Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: nbgOFRxG7SB4B6M5PHuhPF6vOamu1OXeJgcSJSWXbjE=
Subject key identifier: C4:B3:72:C3:58:17:D6:2B:4C:BC:27:CC:A5:66:FF:AF:2A:2E:04:E3
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019CAAFD7854C168F566D5DC7E1201577D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 1309
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: PT62C61CPHdRc2fJbDVDuVJRXj0.roa (hash: QoRuxKV7gftAIFcmKvKd/abqm9YeDR7k0cYgqnasPfc=)
2: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: vfx2bV6ywTVOmRuIKWPBSOeYtlKm4MyqoBRAoxFHT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:78:54:c1:68:f5:66:d5:dc:7e:12:01:57:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=c4b372c35817d62b4cbc27cca566ffaf2a2e04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:19:7a:35:33:3e:8a:b1:26:61:0f:41:a9:
a8:fa:58:74:81:16:bd:94:6e:0e:a6:dd:77:d2:05:
2a:82:c3:e9:ea:e2:96:5e:8c:e4:45:56:fa:90:e1:
ce:80:7d:6d:56:6f:cb:b2:dd:5d:88:ce:c9:0f:11:
af:38:85:76:a7:e5:4c:fb:a4:97:9a:2a:07:41:6a:
6b:25:6f:9e:15:ca:9f:aa:7a:7d:e8:ff:fd:7a:35:
fc:81:cb:7c:54:24:69:cc:bc:8e:38:e8:1b:0e:aa:
37:88:84:d4:55:55:6f:92:aa:e7:9a:6f:d0:d0:9d:
95:6d:bb:20:1c:f7:f8:90:e1:3d:03:01:d8:73:82:
16:8a:3f:39:fa:11:97:fe:2c:e2:8f:d4:d0:db:d5:
85:c6:ea:a1:61:ea:4d:93:42:5a:1c:1f:66:00:63:
19:5d:9f:15:0b:e1:77:de:d0:31:a9:2a:14:b7:b1:
43:cc:7a:84:80:c4:6c:a7:62:b2:86:dc:2b:7f:55:
8e:27:8f:bb:df:da:39:ba:85:7f:df:96:43:0e:00:
75:0a:d5:77:be:d2:22:8d:6c:8f:09:bc:fb:c8:99:
8e:24:bf:d9:8e:5a:89:5e:52:d5:9e:91:09:19:c5:
b3:b4:33:b1:5c:76:1c:57:af:c5:6f:d8:6c:c3:3f:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:72:C3:58:17:D6:2B:4C:BC:27:CC:A5:66:FF:AF:2A:2E:04:E3
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:55:39:8f:49:1d:14:4d:97:e2:fb:d8:0b:2e:01:75:15:8d:
72:86:ed:9c:8c:99:d0:9b:68:7b:6e:41:11:37:d1:4e:5c:65:
55:9e:b9:00:2a:2c:e2:3e:8c:11:53:3a:4b:ff:56:e8:85:ae:
1b:af:d6:30:a6:2e:10:6d:ab:cd:55:b8:3a:4e:03:87:f5:6e:
c8:87:fe:82:c9:e9:a4:bd:c1:9e:41:9b:dc:12:12:a6:f2:dc:
13:72:29:77:32:89:f3:d4:6f:3e:13:2e:cd:a6:9d:85:82:70:
ab:b4:a0:19:64:eb:9d:7c:b8:ba:fd:62:97:b8:17:97:50:65:
83:14:fd:d5:a1:45:14:8f:bf:44:da:9a:9a:1c:12:87:f4:9d:
d1:6b:57:10:f8:79:e7:ef:07:81:47:2c:89:65:ce:0e:a7:b1:
6d:6f:3d:84:b7:42:cd:ed:02:ca:df:99:6a:e8:04:34:54:1a:
a7:24:a8:c1:eb:e0:13:26:c4:ae:cc:1b:2e:27:04:96:31:58:
ba:8b:12:5d:4a:33:2b:11:f9:26:85:e7:cb:dc:f7:8f:ab:2b:
86:c5:2b:ac:8f:18:4e:30:53:42:0d:5b:4f:76:2d:92:f4:da:
f6:2a:97:98:34:39:d4:12:67:0a:2d:28:8b:97:57:33:af:e7:
74:1b:c9:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/XhUwWj1ZtXcfhIBV31tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmUzNmZmOGNkOWM5MTU5OWJiM2ZlY2VjMTA2NjQzZDlm
MjE2OGQwHhcNMjYwMzAxMjAwMTAzWhcNMjYwMzAyMjAwMTAzWjAzMTEwLwYDVQQD
EyhjNGIzNzJjMzU4MTdkNjJiNGNiYzI3Y2NhNTY2ZmZhZjJhMmUwNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tsZejUzPoqxJmEPQamo+lh0gRa9
lG4Opt130gUqgsPp6uKWXozkRVb6kOHOgH1tVm/Lst1diM7JDxGvOIV2p+VM+6SX
mioHQWprJW+eFcqfqnp96P/9ejX8gct8VCRpzLyOOOgbDqo3iITUVVVvkqrnmm/Q
0J2VbbsgHPf4kOE9AwHYc4IWij85+hGX/izij9TQ29WFxuqhYepNk0JaHB9mAGMZ
XZ8VC+F33tAxqSoUt7FDzHqEgMRsp2Kyhtwrf1WOJ4+739o5uoV/35ZDDgB1CtV3
vtIijWyPCbz7yJmOJL/ZjlqJXlLVnpEJGcWztDOxXHYcV6/Fb9hswz+xXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSzcsNYF9YrTLwnzKVm/68qLgTjMB8GA1UdIwQY
MBaAFGQuNv+M2ckVmbs/7OwQZkPZ8haNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQt
NTA1MDkyMDkyZjQzLzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQtNTA1MDkyMDkyZjQz
LzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5VU5j0kd
FE2X4vvYCy4BdRWNcobtnIyZ0Jtoe25BETfRTlxlVZ65ACos4j6MEVM6S/9W6IWu
G6/WMKYuEG2rzVW4Ok4Dh/VuyIf+gsnppL3BnkGb3BISpvLcE3IpdzKJ89RvPhMu
zaadhYJwq7SgGWTrnXy4uv1il7gXl1BlgxT91aFFFI+/RNqamhwSh/Sd0WtXEPh5
5+8HgUcsiWXODqexbW89hLdCze0Cyt+ZaugENFQapySowevgEybErswbLicEljFY
uosSXUozKxH5JoXny9z3j6srhsUrrI8YTjBTQg1bT3YtkvTa9iqXmDQ51BJnCi0o
i5dXM6/ndBvJUA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:39 2026 by rpki-client