Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: bS9DEWTa9HBhaCQhlgiZoSvkdkDYwDIV15o0UcNGTp4=
Subject key identifier: 8F:43:75:6F:16:82:49:34:0F:8D:0F:31:7C:89:2A:AC:AB:F4:BB:4E
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 019D2584179ECE0FA3825C3CC8E2958C5112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:46 +0000
Manifest this update: Wed 25 Mar 2026 15:01:46 +0000
Manifest next update: Thu 26 Mar 2026 15:01:46 +0000
Files and hashes: 1: Z7YKoT2uZ4toIphTGHeS29211HY.roa (hash: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: Z4us/OuMqh/5O+qv+07auge0L3bFa5AMjfqWTkzvYVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:17:9e:ce:0f:a3:82:5c:3c:c8:e2:95:8c:51:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Mar 25 15:01:46 2026 GMT
Not After : Mar 26 15:01:46 2026 GMT
Subject: CN=8f43756f168249340f8d0f317c892aacabf4bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:46:47:1f:ad:07:cf:b0:60:f4:24:c7:06:
6b:10:b4:ff:79:e4:52:42:0f:3f:b8:3b:2b:b2:6e:
7f:dd:8a:a9:b8:11:94:b8:93:d5:e3:22:5b:53:71:
ce:e5:62:4d:b6:6f:ea:fd:46:73:84:42:e7:c0:95:
28:87:24:04:8e:e6:ef:b5:4e:9a:cc:9b:a0:f0:56:
48:70:91:67:ef:81:9b:08:03:33:e8:44:c8:3c:9f:
fd:f3:08:08:28:b1:df:74:20:bd:95:59:08:07:7d:
69:80:3a:d9:97:1e:b9:20:de:77:59:95:b3:d9:b0:
ca:9b:ec:25:c0:ea:36:36:ca:63:b0:3e:97:66:46:
61:24:e5:58:c7:38:28:d7:12:3c:db:31:65:4c:41:
df:e6:4d:7d:a3:15:2c:1c:ef:7e:08:23:3f:a3:44:
8c:a3:cf:00:3e:e6:3e:44:db:cc:46:0e:d9:6f:d1:
40:9d:0d:d3:99:88:7e:bd:cb:ab:81:95:45:9a:fe:
52:4d:3a:c6:5a:cf:ae:c3:84:ac:f0:41:76:cb:91:
5c:1a:46:6d:67:a9:27:32:79:52:bd:16:ef:2a:77:
f5:30:5b:83:c4:0b:ee:5b:bb:7b:e4:82:47:ed:3c:
9c:d4:9f:d7:b9:62:26:7b:44:18:1b:3d:96:34:a4:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:75:6F:16:82:49:34:0F:8D:0F:31:7C:89:2A:AC:AB:F4:BB:4E
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:34:08:75:73:48:ae:0a:2c:4c:1d:bb:a8:c9:e7:6b:f6:
d7:29:b7:65:9b:9d:ba:67:2f:b9:8b:49:e7:25:41:34:36:03:
0c:43:3c:c0:fb:24:6f:d7:fa:af:42:10:0e:47:62:b1:5c:4d:
a9:3a:b0:96:4e:06:d5:a3:1e:35:a4:61:95:fc:02:33:0f:25:
f8:2d:1a:b1:7f:3b:6e:46:ad:6c:69:7e:64:32:cc:94:3c:fb:
94:20:c5:36:0a:7f:b4:1d:00:3d:2e:56:be:e9:5f:cf:b4:a3:
24:48:87:ce:08:c2:f1:8d:d7:5b:91:c0:da:d4:e2:6f:78:b7:
74:3b:49:1f:79:93:69:4d:af:b5:d9:5e:ee:70:1e:8a:cc:5c:
48:6e:5e:84:98:b3:e8:7c:86:7e:3a:82:fa:b0:33:5f:d7:a1:
42:ca:fe:c4:de:8e:f8:88:c6:3f:a9:65:71:67:d1:6c:e1:63:
15:08:1e:5c:73:39:a0:06:74:2f:06:f9:28:33:03:19:58:14:
ec:46:84:cd:17:b3:ff:94:05:90:86:0f:c3:85:c9:75:57:5f:
86:43:f0:2a:ce:bd:a2:5e:e6:b8:2f:b2:0f:1f:72:06:0b:2b:
f1:fb:4b:31:65:25:95:b9:8d:71:11:00:e2:0c:be:ef:20:02:
f2:e0:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:30 2026 by rpki-client