Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: JzqxP3hdhHow9E1M+Sb6hpVPzeFUxaNWtrJlZ/olids=
Subject key identifier: 54:5E:17:89:AD:76:BE:F5:6B:2F:5F:43:51:6C:6E:1A:C1:FC:0E:41
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 019CA90F0E5AAE1A0067CB91FC99A837C42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 010B
Signing time: Sun 01 Mar 2026 11:01:02 +0000
Manifest this update: Sun 01 Mar 2026 11:01:02 +0000
Manifest next update: Mon 02 Mar 2026 11:01:02 +0000
Files and hashes: 1: GT7pZTJLcx4wvvTzLBrLYmXvQT8.asa (hash: /TnkKxjd0Hck7Slm7rWRT+Tknob7IBUp/DRYoMT5rBI=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: b8xs4uzqx4TQiwNQVU2x39QOUhseMnG/PYf1EMKdupU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:0e:5a:ae:1a:00:67:cb:91:fc:99:a8:37:c4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Mar 1 11:01:02 2026 GMT
Not After : Mar 2 11:01:02 2026 GMT
Subject: CN=545e1789ad76bef56b2f5f43516c6e1ac1fc0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:7b:b6:66:20:9f:6d:9f:bf:05:3f:e6:1c:
50:10:e7:20:fb:36:16:33:58:97:a3:4b:28:ef:06:
a6:a2:d3:bf:eb:04:bf:97:12:73:92:45:78:7f:55:
23:05:c8:f6:b5:c5:95:16:93:68:b0:e0:4e:ff:b2:
5e:42:2c:67:bc:80:83:6b:3c:cc:b3:7e:65:d4:1e:
45:26:05:82:32:7a:e8:f3:d5:87:1b:ab:7f:b7:8a:
d5:e6:39:e8:03:c7:c8:cf:9f:54:41:89:b5:ad:41:
1e:16:be:91:bd:56:f7:3f:ec:24:1a:b1:98:02:77:
9b:e5:8f:91:05:a0:07:f9:e5:47:ec:de:a9:ee:ba:
f6:87:04:09:95:fb:58:88:c2:20:96:98:64:74:4d:
a6:94:e0:9a:c6:83:55:b5:f6:87:f5:03:0c:46:23:
53:9b:9c:d9:4e:1d:21:01:43:ad:a9:fa:a0:90:c7:
b6:dd:7e:52:50:12:99:1b:60:6e:e9:19:8a:2b:2f:
40:39:81:44:fb:5e:7f:a4:cb:92:e3:87:39:75:63:
9f:0b:43:db:e4:5c:8e:f9:58:a1:1d:03:79:1a:d4:
0c:fb:69:05:2e:ec:11:d1:52:43:d4:06:59:92:20:
ca:f9:26:22:72:e9:b8:7d:13:7c:e2:4b:8e:5f:a7:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:17:89:AD:76:BE:F5:6B:2F:5F:43:51:6C:6E:1A:C1:FC:0E:41
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:da:61:77:ce:63:70:19:31:1d:67:f7:0a:e1:ec:58:a8:
2f:0f:4a:8d:4f:80:d8:6c:f6:42:52:5f:f0:70:91:0a:0c:cd:
f3:ee:9b:e3:84:5e:7d:f8:a9:c6:3c:e0:f8:8a:61:fe:99:d1:
35:b5:9d:15:b9:b4:8c:81:3f:5a:57:11:58:e8:86:e1:8a:e1:
5d:9e:be:2f:0c:7b:c3:5a:b8:4e:ca:dc:ff:6c:6a:f5:0d:ed:
3e:15:4a:a9:12:84:7b:34:83:f9:ba:c3:96:20:fe:b8:48:4e:
f3:ca:23:0c:e8:45:ef:c1:e2:9a:cf:f8:10:d5:44:c9:6b:62:
e4:17:f7:f3:d0:d1:86:1d:f3:7d:df:36:f2:36:95:68:21:dd:
23:02:5f:c2:df:96:af:95:55:cf:13:c5:14:42:d6:9b:b5:73:
d1:41:3a:9c:19:de:5a:0a:d6:be:39:54:cd:c5:0a:1b:f7:2e:
7b:ea:23:80:b1:60:b4:2b:05:ce:d7:69:20:44:82:de:81:ea:
32:c0:ea:b8:94:92:8d:21:44:cd:00:d4:e8:99:c8:63:51:42:
e2:46:4a:76:df:f3:fd:15:1f:fc:9e:5f:5f:ae:0e:f2:7c:ac:
d4:69:1f:d7:f6:94:88:5f:48:90:29:05:91:06:2b:bd:7f:3d:
8c:b5:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:13 2026 by rpki-client