Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: /7nWSNU9HRSMfJS0OLFVjnhJu18OqpSYQuRhC9LKcNQ=
Subject key identifier: 49:23:71:A5:E1:0D:C9:AA:57:19:71:70:DF:4F:87:A6:38:04:91:19
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019D2B17B742FBE935760E7F878A48C4401D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 03CA
Signing time: Thu 26 Mar 2026 17:01:07 +0000
Manifest this update: Thu 26 Mar 2026 17:01:07 +0000
Manifest next update: Fri 27 Mar 2026 17:01:07 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: RMT7GFwfETgb0x8Wq5/LP148+Al1yh9KRvJ8UES53Xc=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:b7:42:fb:e9:35:76:0e:7f:87:8a:48:c4:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 26 17:01:07 2026 GMT
Not After : Mar 27 17:01:07 2026 GMT
Subject: CN=492371a5e10dc9aa57197170df4f87a638049119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:d7:19:f2:1a:de:73:2b:a1:89:9d:05:13:
4d:f8:b1:3a:31:7a:d4:61:1a:e2:34:9c:3f:6e:00:
bd:40:78:a7:60:29:97:1c:4c:e8:53:ab:4f:38:d1:
b4:3b:91:53:02:56:b1:d8:dc:a0:56:40:99:8d:ed:
c9:58:29:da:d8:b0:83:45:8c:72:c3:47:01:81:29:
85:71:fb:12:5e:a2:f6:60:59:e1:39:e1:6a:78:38:
49:5c:85:a0:96:5a:a7:af:4c:52:4a:ce:ce:0b:5b:
5b:ac:f6:d3:e3:69:24:44:e4:e6:81:24:47:ce:f9:
fb:6b:49:26:6d:37:4b:73:21:fc:06:5a:17:bb:04:
52:f0:27:9f:22:4e:c6:51:57:6b:b2:40:02:25:c4:
78:af:43:31:12:49:cf:5e:0e:2f:9e:f3:44:2a:c8:
ba:56:73:0e:e3:8e:47:0c:05:fd:f3:c5:c3:73:fb:
45:3d:15:38:6f:de:8d:5f:7c:0d:81:03:07:7b:ab:
96:c3:dd:a8:a6:e0:c5:bf:68:05:ae:b3:70:46:53:
7e:3f:0f:8d:2f:16:8d:89:f3:20:e7:65:b6:57:2d:
30:52:a4:fd:e2:a1:20:f7:3f:c6:9e:76:a3:c9:69:
88:8c:39:20:1f:b2:cb:e1:ab:24:70:99:3e:46:6b:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:71:A5:E1:0D:C9:AA:57:19:71:70:DF:4F:87:A6:38:04:91:19
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:77:31:c6:49:9f:eb:0c:6e:f5:c9:02:44:bf:72:42:8d:82:
5e:64:3c:4f:8b:7b:a4:91:67:2b:74:b1:5f:f7:4c:49:ce:59:
19:8d:68:0a:5a:0a:19:f8:91:96:89:52:2b:89:93:1b:be:eb:
6a:52:6a:af:77:c9:c1:32:2a:1e:5b:aa:b7:74:62:71:18:c2:
9d:de:04:a4:70:27:b6:0b:19:3e:fb:a0:4c:4a:cf:07:24:77:
47:32:6a:e9:54:63:5e:fe:1d:f2:58:b5:d6:6a:56:ef:60:24:
8e:9f:e7:d7:4d:79:d0:a3:3f:66:f8:fb:99:2f:ee:eb:99:0f:
24:b0:9d:1a:6a:b2:0e:a1:b8:01:41:18:c5:1e:0b:93:5a:70:
cb:34:a3:4a:ab:03:d7:06:9e:aa:3b:28:3f:b3:bc:10:46:d0:
49:3e:14:45:6f:ef:f9:62:27:2d:4d:79:8d:6f:93:94:1b:b5:
50:2a:e7:95:1b:54:95:c8:fd:93:b4:89:07:dc:c9:5b:14:ac:
4a:7a:9f:8e:d3:9f:bb:f7:07:a6:91:14:6b:1e:1b:10:19:67:
94:c1:82:e2:79:e7:86:9d:43:1a:23:4c:6a:ef:36:1d:7c:29:
9c:47:d2:9b:a3:f4:04:72:3b:2e:81:be:86:6a:7d:67:b0:1f:
ee:89:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:44:11 2026 by rpki-client