Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: +z8qXFiSv8AGkqJMV/sRdDVQ9mOsm+rSWd/mb1mDHxM=
Subject key identifier: 47:38:93:27:05:75:E1:D2:76:28:C6:30:EF:5D:04:42:AD:75:3B:D1
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019D2A3C511F256C000D69966A1F4C98770B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 075E
Signing time: Thu 26 Mar 2026 13:01:29 +0000
Manifest this update: Thu 26 Mar 2026 13:01:29 +0000
Manifest next update: Fri 27 Mar 2026 13:01:29 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: waMYf7YstEwlPPEyURzRBPt0dvjy3+00tNIatMtzec8=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:51:1f:25:6c:00:0d:69:96:6a:1f:4c:98:77:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Mar 26 13:01:29 2026 GMT
Not After : Mar 27 13:01:29 2026 GMT
Subject: CN=473893270575e1d27628c630ef5d0442ad753bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:69:e8:7a:9b:a2:89:b0:eb:92:1a:c3:b6:
f1:d1:e8:b6:32:96:09:71:5e:f5:64:3d:dd:fc:57:
65:84:d6:fd:a9:00:1b:88:c2:cd:89:6c:fc:3a:ed:
f6:48:50:60:8b:5b:1e:22:3e:9e:30:19:33:f1:d2:
85:c7:5b:76:af:e9:87:d4:f9:8c:50:bf:78:85:a9:
e6:24:ee:fe:ca:d7:9b:ce:e7:9e:15:db:b4:88:6a:
c6:f7:b4:9f:17:c2:00:c3:fa:64:ba:c0:86:83:d7:
87:85:ad:3b:91:3f:d7:6e:17:3c:41:5e:a9:54:84:
96:84:cd:3e:a5:35:65:ba:7d:cf:1e:f2:db:c3:43:
86:fd:b1:69:2e:65:bd:7d:41:66:04:b9:a0:0c:66:
e6:05:7b:6c:ff:0f:77:97:13:8e:28:c3:11:31:b2:
cc:57:76:df:75:5b:91:75:dd:91:bc:96:dc:01:b5:
5a:1b:33:cb:01:67:33:33:07:6e:9b:7a:66:80:b1:
80:99:bf:1e:cf:36:c9:fc:49:34:7f:cd:1b:5e:1e:
f6:91:a0:64:d7:82:8a:ef:4b:55:dd:51:e4:42:cf:
a0:85:bb:1b:dd:7d:57:22:2f:6e:64:87:85:17:3c:
45:88:a0:bf:c8:40:3a:6a:50:95:cb:ac:c4:20:f1:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:93:27:05:75:E1:D2:76:28:C6:30:EF:5D:04:42:AD:75:3B:D1
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:76:a7:8f:4a:84:b7:a6:06:e5:7b:e9:26:f4:69:b1:22:92:
71:4f:4c:ce:64:3e:b1:0f:11:53:87:74:59:22:d6:1a:35:c1:
2c:ac:81:08:54:63:90:25:65:d5:b0:70:ef:66:a0:b0:e8:1b:
31:81:1a:d3:39:02:0e:f7:4c:be:8a:70:9d:a4:08:c2:bb:85:
8a:1b:47:cc:86:3f:55:2b:bd:2a:a3:fe:41:50:3f:bf:19:3e:
52:23:68:83:e4:a6:69:fa:39:90:8c:9c:3b:f2:31:e7:25:4f:
6e:5b:a0:ef:8b:ec:64:0d:12:f8:a9:6e:7c:e2:dd:d5:9d:37:
f1:d0:de:74:fa:97:b8:17:3f:bf:94:fb:c6:8e:f7:30:36:92:
59:73:e6:f3:8e:ca:f7:59:1c:dc:dd:1f:3e:f4:ff:15:96:d2:
d5:ad:f1:34:7e:91:f3:65:e2:66:e7:29:4b:07:54:29:35:0d:
f7:1c:7d:3a:a6:63:eb:0f:6e:ad:ba:31:21:b7:62:5d:c5:1d:
56:e2:bc:48:48:c1:e3:46:08:44:ed:da:f2:0a:6d:c1:26:0e:
d0:23:83:5d:41:7e:42:3e:3c:41:28:2d:7a:17:92:60:26:7d:
f6:d1:71:f8:a2:66:c9:61:f3:33:4b:f2:88:e8:ca:20:ac:09:
f4:5f:4e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPFEfJWwADWmWah9MmHcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl
NWE4ZDAwHhcNMjYwMzI2MTMwMTI5WhcNMjYwMzI3MTMwMTI5WjAzMTEwLwYDVQQD
Eyg0NzM4OTMyNzA1NzVlMWQyNzYyOGM2MzBlZjVkMDQ0MmFkNzUzYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjRp6Hqboomw65Iaw7bx0ei2MpYJ
cV71ZD3d/FdlhNb9qQAbiMLNiWz8Ou32SFBgi1seIj6eMBkz8dKFx1t2r+mH1PmM
UL94hanmJO7+ytebzueeFdu0iGrG97SfF8IAw/pkusCGg9eHha07kT/Xbhc8QV6p
VISWhM0+pTVlun3PHvLbw0OG/bFpLmW9fUFmBLmgDGbmBXts/w93lxOOKMMRMbLM
V3bfdVuRdd2RvJbcAbVaGzPLAWczMwdum3pmgLGAmb8ezzbJ/Ek0f80bXh72kaBk
14KK70tV3VHkQs+ghbsb3X1XIi9uZIeFFzxFiKC/yEA6alCVy6zEIPEy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc4kycFdeHSdijGMO9dBEKtdTvRMB8GA1UdIwQY
MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut
MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi
LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnanj0qE
t6YG5XvpJvRpsSKScU9MzmQ+sQ8RU4d0WSLWGjXBLKyBCFRjkCVl1bBw72agsOgb
MYEa0zkCDvdMvopwnaQIwruFihtHzIY/VSu9KqP+QVA/vxk+UiNog+Smafo5kIyc
O/Ix5yVPblug74vsZA0S+KlufOLd1Z038dDedPqXuBc/v5T7xo73MDaSWXPm847K
91kc3N0fPvT/FZbS1a3xNH6R82XiZucpSwdUKTUN9xx9OqZj6w9urboxIbdiXcUd
VuK8SEjB40YIRO3a8gptwSYO0CODXUF+Qj48QSgteheSYCZ99tFx+KJmyWHzM0vy
iOjKIKwJ9F9O3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:27 2026 by rpki-client