Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: lzlkgduV6TFK7wCy07+L1c1NfvnmwfvxRmEDL+I2G44=
Subject key identifier: 88:23:38:59:02:6A:68:EA:D7:54:0A:3D:CE:BD:A4:F4:B2:35:F9:78
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 019D28F341EF4F264C4F08BBD6EF75AB0BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 103C
Signing time: Thu 26 Mar 2026 07:02:03 +0000
Manifest this update: Thu 26 Mar 2026 07:02:03 +0000
Manifest next update: Fri 27 Mar 2026 07:02:03 +0000
Files and hashes: 1: OL0stDkX2i4iSRwxjMZs3BrE1SE.roa (hash: vvxqzVvoF7+NWvZaa2Ph3MfeFjAEA8fO1sH/RieX6t4=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: 5rYziXhvlsd+HsobrpMZ6JDIBBEFH8gB9BYDxVcfbV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:41:ef:4f:26:4c:4f:08:bb:d6:ef:75:ab:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Mar 26 07:02:03 2026 GMT
Not After : Mar 27 07:02:03 2026 GMT
Subject: CN=88233859026a68ead7540a3dcebda4f4b235f978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:20:ff:a3:43:52:c9:98:64:c0:07:69:e2:
77:df:7a:61:1b:7d:6c:d3:a7:1a:b2:d5:6e:65:a0:
a2:7c:c1:20:cc:a0:f0:df:16:ec:21:01:7b:39:df:
82:7d:90:85:a7:ff:6c:56:fc:e0:7d:43:31:3a:18:
6f:df:13:41:f0:0f:de:0f:56:24:bb:87:ef:76:4a:
6f:97:1a:53:12:01:64:3d:e5:c4:2f:5a:b5:54:3f:
65:ab:80:0f:e0:ef:ef:6b:87:af:37:a6:23:c0:06:
22:f3:69:17:21:2c:c2:2c:9b:8d:6a:97:42:22:f4:
3b:ae:c4:d0:a4:37:47:02:fa:b9:8f:37:bb:f2:a1:
f7:71:8f:fd:9c:b4:51:91:ab:39:8f:04:64:9f:16:
a0:ee:48:c0:bb:3b:6a:33:45:0d:16:6a:96:2e:89:
24:95:ab:3f:81:4f:31:cc:b9:b9:54:d0:27:05:03:
95:af:05:f3:2e:00:17:2a:7b:36:9a:13:86:68:bb:
35:87:4a:8b:7e:fc:e6:8b:0c:b6:30:47:f3:c6:17:
9a:f8:be:05:f0:ad:b4:73:91:ae:d0:45:f6:19:78:
90:22:9a:e9:86:24:cb:fe:4f:d4:1d:50:fa:69:3d:
91:90:08:cd:7d:55:76:94:be:bd:26:fa:3c:5c:dd:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:38:59:02:6A:68:EA:D7:54:0A:3D:CE:BD:A4:F4:B2:35:F9:78
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:20:bd:43:c5:d3:73:dc:eb:a4:c5:e0:9c:23:45:71:e7:
ce:f2:0b:5d:5e:5a:55:da:87:78:9c:a1:bd:b5:2d:9f:1e:32:
f9:86:ad:8d:d8:59:d0:2a:8e:d7:a8:d1:b8:c1:77:d1:d0:30:
68:44:81:78:d0:10:69:57:3a:cd:f5:3d:70:19:fd:9a:9b:28:
be:f2:da:65:2b:69:f1:d5:72:1a:52:02:77:63:b3:f1:01:2c:
09:b1:35:1e:be:e1:9d:b8:68:c2:c1:d2:1f:10:b1:6e:e1:38:
19:d0:e5:8e:a0:4b:7d:24:e3:40:11:b7:e9:a6:95:e5:a7:53:
08:66:8f:a3:b1:6e:4c:4f:d5:5b:60:bf:d7:69:5b:52:9d:fe:
1d:47:b7:b6:5c:ad:35:6f:15:85:1e:84:41:8b:c9:92:f4:e8:
af:b9:89:c6:3e:5c:27:f7:f9:df:ad:7d:e8:04:79:3c:91:53:
9d:e9:10:13:73:fc:d3:7d:46:0e:11:af:bb:56:b2:ab:85:ca:
3c:18:8c:99:33:6b:5c:30:2e:0b:ec:b9:92:b6:32:d2:f1:52:
0e:ee:b2:3f:38:c5:0e:e0:02:d8:bd:a1:e5:52:13:ea:af:7b:
82:df:8f:ff:a0:f4:ec:4b:bd:71:0d:27:a3:b2:f3:f7:c5:d3:
48:17:1a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:06 2026 by rpki-client