Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: 0PkFSsLJIaeFB8od1h+66xyxtAcyqq0XRKFFTuJRefU=
Subject key identifier: 4C:05:8B:6E:25:64:F5:CC:1C:CB:72:97:48:E8:C2:B7:B4:01:69:A1
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019CAC1054410A254F7B4DFD289ED7CDCB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0BB0
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: 5tnuY_EervGGDUz3gXIn8wuI43w.roa (hash: uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=)
2: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: XPRaegnsT5e09u9H/GCPxhsuSEaKNCK6VCVk5DvfzI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:54:41:0a:25:4f:7b:4d:fd:28:9e:d7:cd:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=4c058b6e2564f5cc1ccb729748e8c2b7b40169a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:df:02:5d:84:8f:10:55:98:70:ae:5b:92:
4d:1f:5c:da:f3:67:12:44:cd:b6:93:15:ac:a5:0d:
05:ef:73:97:57:cd:56:f9:95:82:99:d2:97:52:43:
c3:e9:7c:1d:a9:cc:af:e6:95:09:55:b0:a3:15:c8:
ab:fe:42:f3:21:ea:a1:d7:d0:49:92:76:12:67:ff:
39:ec:22:02:f2:71:75:71:46:9d:11:62:2c:d4:3e:
79:be:50:f0:f5:ad:2f:3c:a2:05:87:8e:6c:46:5b:
96:a8:ec:82:b7:42:f0:d8:82:bb:19:06:8d:8f:dc:
6b:ad:df:18:e2:f4:3c:34:74:bd:6e:ab:cc:a8:76:
5b:6b:8e:1b:7f:ac:42:09:71:64:c3:ce:ca:7d:76:
4b:10:f0:66:a2:76:35:e3:6e:38:be:41:cf:51:82:
81:70:6d:10:6a:cb:c5:c2:50:70:1c:71:1b:01:b3:
7d:5f:13:ad:be:6d:ef:8e:89:ac:36:9c:5c:f7:25:
b4:dc:29:a1:1d:57:26:19:6d:e2:d1:bd:6e:29:c6:
00:f7:59:0e:e9:e9:58:89:18:b6:1a:20:4c:c7:1e:
fb:57:1f:84:44:00:ea:42:43:15:26:ff:61:bb:28:
89:e4:59:e8:b6:ba:46:9e:89:ea:c7:4e:2a:4d:e9:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:8B:6E:25:64:F5:CC:1C:CB:72:97:48:E8:C2:B7:B4:01:69:A1
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:5c:2c:f1:11:1c:be:cf:bb:ed:d2:77:e5:6f:3f:e8:23:
32:36:cb:ef:76:9e:a8:ff:89:a8:13:15:4f:50:9b:3e:aa:40:
35:ae:77:42:76:5a:40:25:9c:d6:d4:c5:1d:5f:f8:c6:f4:bd:
cc:e8:c3:04:4e:1f:57:70:e6:96:d9:04:64:56:92:0b:c6:46:
12:9b:9e:e9:ac:34:98:bb:8a:ab:4b:c9:48:c7:25:4a:e9:7d:
98:a4:93:88:2e:dd:2d:4c:94:f7:6b:5d:2e:27:33:a3:fc:f1:
1c:39:7f:e9:62:d9:df:8b:6a:e0:c3:1a:06:09:63:19:0b:44:
e4:d2:76:60:6f:3a:c5:03:64:b6:6c:54:57:70:ca:68:76:ba:
f8:34:20:fb:16:42:40:7e:06:6a:6c:ad:5a:1f:b7:61:28:2b:
d8:83:be:a4:50:e1:34:6c:93:f2:02:1f:ad:87:ee:77:12:c9:
1b:3c:d7:47:e5:29:2b:0b:95:ee:33:3b:c1:bd:50:86:8f:52:
7c:ed:33:95:07:3e:09:68:ab:fd:b9:29:00:11:b4:1d:2c:49:
da:48:e2:af:46:cf:70:ec:37:25:ad:b1:37:63:38:21:de:d0:
4c:34:c3:2b:bd:8e:d9:70:61:84:7b:96:08:39:87:89:ee:9a:
45:e5:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:39 2026 by rpki-client