Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: orq/3+PyD9k1dbPgvjZc46AUYVJDyQ7DlO1UUK75DoQ=
Subject key identifier: 85:07:64:A2:13:B2:98:E4:CD:FB:7B:EC:44:C8:82:88:F5:08:36:CB
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019D2A725E26AED9F0246EEF42FFC6B4ED4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: zlD+GoFkpwdp/HiVeDynoFzAP7LvFca+HVsxr8O78sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5e:26:ae:d9:f0:24:6e:ef:42:ff:c6:b4:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=850764a213b298e4cdfb7bec44c88288f50836cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:97:3a:bc:a3:c9:a7:a4:b3:44:90:f3:2e:
3f:5f:01:40:76:63:eb:ce:aa:b9:67:c1:52:2c:1c:
c4:06:82:d2:e3:54:7d:83:e3:f5:d0:ad:82:fc:57:
a3:a6:e7:87:5c:b1:c7:01:90:00:8a:8e:e0:4e:98:
90:a6:e0:d4:03:34:8a:57:79:21:af:ff:62:f4:6f:
1e:ce:c7:aa:b2:6a:72:df:91:9b:9f:23:a9:41:80:
6d:83:9a:21:fd:fb:51:51:99:b3:43:34:1d:19:6c:
36:ed:b4:53:9a:8e:97:e7:b0:8e:f2:5c:91:f3:ac:
8f:be:f0:e2:10:c2:d2:81:99:67:13:df:d1:77:a8:
16:67:90:c1:81:00:43:16:b8:18:5e:65:94:d7:dc:
22:1a:e3:70:b3:eb:27:d3:66:fd:32:f2:37:f5:19:
03:dc:21:94:1d:4d:11:58:fa:91:ea:b9:4c:4c:1f:
4b:39:f5:da:6d:f8:db:47:cb:b5:d5:fa:1f:c0:4f:
47:7d:25:a0:72:13:84:4f:b3:bb:4c:b6:03:4b:39:
83:d6:9a:88:ac:7a:b0:9e:ca:54:10:ee:e4:4f:f2:
f1:75:96:e6:78:43:b7:48:c8:86:26:30:f0:c8:fc:
0f:4b:44:2d:8e:f0:cb:07:d7:5e:a9:f2:d3:19:db:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:64:A2:13:B2:98:E4:CD:FB:7B:EC:44:C8:82:88:F5:08:36:CB
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:5e:31:ee:87:bc:24:4b:9d:c4:2e:9f:fa:e4:ac:cc:53:
2d:8f:41:67:ec:68:57:bc:0c:7d:cc:9e:4b:78:bd:9b:ae:39:
ec:b4:0d:19:34:7d:86:63:a8:9f:a7:9a:cd:33:24:10:f3:27:
d8:b3:d9:f5:49:57:54:e7:02:59:3c:bf:a1:a6:1a:4c:8c:48:
a9:ca:9f:cf:9d:c2:ce:6c:a8:28:3b:ee:c6:f5:c8:17:66:36:
ae:47:53:9e:87:cc:c5:26:78:f2:d9:6f:f9:e6:73:1f:cb:b7:
06:dd:14:c1:ff:41:be:2f:c8:e7:62:73:4e:90:a4:6c:5c:a3:
09:4d:52:5a:9c:58:32:38:15:5b:ae:51:59:48:1f:fb:d4:cf:
36:68:81:57:7e:65:7f:36:3a:a1:1d:56:ae:d1:a0:6f:1d:da:
61:1a:3d:e7:66:c2:eb:e3:eb:d9:a7:a3:45:fb:0e:99:1f:da:
42:cc:f0:90:83:62:d9:4f:7e:97:53:16:2e:48:4c:24:56:17:
ff:ef:c5:56:1d:bb:e2:41:c8:f9:df:0e:e9:b3:4b:69:28:dc:
52:1d:aa:ac:88:23:3d:d5:7b:01:14:f9:12:1f:0e:21:0b:1d:
a1:d6:ed:70:90:4f:56:d8:60:39:fa:87:85:58:25:93:ed:21:
5d:86:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:14 2026 by rpki-client