Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: nsR/Dq8g4YQrDrIRU2pas76SgpSQT5oG0xfQRLdCm04=
Subject key identifier: 57:BE:9B:CD:31:3F:39:9D:F2:D0:68:D9:DB:1A:AA:8E:F1:45:1C:E0
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019D281694C76E72E0E4F63EC4C24DC167B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: WRhByxtRFy9Tw7A1ENPV6VjKg27alQrwBZ9DSNXDNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:94:c7:6e:72:e0:e4:f6:3e:c4:c2:4d:c1:67:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=57be9bcd313f399df2d068d9db1aaa8ef1451ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:bf:3d:6b:20:b2:5c:47:24:aa:c3:7e:f6:
c7:b9:10:32:23:15:41:6b:f9:1c:2f:63:00:28:8a:
cc:d5:5d:ee:f8:9b:74:54:97:7d:ef:46:5d:7f:51:
a2:26:4b:e0:98:a0:18:1f:63:63:a2:b2:53:53:6c:
d2:68:4e:7c:4b:c2:00:86:fe:9c:59:6f:dd:78:e8:
3c:54:6e:59:16:a6:c0:9a:08:7f:43:b0:11:aa:55:
d1:4a:cf:b6:75:4a:d4:b6:58:aa:01:88:c5:77:53:
22:e7:19:a9:a0:13:22:3d:e8:ee:e9:c7:87:28:9a:
bf:eb:27:a9:c9:f1:43:85:4b:0d:22:81:e8:f5:46:
e4:1f:85:6d:f6:fc:15:81:59:b3:ce:e7:4a:08:b2:
ca:b0:f4:b6:c2:14:7c:3f:b4:5e:c8:97:00:5b:3a:
71:08:7b:1c:e9:9f:46:f3:40:b1:9b:af:e8:87:49:
52:cb:dc:d3:f4:04:8c:15:59:68:b9:ab:c1:7f:7c:
1f:d2:85:83:bc:7b:77:62:98:38:4e:04:ce:d2:b3:
62:4e:73:92:89:37:5d:20:88:c5:e2:72:d3:c1:00:
7f:30:2f:86:f8:78:d6:e1:9c:71:a8:10:87:ac:18:
48:32:42:ac:5e:05:87:31:a3:e2:8d:46:64:7e:2c:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:9B:CD:31:3F:39:9D:F2:D0:68:D9:DB:1A:AA:8E:F1:45:1C:E0
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:54:d4:64:7e:94:d9:e0:c3:86:0d:5d:52:43:8a:0f:3c:6c:
61:6d:0a:00:3f:82:5a:b1:ce:c6:85:a8:4b:34:cd:58:e5:e5:
98:85:e8:b0:8f:7f:74:11:02:fc:94:7e:46:91:a9:3f:8b:c3:
94:3d:21:c5:c3:21:19:c1:23:b9:c6:e9:af:8b:81:e5:77:26:
f4:32:0a:02:2e:b3:30:a5:f7:14:32:b9:0f:7d:8e:2e:eb:4a:
1f:41:b4:4e:aa:c9:f9:06:85:43:02:40:8a:fc:04:bf:f7:7f:
bc:f4:75:55:f6:26:11:2f:48:8e:21:f2:44:85:25:5c:9e:8c:
77:0c:6b:5e:da:ef:da:25:c8:9e:43:50:b9:b4:af:58:45:f3:
69:69:57:87:8e:5d:f6:7e:f7:0d:9c:87:32:3a:20:0f:8b:be:
c8:d9:e5:d6:d7:df:aa:2d:58:a5:aa:cd:56:64:3e:51:dd:f2:
16:12:53:5f:14:49:ab:2f:22:ae:30:76:fd:f4:1d:ef:55:93:
17:eb:eb:62:ce:11:95:80:97:fa:cf:1c:77:00:be:3b:b1:36:
b3:66:ca:e6:b9:fb:33:26:41:94:f3:a9:f0:8c:1e:30:88:c2:
fb:01:c5:47:82:93:e5:42:77:fd:47:a9:c1:93:3c:e7:06:7e:
5e:a4:f7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFpTHbnLg5PY+xMJNwWe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm
YjgwMWYwHhcNMjYwMzI2MDMwMTAxWhcNMjYwMzI3MDMwMTAxWjAzMTEwLwYDVQQD
Eyg1N2JlOWJjZDMxM2YzOTlkZjJkMDY4ZDlkYjFhYWE4ZWYxNDUxY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1i/PWsgslxHJKrDfvbHuRAyIxVB
a/kcL2MAKIrM1V3u+Jt0VJd970Zdf1GiJkvgmKAYH2NjorJTU2zSaE58S8IAhv6c
WW/deOg8VG5ZFqbAmgh/Q7ARqlXRSs+2dUrUtliqAYjFd1Mi5xmpoBMiPeju6ceH
KJq/6yepyfFDhUsNIoHo9UbkH4Vt9vwVgVmzzudKCLLKsPS2whR8P7ReyJcAWzpx
CHsc6Z9G80Cxm6/oh0lSy9zT9ASMFVlouavBf3wf0oWDvHt3Ypg4TgTO0rNiTnOS
iTddIIjF4nLTwQB/MC+G+HjW4ZxxqBCHrBhIMkKsXgWHMaPijUZkfiy9LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe+m80xPzmd8tBo2dsaqo7xRRzgMB8GA1UdIwQY
MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt
OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi
LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelTUZH6U
2eDDhg1dUkOKDzxsYW0KAD+CWrHOxoWoSzTNWOXlmIXosI9/dBEC/JR+RpGpP4vD
lD0hxcMhGcEjucbpr4uB5Xcm9DIKAi6zMKX3FDK5D32OLutKH0G0TqrJ+QaFQwJA
ivwEv/d/vPR1VfYmES9IjiHyRIUlXJ6MdwxrXtrv2iXInkNQubSvWEXzaWlXh45d
9n73DZyHMjogD4u+yNnl1tffqi1YparNVmQ+Ud3yFhJTXxRJqy8irjB2/fQd71WT
F+vrYs4RlYCX+s8cdwC+O7E2s2bK5rn7MyZBlPOp8IweMIjC+wHFR4KT5UJ3/Uep
wZM85wZ+XqT3aQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:56 2026 by rpki-client