Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: KOAywU9s7noI6SIo1KXv+HExV6Q5hRT3LvTavbtss8U=
Subject key identifier: CC:12:3B:07:06:37:62:09:AE:A5:80:86:58:E5:B4:41:3D:50:4B:6C
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019D27A8B4597B0FE90982D0D48B6054CEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 079F
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: WRx0UEgvhG9tSNHg6mxQQ9mAP/UU/zJjMjiRYYx0rKM=)
2: xL9ifbNR1mOs9uO93ZIkaaIy3p8.roa (hash: VzaUpnGlk6PWKD7kHafESlUjnLnbyjchehYl4PxFAp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b4:59:7b:0f:e9:09:82:d0:d4:8b:60:54:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=cc123b0706376209aea5808658e5b4413d504b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:76:c5:c8:65:0e:ca:f4:be:61:37:8f:6a:
84:2f:a4:da:61:1d:34:07:80:e4:fd:54:22:5e:b4:
b8:ff:c1:68:e8:7a:14:fb:98:62:d2:e8:77:8e:5a:
03:d1:40:86:0c:df:b9:25:93:51:4a:2c:0e:7e:92:
7d:26:6f:7f:4f:66:8c:41:cc:e7:b4:39:51:eb:d5:
8e:32:9b:31:8e:6b:07:b8:a1:e0:85:fa:ec:6d:e3:
bb:0a:a9:f3:8b:ac:f0:18:12:19:c3:05:35:03:84:
89:7b:f6:e6:ab:cf:80:58:21:70:15:75:3a:e8:ad:
32:ea:f5:15:9e:c8:2e:17:b3:91:df:c3:06:46:5e:
36:c7:c7:81:33:32:a5:09:5a:c6:2e:b6:1a:58:03:
08:cc:7b:e6:17:05:91:c7:6c:06:db:3c:79:78:8b:
24:71:34:13:34:3d:fd:e0:21:6b:8a:60:32:b1:c0:
47:f7:6e:a7:03:b8:7c:5f:8b:55:0f:7b:b7:fc:18:
39:f9:d0:87:bc:bd:3d:e6:5b:3c:fe:a6:32:38:73:
89:5c:c1:ac:e2:f0:86:21:af:e6:f9:40:88:23:28:
c6:57:ee:5c:e6:05:1b:0f:47:b9:36:d7:84:11:3a:
ba:bf:66:81:3f:57:75:da:2b:8b:4b:2d:da:0e:4c:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:3B:07:06:37:62:09:AE:A5:80:86:58:E5:B4:41:3D:50:4B:6C
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:ec:59:b9:4a:0c:df:a6:2e:d0:fa:71:08:cf:33:ac:89:
10:63:b6:ca:22:5f:8a:64:a9:28:a5:7d:2d:55:d2:19:35:4a:
62:d1:6b:5a:60:90:6b:ad:fd:27:83:8d:96:d8:8a:e0:a3:08:
10:f4:82:ce:6e:e9:d8:7a:23:3c:38:78:93:ec:37:19:61:f2:
bd:05:fc:71:a3:34:63:33:87:67:1c:d4:87:8f:3f:98:60:46:
ac:46:d1:9b:9b:6a:ae:46:01:f9:41:85:4d:b5:43:6d:b9:7c:
16:41:59:29:59:7b:8e:33:78:91:a3:ae:c1:e9:ad:df:74:8e:
80:a9:61:4c:1a:b4:cc:a6:32:81:a2:bf:82:7a:99:e8:ea:1e:
ee:1b:02:e2:8b:b5:04:7d:c5:1c:45:40:00:64:91:65:27:2f:
a5:dd:bc:1e:ee:73:c5:6c:bc:cc:3a:c8:c5:c5:08:83:db:a5:
9f:94:12:bd:75:bf:a4:4f:8f:3f:c9:53:50:3b:d7:4f:28:fc:
28:01:62:62:ea:2d:47:8c:7c:1d:2b:40:f7:f1:1a:1f:8d:1c:
f6:d1:21:58:05:da:c6:d1:3f:3a:60:8d:01:56:61:ca:3c:16:
eb:b1:f4:01:e4:e9:5e:05:ef:34:e8:78:9b:ab:4c:46:f9:22:
55:66:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:10 2026 by rpki-client