Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: AREkZ1UcQ2H2sIlDR5ymjAp7z4Lck7eAjyHse3JJe0w=
Subject key identifier: 0D:F9:65:C4:ED:6D:98:4C:F1:F5:78:AF:0D:3A:38:EC:E9:24:D6:83
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019D29CDBFBCF3ED0192D38F3E535A9FCC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0D97
Signing time: Thu 26 Mar 2026 11:00:42 +0000
Manifest this update: Thu 26 Mar 2026 11:00:42 +0000
Manifest next update: Fri 27 Mar 2026 11:00:42 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: 1zUvxSJIJmU1EPOTwxl4kbxtwfBrA9FFisvBvAHYi/Q=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:bf:bc:f3:ed:01:92:d3:8f:3e:53:5a:9f:cc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Mar 26 11:00:42 2026 GMT
Not After : Mar 27 11:00:42 2026 GMT
Subject: CN=0df965c4ed6d984cf1f578af0d3a38ece924d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:3f:bc:a0:7f:98:db:9c:a0:52:8c:34:07:
89:86:5b:78:4b:1a:2a:ea:db:11:95:15:fa:3c:3e:
e0:30:e9:87:5b:38:18:bb:ed:61:a3:3c:c8:46:bf:
55:d2:98:0e:ee:a4:77:93:d4:fb:97:3f:c3:50:e7:
2b:b1:4d:6f:ac:3e:0f:be:1e:1c:2c:d5:91:47:06:
23:61:0c:45:77:6c:7d:9b:5e:f2:9a:c3:52:b5:d4:
60:27:88:ea:e4:8c:24:74:f8:5b:f0:35:93:a1:97:
d8:eb:81:89:03:e3:c0:ca:9a:c4:94:60:df:cc:49:
4b:43:47:24:5c:68:fd:19:ff:3b:44:49:c4:55:f7:
85:f5:40:55:ec:34:81:22:c2:e3:50:b5:a7:09:92:
c2:13:da:ff:28:ca:af:37:aa:cd:62:77:f7:0d:e9:
1d:8d:8d:50:f7:a1:8e:88:7b:43:4b:5a:9b:2c:64:
4c:da:98:4d:1e:a5:c2:64:f8:39:78:3d:a5:aa:de:
99:78:37:7f:de:b9:c1:f3:08:5d:d0:31:ee:39:db:
72:c0:b2:55:db:ed:37:6a:16:9c:af:7e:49:7f:26:
74:d6:86:a0:01:2f:0b:5d:3c:7f:f9:75:27:52:4b:
6e:e5:60:ae:ad:cb:38:ac:41:28:2e:f9:87:40:89:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:65:C4:ED:6D:98:4C:F1:F5:78:AF:0D:3A:38:EC:E9:24:D6:83
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:94:9d:14:42:9f:94:23:26:d1:3b:da:85:bd:de:6f:c2:5f:
e6:7c:d4:98:ff:a8:97:85:df:db:2b:11:d8:c6:02:90:8a:79:
25:44:3d:5a:e9:2b:d6:ea:47:7a:1f:e2:34:77:e4:18:88:95:
67:01:b4:3c:7a:ec:b9:cf:76:12:2a:f6:70:f8:c1:6a:51:05:
47:31:34:4a:55:c6:15:d9:bb:b6:58:ab:b5:7f:48:b9:b7:68:
be:cd:97:51:d8:5b:d2:98:8d:83:11:c5:2f:69:57:54:2b:ad:
ee:c0:7f:65:9a:ea:57:ee:94:8f:0e:24:8d:fd:ac:5a:57:4b:
52:46:aa:25:b4:9f:29:27:e7:e3:66:0b:2e:08:fd:be:77:e1:
9e:b2:69:6a:3f:69:fe:12:16:4f:4d:8c:c6:8a:9e:39:60:72:
fc:a3:e6:ae:d0:b3:42:97:14:b9:a0:8d:c3:4f:57:50:3b:b8:
86:2a:1a:b5:73:08:07:a3:a7:d9:0e:57:37:d8:dd:7d:7a:5d:
c0:26:38:2e:51:c7:3f:6a:16:82:06:81:62:bf:44:6d:f5:63:
d8:ab:3f:15:03:29:87:57:0f:99:5a:2c:26:1e:b7:73:de:33:
05:16:f9:d9:44:4a:2b:6d:22:14:73:ce:59:e7:c6:42:52:16:
6c:06:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:32 2026 by rpki-client