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=1e4d1909a8452e117fca77d4d7b4ce798c5bde40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:84:25:e9:d9:96:ac:1e:ea:4f:0a:2e:f1:
8a:7c:66:1c:01:4d:29:40:52:b0:41:9f:67:d2:a3:
a0:db:0f:53:51:01:1a:c2:ee:f9:fd:49:c9:bc:30:
56:dd:06:40:df:8d:b4:e5:1d:58:2e:83:b8:0a:68:
02:50:23:03:23:c6:9b:60:1c:c1:95:b0:67:c0:24:
86:ae:d3:5b:6c:45:c5:57:3b:4d:18:9c:21:c6:45:
23:4b:c3:6b:08:e7:37:3f:60:42:b4:39:36:6f:fc:
4b:be:28:11:53:08:89:8b:85:f7:f6:04:0f:06:2f:
72:8b:cd:10:e6:e8:33:4c:8f:f6:9a:d0:af:ed:bd:
7e:a9:28:39:4f:d4:08:61:3c:04:c5:11:3d:43:58:
a6:19:be:f7:f7:db:39:2d:fd:84:63:08:a5:8d:e1:
a8:32:9d:b3:ef:e7:8b:2f:fa:91:90:7f:bf:3a:2e:
cc:af:52:5d:bd:0d:5f:df:5c:5f:9d:3e:b4:74:e9:
12:80:e0:6a:92:ba:9a:f4:5f:ba:2f:da:68:87:67:
0d:03:6c:e4:35:7c:96:e9:87:e5:2a:8f:49:7e:3a:
ea:c6:1e:72:f4:78:47:4d:23:3f:df:3b:9f:fd:5d:
f3:ba:cf:9a:7d:c0:00:18:80:5b:80:0a:c6:82:1e:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:19:09:A8:45:2E:11:7F:CA:77:D4:D7:B4:CE:79:8C:5B:DE:40
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:de:99:3a:68:ea:02:52:5c:3f:32:93:98:13:1b:a2:0e:
b9:cc:fa:31:81:f0:2b:d3:c1:4f:25:68:10:7a:28:84:51:83:
7b:20:31:93:1b:bb:d9:56:4f:dc:c5:36:c2:24:eb:18:bc:5a:
2b:76:08:72:a3:78:91:93:3c:f9:b2:74:58:9b:7a:dd:01:9e:
42:f8:82:8d:f4:e0:19:fc:db:eb:dc:ce:e7:26:15:ca:40:fe:
94:80:cf:3d:be:c9:49:59:47:07:20:9a:86:32:cc:7d:d5:7b:
29:0e:5a:f7:40:86:b2:7d:83:b0:76:be:b5:94:79:0d:b2:69:
41:96:3d:53:3a:79:4c:21:35:a0:ba:0f:ac:65:2e:e1:e7:64:
98:4b:ff:1f:97:e0:25:2b:e6:8d:0b:2a:85:df:90:48:69:0e:
ca:a5:01:9d:10:f2:d2:54:30:2b:0f:6a:d8:15:b2:68:32:76:
7b:fe:80:78:2a:4b:1e:20:c0:f2:33:29:bf:2d:d2:b8:65:19:
8a:a1:eb:34:67:ed:d9:27:b4:b8:38:5c:51:a0:33:65:0a:fb:
47:be:6f:70:31:74:e4:41:84:1c:6b:a0:b8:b6:b2:29:05:a5:
1d:fc:a2:fa:8b:2c:cb:b7:87:19:23:47:b9:70:69:5d:92:cc:
dc:b9:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:44 2026 by rpki-client