Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: WeO/Efd5lvGPA+gLAQlLTArf4fN2ItzEcMwsgjVK/sQ=
Subject key identifier: F6:B3:5F:40:5D:14:52:52:C3:D1:8D:68:6F:BC:3F:C9:D7:DC:66:37
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 019D28BBDEDBC76F07A161047C8114181A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: 9zft+aPQZyDiJOlrBXmq9f6efqiigmbFVbNYUF06TKw=)
2: tdQ-po1mf0fmrEdh4BYbzGed_z0.roa (hash: Bbx0eL21Kl5WXuJPJFJnrW0E5hgRPFpVxiADXt7nquo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:de:db:c7:6f:07:a1:61:04:7c:81:14:18:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=f6b35f405d145252c3d18d686fbc3fc9d7dc6637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:7d:26:bb:5c:ca:f7:1d:b7:8c:3d:b3:9e:
b4:34:82:26:8d:ca:db:66:ab:fd:65:a9:86:9b:fe:
76:25:e3:d4:96:a5:3a:a8:dd:5d:98:fa:c9:9f:68:
b1:39:8f:3e:db:e1:75:90:31:e9:a2:9f:c8:88:93:
37:7c:d3:81:be:3b:82:76:78:46:2f:3b:ca:e2:65:
f9:42:35:84:ba:92:68:16:dd:b0:b2:72:78:13:fc:
f1:53:ae:0f:fa:d8:14:e1:c9:dc:c0:32:19:23:5c:
82:75:08:2b:87:8a:46:dc:f3:fc:50:cb:8e:b7:62:
55:04:f0:30:5b:bd:a9:11:68:ca:e9:03:78:f8:cf:
66:f9:2e:b7:f9:0a:ee:16:82:ed:0c:60:f2:e2:86:
84:46:6e:ea:49:52:3b:54:78:e0:ca:d5:66:e7:26:
5a:68:88:50:fc:a1:2f:62:47:b1:e8:38:98:54:a4:
3b:52:f9:5a:55:4c:fa:e5:df:fb:c1:0f:b1:67:7a:
27:b0:40:20:73:01:24:33:91:6c:ee:fd:ed:46:e9:
08:09:89:5e:9c:28:8f:a9:b5:9a:dd:3c:dc:da:96:
2f:6d:29:9c:f6:fb:a0:75:96:52:a1:bf:eb:ea:85:
b2:54:d9:d1:ce:ae:00:04:af:c8:98:7d:99:5d:5e:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:5F:40:5D:14:52:52:C3:D1:8D:68:6F:BC:3F:C9:D7:DC:66:37
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:c5:20:92:dd:1d:f4:6d:ba:5b:1b:78:a8:ee:0b:f1:95:
f1:f4:bd:17:6c:5b:d6:50:51:ca:ef:34:04:bb:7f:f1:d9:1c:
d6:3b:32:30:19:82:88:fa:c4:0a:ed:19:87:62:38:96:cc:25:
bc:72:81:8d:a6:55:8f:7a:ec:95:df:4b:4c:a1:af:b4:03:6b:
b0:9e:f5:3f:58:15:bd:4c:c9:5e:e2:f3:e0:ba:e4:87:e7:72:
d6:e3:1d:0d:fb:8a:9a:2d:bc:60:5c:29:35:46:ef:d4:f8:b3:
43:d5:6b:0f:7c:ec:15:25:27:ba:b5:a9:8c:ab:95:80:22:e5:
c6:19:60:25:48:a1:45:f7:8b:3a:c6:57:13:d1:46:94:e5:73:
43:f8:a1:8a:f0:25:8a:a9:84:fa:a3:d9:cb:e4:0b:59:39:69:
25:73:9f:b7:b6:7a:b4:10:48:b1:39:c6:8e:18:16:60:ad:da:
d6:0e:8d:b4:85:18:15:f0:7b:45:bc:60:26:2f:ed:48:3c:44:
d1:79:f5:32:fa:ee:3c:cc:07:f4:f0:81:a5:b8:6b:b9:6b:eb:
ba:4c:92:fb:93:81:44:55:98:e3:fe:89:e2:bd:e2:56:ef:67:
1e:7a:b9:fd:e1:03:91:0a:b5:6e:57:06:c0:b1:6a:4b:56:ea:
98:ea:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:22 2026 by rpki-client