Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: sZqTXVWDZXYaPy6qNLSL5YcDhmLfmAjHmHxH2ijN9DA=
Subject key identifier: EC:EF:30:A9:FB:6A:9A:36:2A:B1:01:FE:BD:39:A6:6B:7A:42:6C:36
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019CAA8F82970A12D27877E5771B3E977FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
2: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (hash: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo=)
3: 8auuTFL6tParorXPR_FX7n5-sMo.roa (hash: EPBMa3bgDg4K8XqsoSkRoxiHXy+VyA8XAgJy5cRLejw=)
4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: AYaSWj/KqsOfZHaeq/TDnpG0XnHNNaB9We53IQNr4wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:82:97:0a:12:d2:78:77:e5:77:1b:3e:97:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=ecef30a9fb6a9a362ab101febd39a66b7a426c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:97:20:5e:f4:be:a7:46:1c:3d:21:33:80:
f7:f9:28:9c:a1:88:72:c7:69:28:2a:fe:4b:a1:24:
76:e9:f7:b0:b3:27:4b:27:5c:05:a7:5d:e8:5f:cc:
aa:f4:74:de:3a:3e:46:ec:f9:52:70:3d:4a:40:3d:
12:94:dc:c6:d2:f2:8c:9a:ae:fe:d5:38:be:5f:8e:
a4:24:2c:23:4e:c3:04:bd:6a:af:15:f3:ca:21:bd:
03:eb:0d:f5:40:2e:29:dc:ff:9c:b0:61:6e:55:3c:
a9:83:19:72:aa:aa:df:ab:db:05:06:54:b0:a9:4d:
a6:52:1c:b2:c7:29:73:61:91:1c:b3:e6:e2:ca:da:
e3:d4:6a:4c:09:f8:03:2d:17:83:f9:1c:40:42:b0:
26:08:c7:e0:4d:1d:c1:3a:4b:49:34:99:0f:f4:d3:
91:59:f5:1d:04:f9:ab:45:0c:42:6e:2c:1f:a3:bc:
03:25:94:f7:db:02:78:13:4f:9d:60:31:1d:cd:ee:
c7:87:97:1d:07:8a:4d:e6:89:26:2b:96:e0:1f:88:
5f:46:be:e9:ac:4a:ac:df:b6:f1:3b:ad:9a:d2:8d:
96:d5:86:34:0d:6a:62:75:b4:86:3b:86:88:28:ef:
54:a5:f9:22:9d:d3:3c:d8:b5:86:96:07:b2:87:cc:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:30:A9:FB:6A:9A:36:2A:B1:01:FE:BD:39:A6:6B:7A:42:6C:36
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:79:33:3e:15:60:0a:b5:08:d4:88:51:66:f1:91:b8:21:
90:29:dc:e7:7f:bf:61:1b:a9:16:18:45:10:1b:d4:d0:59:19:
93:4d:09:7e:c5:a3:b0:cc:f6:5d:49:cb:55:b3:d1:7b:77:6f:
9a:74:89:ba:1e:5d:37:4b:ad:4e:71:26:97:20:ac:d2:bd:31:
ee:08:07:95:90:d7:5f:da:5a:db:d5:42:10:d8:ea:1b:95:55:
97:81:a2:ae:e0:c4:5f:e0:0f:44:ff:42:f7:c3:71:ac:9e:ec:
8b:1b:11:7d:56:2c:7d:a2:83:29:d3:40:33:6f:9d:b6:37:a8:
0d:56:ae:f7:bf:69:3d:d4:fd:f7:2c:9e:9d:65:5e:48:66:b5:
5d:e4:7e:71:30:6d:b5:d4:fa:6b:ec:95:1b:32:99:60:81:31:
09:9a:dd:3e:87:f1:09:f9:fa:49:1c:33:2a:ca:96:0a:8b:4d:
4f:a4:03:e7:c7:e8:e7:90:4b:7b:9c:20:b4:05:81:e6:e6:12:
65:b4:42:02:d9:88:20:61:12:08:57:5a:6c:a8:03:4b:9d:af:
23:88:3e:23:de:76:b2:b3:2c:e6:b7:c8:56:67:6f:a2:88:4b:
fa:e1:c6:ad:98:2f:31:a6:ed:50:01:8a:f9:b3:f5:8b:36:24:
6d:39:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:09 2026 by rpki-client