Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: Aq3qnZd1+NG8sAzjmUuyhPQSVPba8i1fpERMMWDZFJI=
Subject key identifier: 61:EF:EA:26:A0:EF:15:BC:BB:3F:5B:D9:9B:C7:3B:BD:4E:75:BE:4D
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019D2B8592AAD119F749449C5B08B4F5316C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 15AE
Signing time: Thu 26 Mar 2026 19:01:07 +0000
Manifest this update: Thu 26 Mar 2026 19:01:07 +0000
Manifest next update: Fri 27 Mar 2026 19:01:07 +0000
Files and hashes: 1: 1YDQiRpIkl8dKkn91J4BZcjxLG8.roa (hash: swQzBQz8qYH+Ns05cWnj9m77XbPZt1CRiB4AvNOU1+4=)
2: 6mugNtdudbDdBm5CKSX1k0XhW7Q.roa (hash: QwJGGsLBaGqVdpKRP/uEJPtx3uyW+xZeB/D0UVYiuCA=)
3: JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa (hash: VfIPApxtxEUphMHmhUBJLte8wFfUS25OGKXWPVng31I=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: kzYb0SSH52PKMERDYEYIbPEshY3wt2a+jlh58665B54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:92:aa:d1:19:f7:49:44:9c:5b:08:b4:f5:31:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Mar 26 19:01:07 2026 GMT
Not After : Mar 27 19:01:07 2026 GMT
Subject: CN=61efea26a0ef15bcbb3f5bd99bc73bbd4e75be4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:9c:72:3e:53:8f:7d:5f:54:ec:ce:36:8f:
dd:8a:e0:fa:d6:b2:76:97:80:8b:48:95:7b:ff:0c:
b8:d3:76:7e:03:6e:2c:52:04:86:2e:70:db:8c:e9:
cf:10:ab:45:27:99:4c:2a:3c:0b:61:d5:6a:e8:e3:
71:bf:a8:d4:76:83:9d:a3:7d:4e:01:c6:24:7e:53:
67:8d:ff:cd:db:ce:4c:4f:d7:1b:16:09:ee:5c:38:
2e:e5:d5:9b:28:52:75:38:56:bb:56:72:e3:52:60:
14:63:9a:66:de:9b:2b:2d:73:bc:3e:0e:f3:f8:4f:
fc:36:6f:20:30:7a:21:7c:1a:46:cc:46:45:c2:9e:
23:a2:73:02:79:f1:57:f8:2d:28:a7:d4:f6:bd:03:
13:a3:53:ef:50:b4:35:d2:2e:9b:af:3e:f3:6f:c8:
41:5f:b9:d1:52:a8:5d:ed:9f:bc:1a:89:b3:3e:5c:
9e:6a:02:b7:ca:a0:ba:fa:a0:05:60:68:c9:be:50:
48:00:f3:83:44:a9:be:67:fe:e4:08:5a:c3:be:f7:
f3:4a:b7:db:54:60:1b:2a:1d:30:0f:59:c9:9a:34:
d5:78:fd:6f:f6:21:31:bb:f8:9d:29:83:98:a3:ec:
ed:ac:18:dc:cc:91:bb:6d:47:45:2c:e9:41:65:bd:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:EA:26:A0:EF:15:BC:BB:3F:5B:D9:9B:C7:3B:BD:4E:75:BE:4D
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f3:fa:30:b8:b0:45:8e:41:91:29:a1:57:4c:e7:e9:43:e4:
37:e7:15:8e:f2:5e:51:cf:d9:24:18:71:34:a2:32:c4:13:14:
cf:ce:f1:97:fc:7a:a1:ee:35:f7:96:7d:3f:37:db:7f:4b:05:
af:80:76:ba:ea:f1:6a:41:b5:3f:56:a6:c1:80:35:c5:4a:3b:
4f:ee:af:f7:ee:05:b3:d8:1d:ad:21:e2:95:9c:3b:88:3a:27:
d4:81:d3:05:9b:f3:53:c6:2a:f8:e1:57:dc:c3:fe:0f:74:e4:
5e:f4:53:61:a7:da:60:06:fa:50:5b:01:8c:1f:f9:34:68:4c:
1c:52:78:ea:33:68:5d:bc:73:1e:c3:f3:50:56:cb:33:6b:d1:
49:5c:0b:cd:1e:4c:4a:5b:c6:2e:28:68:87:25:61:68:7b:7b:
16:fc:b7:37:76:aa:41:34:9f:ec:34:88:2e:d9:8c:30:ce:d5:
70:40:07:6c:f7:23:d1:22:8b:ae:d2:b6:cd:ec:e8:87:b6:8e:
0d:5a:b0:52:25:4e:30:01:fb:33:39:e2:75:f5:b6:da:74:c0:
2d:ac:e2:5d:92:46:99:2a:d4:37:62:1e:42:28:1c:41:7c:01:
1d:77:5c:a1:e5:64:74:89:b0:ed:bb:73:0a:68:da:99:b4:31:
11:e3:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:56 2026 by rpki-client