Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: BrbW+rcLFppwaWssWoRXceF/295AdjwqRDxucIzi30M=
Subject key identifier: 2A:32:DE:06:11:95:41:44:30:44:AA:B7:9D:DE:EE:EB:8D:15:02:A0
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019CAC7E3626182DC4AA405F976DC382CF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0D96
Signing time: Mon 02 Mar 2026 03:01:18 +0000
Manifest this update: Mon 02 Mar 2026 03:01:18 +0000
Manifest next update: Tue 03 Mar 2026 03:01:18 +0000
Files and hashes: 1: O2gYXWLOZ1baGkkO6V4ffkZOf14.roa (hash: 0azU39AJWRQ9GwuVFR5XGckgzC3aJ2sgglAZkdjKoC0=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: roGe42GIj53R5sQCNX4AavaHDD/j0xIKeGpC7kUWMEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:36:26:18:2d:c4:aa:40:5f:97:6d:c3:82:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Mar 2 03:01:18 2026 GMT
Not After : Mar 3 03:01:18 2026 GMT
Subject: CN=2a32de06119541443044aab79ddeeeeb8d1502a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:ad:6b:d6:e3:60:b9:3d:ba:7b:0f:f4:93:
ba:c0:3c:0c:d6:01:33:e1:15:b9:32:7c:35:a0:29:
f8:92:c3:18:06:2e:43:af:c4:e9:10:83:4d:22:ec:
61:f9:e3:50:13:0f:8d:db:98:3a:c2:ae:a9:d3:6f:
54:f6:34:04:19:b5:11:63:64:1c:eb:d3:bd:54:d7:
80:15:4d:8a:ce:9b:7e:d8:e2:30:83:49:6f:2f:7e:
36:84:f1:b6:8d:38:28:d3:b6:e9:53:41:a9:c6:08:
fb:17:6d:56:94:36:6c:c0:a7:57:15:10:57:ff:c8:
0c:9e:1f:44:e6:c6:47:ea:26:c1:9e:9d:8a:81:63:
71:ed:f1:43:9f:8c:13:53:6c:94:09:3f:81:c3:b1:
19:97:58:55:4f:1b:11:22:2b:43:83:a0:7d:20:61:
a0:6e:a8:0e:0e:7e:23:70:78:c1:22:c4:66:12:74:
74:fe:ee:93:8a:ce:d3:53:8d:98:db:a2:ee:b9:f8:
ee:0e:ce:be:ba:e5:f8:a3:de:cf:ac:a0:d3:e6:9a:
d2:1b:bf:9e:9e:37:35:56:b7:0e:9b:04:34:12:a0:
71:3e:f7:14:9b:cf:49:d5:11:a1:76:e0:19:e6:13:
1b:e0:8d:16:df:6c:ff:78:8d:fa:f7:02:3c:b3:ee:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:DE:06:11:95:41:44:30:44:AA:B7:9D:DE:EE:EB:8D:15:02:A0
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:08:d2:d9:25:2b:98:6c:58:f2:0e:13:69:5f:a5:ef:09:
a1:e6:72:24:7f:c4:1b:52:1e:55:7e:f6:79:82:5b:51:cc:8b:
af:63:16:e2:da:7b:cb:ff:45:24:06:6f:c8:b1:d3:14:76:86:
3f:63:4f:ab:63:73:4a:b6:9a:d0:7a:87:84:a5:5c:68:97:5c:
2a:50:37:b4:e5:6c:06:50:af:08:c2:8c:d2:8f:2c:09:95:ba:
19:fd:18:ff:b0:38:6f:25:74:e7:99:cf:ad:92:2c:b3:83:5b:
6e:24:90:47:7e:34:8c:f8:62:8c:3b:8d:45:2c:53:14:44:2c:
75:79:a3:99:4b:ce:42:d8:bb:8e:71:38:9a:31:0f:db:d5:83:
d0:bb:33:11:2f:61:53:17:78:99:a4:98:03:39:03:b4:36:f1:
e7:c0:5c:c0:85:34:cd:04:dc:cf:26:57:89:84:7a:96:49:f5:
09:ba:03:db:bc:04:c8:32:94:a5:b2:75:54:d9:fe:e3:32:e9:
22:f8:52:7f:c7:5c:4e:19:15:2e:2f:8e:e8:fa:43:ab:49:e9:
9a:c1:10:44:dc:a9:56:0e:2a:c6:8b:b7:53:2a:d6:9c:28:b7:
2a:19:13:6b:14:00:05:ac:71:e2:5b:72:bf:9a:bc:9e:a5:69:
af:18:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:59 2026 by rpki-client