Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: 2hmI0grgFwvgt/ugvBgct9lWGglEmEWEnMDJ33JQZxc=
Subject key identifier: BC:00:D0:76:43:38:F0:31:1D:33:6B:5A:4C:A7:FF:49:27:B3:58:36
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019D269652E6B2E1470CC21857625D759849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: TIkf/XmjEYsrX3/v6j3if+D5AA2U7zSqgETr8s4Per8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:52:e6:b2:e1:47:0c:c2:18:57:62:5d:75:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=bc00d0764338f0311d336b5a4ca7ff4927b35836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:f7:1d:b8:25:ba:9c:8e:b3:1c:e0:2f:d8:
23:1f:bc:50:e3:d2:db:86:ea:24:e9:4e:15:15:c8:
b8:5f:b7:ba:6a:b0:5f:fd:ec:bb:d4:fa:3b:35:8f:
ce:36:b5:f5:8c:8f:59:55:28:e3:d9:90:e6:34:23:
e1:d2:18:ef:a9:84:35:4c:44:44:62:4a:af:ca:3a:
85:ec:34:2a:1f:3c:39:2e:9d:49:bf:62:23:00:0e:
f7:d6:e4:0e:81:4b:b3:66:d0:e3:94:e3:61:a9:8f:
ee:d2:5e:89:c9:86:c5:8d:b2:9a:99:25:f5:4c:82:
93:7a:e9:c8:c7:9f:97:fa:cd:06:f5:b0:5f:96:da:
16:c6:e8:b6:44:91:84:d2:79:e2:8c:dd:fe:8e:cb:
51:df:67:74:51:fe:78:83:d9:78:a8:0d:7d:69:93:
af:19:f4:70:25:5a:99:ea:53:4f:46:be:67:ea:90:
98:93:31:8c:e5:a7:7a:c1:76:ba:b8:e5:87:b9:fb:
ba:e9:f0:4d:6d:b8:ed:b8:21:72:34:66:23:14:d3:
4d:2a:26:ef:f1:05:90:93:a2:ad:99:16:78:70:9a:
36:ad:18:99:27:c1:90:13:d3:3e:e6:42:b9:87:6b:
a7:0d:8a:50:2b:c3:15:b9:a0:8a:36:3a:a1:51:03:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:D0:76:43:38:F0:31:1D:33:6B:5A:4C:A7:FF:49:27:B3:58:36
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bf:07:8d:12:cd:c4:ce:11:d6:9b:75:09:1b:0b:07:3a:53:
2a:d9:ae:a4:f0:36:c9:75:bf:ed:fe:f1:b7:8a:d4:89:e0:15:
c1:3b:90:f0:78:c1:5b:75:44:87:d9:01:e6:75:ca:78:f6:7f:
da:61:0d:e7:5a:42:0c:b3:3a:03:79:55:e6:34:64:0f:d6:ed:
eb:b5:bf:07:5f:78:8c:52:70:71:f4:5d:d0:9b:aa:c5:f5:c0:
5f:fa:38:ef:6f:4c:50:2d:06:9a:51:41:1e:e8:b7:3b:5a:82:
0e:09:57:15:2c:31:2e:c4:44:1e:40:fd:99:5f:f6:6b:b5:8b:
7a:8c:96:ed:9e:43:6a:19:b5:8c:cc:2c:f9:8e:57:87:09:1b:
b3:b0:33:49:d2:55:5b:04:5b:fc:19:37:e8:94:5f:dd:78:36:
14:87:09:b4:fd:bf:fa:d4:50:5c:1e:08:39:f5:ba:92:b8:8a:
13:46:24:84:37:5e:75:d4:51:cb:c6:40:0b:58:ac:a7:8b:21:
5f:c1:f5:1b:85:bd:52:e4:2e:05:0e:ec:28:b1:45:45:26:f2:
4d:bd:06:44:bb:09:f9:83:58:86:69:75:27:a6:11:68:37:8f:
7b:f8:da:0d:38:53:99:18:62:32:7e:95:1b:d2:3b:b6:41:54:
cb:9b:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:48 2026 by rpki-client