Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: qHd4yLcRIGwlftuEzNAA3i4PsJYwWLIy/02Fb+82hW8=
Subject key identifier: D9:BE:04:BA:E8:7A:EA:3B:CD:E6:3B:44:77:04:4B:0A:1A:FD:0B:02
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 019CABA24D9A5B9B97B1008A04C05109C8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 07F4
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: uDy0uboGuQ8F6QOEny3tapvn0PQ.roa (hash: 3MCli/TbeRr8V0MnXhO1yofF6LpNILL0P0q1Ula5Od8=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: KGNBcGkLBBWkt2fxBHibsoy2EPCU4oxiGV+g7KDvJVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4d:9a:5b:9b:97:b1:00:8a:04:c0:51:09:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=d9be04bae87aea3bcde63b4477044b0a1afd0b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:d3:2c:3b:40:77:d3:6c:cb:16:cf:c8:8c:
8c:88:e0:23:b6:03:b1:24:25:56:7d:3b:8e:75:ca:
0c:56:3f:bc:c6:c5:2b:1b:9a:62:28:00:53:54:0f:
91:6c:3f:1f:77:e2:a7:93:0b:cb:63:41:32:f4:c3:
e6:2d:3b:91:85:b1:ab:3b:d4:c4:51:a9:4e:b2:af:
fc:e4:83:b0:5a:a3:e0:db:67:f2:7f:88:72:3e:11:
91:bc:6f:61:89:e5:b8:0f:3c:3e:9c:90:4d:4c:41:
47:ce:45:a0:1c:e1:fe:af:4b:5c:7e:c7:c2:54:41:
53:1f:fb:11:6c:a7:02:c4:61:c6:ac:34:26:05:70:
e5:73:1a:5f:12:df:2c:81:f3:c7:6b:90:0e:87:8f:
dc:32:69:33:b2:03:bd:0a:56:01:c3:da:f0:fb:c0:
f4:10:98:87:08:6b:60:c0:47:75:30:9d:d5:f0:12:
d2:e0:f9:d7:b4:d2:2a:96:74:d1:0e:f0:9d:f8:d0:
a5:39:c5:76:3d:87:97:af:a7:0f:66:55:23:89:14:
0e:21:51:eb:00:12:ba:d8:ce:84:34:5e:b6:e5:c6:
88:5b:b8:f1:5e:ba:a6:3b:54:cf:00:d3:5f:0e:8c:
68:37:fa:d9:5f:83:70:a0:f5:ac:3e:a4:85:27:a4:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:04:BA:E8:7A:EA:3B:CD:E6:3B:44:77:04:4B:0A:1A:FD:0B:02
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:ab:4a:13:d1:ec:8d:67:15:1a:14:9c:ea:a5:7b:86:a1:
33:cc:49:47:48:be:88:9b:e8:10:ed:49:4f:48:59:bb:f6:7d:
c4:43:d3:8a:98:12:08:71:60:be:46:cf:ed:87:d4:27:56:ea:
2d:9c:e4:6b:79:87:6f:17:9b:df:8c:f3:32:67:7c:5a:c1:df:
33:e4:19:a9:73:5f:ba:31:7b:53:3d:f8:95:a5:b6:e8:3e:63:
1b:94:02:6c:07:9a:58:da:7a:7f:1e:5b:b6:c7:bf:b2:df:3b:
21:52:27:04:b0:37:c0:86:f6:7c:f1:18:40:89:7b:01:03:88:
dd:a8:2e:04:b4:af:44:eb:fe:25:ae:1a:0a:0c:8f:00:11:85:
e4:74:87:2b:d1:76:58:07:17:71:74:98:52:6f:89:4d:bd:7d:
b8:8a:b7:1a:a4:c8:81:86:f5:7e:43:c6:39:2f:eb:20:05:ed:
2f:0e:e7:ac:56:97:fa:8e:bd:f0:34:36:68:01:82:8b:0c:a1:
b6:8e:14:7e:00:c0:23:ca:86:8e:bc:95:5d:f5:b7:b1:3d:c8:
f2:fc:7b:3b:53:a2:02:1f:f6:cc:65:fa:17:39:5a:e1:46:31:
d7:52:ca:d6:f2:0d:79:d4:4d:eb:3f:c1:3b:05:17:74:e9:19:
42:b3:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:42 2026 by rpki-client