Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: ryeEumNiCLpz6xsRnhDmAYFtxpTV3G+83M3LlEJmPHY=
Subject key identifier: 68:89:9D:49:43:34:38:4E:AC:17:B6:6A:D3:50:E1:47:9F:EF:B8:29
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019D25832E43884C9D268BDA8BA43A19A254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0F7B
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: TRSPz4dbHhwHH5F2xsWAMbypWjTe6+bttXJZ+psAYmM=)
2: avC4TDy0YNmu43wu3PPZQnyz3tY.roa (hash: SjlTG6q/Qs6sxucjwFRvD4MugPMGQX1MddPjbQLIX8o=)
3: pqWAwtSrVWHhYeLyoOZYwb_89MY.roa (hash: UtepypB/1E+cJ1/s4IJjEbaQqJ0MlYB18cpRtSY7yhY=)
4: u0N0v0cqXVFGT5AQTDctFWn93WM.roa (hash: IuAcsweM8Zm44/Mf/txoK9/5Poy7ZOdXCqud2LmxB9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2e:43:88:4c:9d:26:8b:da:8b:a4:3a:19:a2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=68899d494334384eac17b66ad350e1479fefb829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:22:cf:be:d3:4a:c8:52:3b:7f:52:2f:7d:
d9:e4:e1:68:3d:84:5d:1e:b5:db:07:bc:9d:8a:df:
f7:d6:9b:2b:17:bb:a9:7b:35:10:c0:92:a3:2b:da:
e1:f8:2a:87:c5:b0:9d:8b:13:fc:f7:4a:c1:48:3c:
6b:3c:9a:c4:0b:db:f5:63:a1:b1:72:95:da:a1:ff:
24:ef:dc:ad:2e:71:e3:f7:61:79:d0:df:94:b5:03:
7c:e9:d1:06:28:21:42:80:57:e9:2a:92:02:77:e5:
fd:a2:2f:00:69:06:e9:b6:24:69:8d:8b:55:3f:83:
93:fa:82:f7:54:60:11:dd:b5:c0:af:03:4e:a2:87:
15:1e:11:9a:46:98:19:7c:67:83:19:e0:6c:3f:05:
72:17:cb:4d:59:cd:8e:26:5a:d0:35:c3:d1:a3:16:
a6:b0:38:4c:b9:b6:32:f2:44:56:30:b1:67:01:39:
5b:6e:0f:da:15:cf:30:3f:6f:05:46:e8:96:09:f9:
9f:36:39:3c:f0:e7:f9:7c:c4:85:fb:68:f8:d5:5f:
34:aa:5a:89:66:51:d3:72:81:35:84:c8:01:b0:88:
aa:66:68:9d:a5:1e:ad:4c:79:0e:c9:aa:f3:f3:b6:
40:bc:88:9a:39:55:87:12:c8:d0:11:66:28:e4:21:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:9D:49:43:34:38:4E:AC:17:B6:6A:D3:50:E1:47:9F:EF:B8:29
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:c6:62:a8:d6:59:b6:c3:50:63:f7:2f:a7:b8:e0:cc:12:
7a:35:72:33:a7:79:38:a4:41:ee:f1:f2:6e:fb:95:33:08:46:
a5:2f:a8:c9:92:86:45:b6:a5:4c:c8:33:03:38:fb:38:19:03:
75:9c:7a:c0:29:da:79:97:65:32:eb:cf:4e:00:10:50:cb:56:
c7:83:19:e3:1d:42:36:bc:63:82:93:fc:fd:a9:54:c0:fc:6e:
05:3a:3b:28:d0:a1:e9:22:aa:91:b7:14:62:d7:ac:2d:3a:fc:
a6:f8:10:8c:b7:ec:6a:f6:2e:4d:8a:5f:dd:c6:ba:dd:48:a0:
8c:b5:c2:58:10:b0:c2:28:4b:e7:2f:b1:cc:fc:55:79:0a:69:
00:fa:71:c3:dd:46:3d:2e:15:7b:ff:9f:16:32:29:fc:f6:02:
1e:34:28:e9:85:71:c7:aa:d2:80:49:cd:44:d6:27:fa:fd:79:
43:14:57:77:f3:51:ab:47:38:71:f2:1e:d6:89:c8:48:a3:6c:
d7:20:50:92:13:4f:c6:d9:a2:60:8c:35:49:bc:5c:eb:5e:d9:
bc:36:c7:e1:34:96:e7:41:5d:10:63:cb:5b:26:66:24:82:47:
19:f8:7f:7b:f6:cd:f6:13:f7:72:db:c8:c1:83:17:3c:b3:6c:
65:06:23:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgy5DiEydJovai6Q6GaJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk
N2E3OTAwHhcNMjYwMzI1MTUwMDQ3WhcNMjYwMzI2MTUwMDQ3WjAzMTEwLwYDVQQD
Eyg2ODg5OWQ0OTQzMzQzODRlYWMxN2I2NmFkMzUwZTE0NzlmZWZiODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hwiz77TSshSO39SL33Z5OFoPYRd
HrXbB7ydit/31psrF7upezUQwJKjK9rh+CqHxbCdixP890rBSDxrPJrEC9v1Y6Gx
cpXaof8k79ytLnHj92F50N+UtQN86dEGKCFCgFfpKpICd+X9oi8AaQbptiRpjYtV
P4OT+oL3VGAR3bXArwNOoocVHhGaRpgZfGeDGeBsPwVyF8tNWc2OJlrQNcPRoxam
sDhMubYy8kRWMLFnATlbbg/aFc8wP28FRuiWCfmfNjk88Of5fMSF+2j41V80qlqJ
ZlHTcoE1hMgBsIiqZmidpR6tTHkOyarz87ZAvIiaOVWHEsjQEWYo5CG46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiJnUlDNDhOrBe2atNQ4Uef77gpMB8GA1UdIwQY
MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt
Yjc5NTUyZTcwMGM1LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1
LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhTGYqjW
WbbDUGP3L6e44MwSejVyM6d5OKRB7vHybvuVMwhGpS+oyZKGRbalTMgzAzj7OBkD
dZx6wCnaeZdlMuvPTgAQUMtWx4MZ4x1CNrxjgpP8/alUwPxuBTo7KNCh6SKqkbcU
YtesLTr8pvgQjLfsavYuTYpf3ca63UigjLXCWBCwwihL5y+xzPxVeQppAPpxw91G
PS4Ve/+fFjIp/PYCHjQo6YVxx6rSgEnNRNYn+v15QxRXd/NRq0c4cfIe1onISKNs
1yBQkhNPxtmiYIw1Sbxc617ZvDbH4TSW50FdEGPLWyZmJIJHGfh/e/bN9hP3ctvI
wYMXPLNsZQYjgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:48 2026 by rpki-client