Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: rQVPvgA+wX72uvv3a93FjTB5r4TT1n5HjIEWS1JYI7w=
Subject key identifier: 9B:3A:CA:E8:65:05:68:56:C4:57:24:D3:80:7D:EA:C6:3A:62:D6:36
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 019CAC105D1B35546C2AB8B928A675875CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 11C4
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (hash: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: YmGQwUl9KiVIj2wKXNbUOZ6g32C9xWlPr9B7iUJpAW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5d:1b:35:54:6c:2a:b8:b9:28:a6:75:87:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=9b3acae865056856c45724d3807deac63a62d636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:fd:79:e8:8f:96:67:f2:dc:87:00:86:70:
33:8e:78:2c:04:16:cf:0c:84:42:d6:12:d5:4d:49:
9a:cc:4c:70:f5:a0:42:f5:d6:f4:a2:b4:59:62:f9:
a5:90:ec:6a:cf:aa:57:2b:17:6d:c8:9a:0f:11:8a:
12:c8:a5:15:a2:1f:aa:67:21:28:7d:79:7c:8b:c6:
85:eb:69:e8:7c:e5:1c:30:8a:d7:99:2d:1f:36:69:
94:ff:ab:dc:1d:68:dc:da:02:90:91:75:0f:9b:82:
4a:28:15:69:20:d5:68:14:ec:bc:3c:dc:f4:cc:6d:
7d:f7:9d:8f:82:9f:b4:d3:50:a1:d4:18:fc:76:26:
05:7a:72:bf:da:c8:68:d6:7f:e2:15:95:c7:1b:a3:
82:14:71:39:f9:91:4d:0e:68:ae:9a:cb:90:c5:e5:
75:36:44:99:a1:5e:be:96:58:a0:12:3e:56:9a:89:
46:f1:4b:9b:a9:4d:8d:41:64:48:fb:af:45:a1:d9:
24:8e:1a:51:87:d3:87:37:0e:32:f2:7b:0a:4b:04:
29:c9:dc:51:e7:33:cd:d4:b4:1c:08:28:7d:a8:71:
48:5d:d2:72:2d:62:47:31:f1:a4:38:46:41:22:17:
48:37:c9:d9:90:47:17:87:bd:bc:0d:0e:e8:d4:fe:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:CA:E8:65:05:68:56:C4:57:24:D3:80:7D:EA:C6:3A:62:D6:36
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:84:c3:b9:7d:45:b4:3f:d4:dc:4b:62:fc:de:65:f7:d2:
8a:f3:fc:cb:fc:10:f3:0e:a6:b5:14:3e:8b:e7:85:97:31:4a:
75:fb:ed:35:0d:58:b4:cb:0a:e4:c2:e9:c9:90:65:ae:d8:14:
e8:bf:3d:af:32:dd:a2:ea:3e:d8:c1:32:d8:af:c1:18:ff:16:
55:26:a9:cd:30:aa:0b:77:85:03:96:7c:9c:bf:7a:0d:b4:5d:
a3:c0:42:2f:7e:e4:15:40:24:2d:12:e1:bd:28:0e:bb:4b:58:
cc:06:df:9c:32:a6:58:e8:ad:29:e3:a3:b4:1f:fd:f6:56:7e:
30:9b:fb:c0:1e:96:d3:bf:5b:ca:6c:50:fd:ca:a8:41:4a:4b:
ce:30:f2:18:9d:62:aa:16:75:2d:4f:77:55:47:e5:c6:ab:0c:
a8:c3:ba:dd:76:69:f9:07:f5:c7:21:16:5d:a6:6e:c1:21:27:
21:98:36:32:1c:d2:63:a3:49:ce:00:57:8e:33:cd:9f:40:50:
b2:df:0c:e5:79:31:cb:2e:e6:65:ff:e0:92:22:a6:1b:40:7c:
8c:51:55:53:4c:cc:17:13:1a:d7:86:f4:60:f1:67:41:96:a4:
86:7f:3e:83:87:83:1c:30:67:a0:72:85:64:1a:3f:db:c4:bd:
5e:72:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:00 2026 by rpki-client