Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: IQt3NWHq2MCeKT2A3zRBCiv7eMfoy14lexgGk2bUEbE=
Subject key identifier: 14:F4:4B:54:27:4A:20:40:F5:14:5D:C5:72:58:88:66:4C:A6:C4:4E
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019D27A933F9566703484FA5AE9DE9570C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1392
Signing time: Thu 26 Mar 2026 01:01:33 +0000
Manifest this update: Thu 26 Mar 2026 01:01:33 +0000
Manifest next update: Fri 27 Mar 2026 01:01:33 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: Usy8wQPjpvcWgs0q4lpWzpFhOde3Lo/SdxesTxPSOgU=)
2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:33:f9:56:67:03:48:4f:a5:ae:9d:e9:57:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Mar 26 01:01:33 2026 GMT
Not After : Mar 27 01:01:33 2026 GMT
Subject: CN=14f44b54274a2040f5145dc5725888664ca6c44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:ee:b4:5d:09:50:ef:94:39:a8:7a:e7:c3:
59:22:4a:7b:23:85:2b:fd:b2:f5:ca:9b:ce:47:28:
9e:18:8f:29:09:ac:dc:bd:cd:bf:42:fc:bb:ed:50:
1d:b3:52:83:8e:3e:e0:1f:59:d6:ad:fd:cb:ec:5f:
49:38:02:c4:ed:1f:fd:5c:aa:f1:9c:cd:96:94:2d:
67:d1:92:f0:a1:31:89:64:02:8b:44:11:e1:6a:1d:
f4:0f:a4:15:06:1a:d6:cd:4d:96:62:d2:f2:c2:9d:
4b:ea:17:6a:21:0f:dc:06:02:b9:4c:75:d3:13:bd:
ab:35:5b:85:62:e9:c6:35:32:a4:39:ee:b4:6d:01:
2e:08:73:18:06:07:23:b9:c5:dd:65:d3:ed:d2:5e:
08:4a:da:91:a2:2f:0d:8c:f3:a2:4c:d0:ff:b6:77:
93:d1:f4:26:d8:93:9f:5c:bb:fe:40:b8:e4:55:0f:
c4:a0:a5:04:81:20:71:e3:69:8c:ce:47:74:30:5f:
ce:ab:60:f3:7e:ec:f5:48:37:d6:dd:6c:07:41:7a:
d1:2d:6c:dd:bd:b8:7a:79:e8:9f:aa:64:62:05:62:
9d:2d:cc:8f:d5:07:cf:9a:9c:13:ac:18:0b:61:c7:
ea:47:3f:34:01:1a:32:e8:04:69:61:1f:4f:f6:fc:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:4B:54:27:4A:20:40:F5:14:5D:C5:72:58:88:66:4C:A6:C4:4E
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:ca:c4:a5:1c:94:6a:d2:9e:26:19:b5:d7:75:26:15:14:
55:47:7e:09:46:ba:d9:f3:29:c7:36:af:5a:01:37:62:7e:88:
ec:83:c9:91:01:34:22:4b:14:57:78:55:1a:22:72:49:95:94:
7d:19:83:c2:91:85:04:66:7b:e9:50:46:12:58:65:84:0a:43:
c5:81:ab:48:29:69:f9:65:7b:85:39:f3:a5:49:0d:ad:e7:c8:
e8:23:68:2a:3f:ee:1f:34:c8:5a:3f:84:b0:0c:b5:a2:f7:27:
ae:f3:c0:55:de:39:7c:81:e2:41:19:df:de:4e:de:8e:52:e9:
a8:17:7c:1f:86:94:86:87:ab:8d:35:78:dc:ad:d2:89:09:ef:
25:7e:b1:ff:34:26:a8:7c:38:b2:96:32:9e:48:93:e9:1f:11:
dd:72:d9:4c:63:68:fc:54:83:3d:9a:ef:7c:0c:d3:82:0a:5f:
12:90:39:4c:6e:f4:bc:c3:77:d6:74:6e:9b:ed:2f:de:ca:d0:
02:2d:7c:46:54:51:57:60:64:59:05:cc:06:41:fc:9e:5b:70:
62:5e:14:72:31:f9:0d:e6:39:13:ff:70:e5:da:88:d0:fc:84:
9c:9a:37:bb:5b:06:1e:70:b8:c9:af:2f:f3:fb:c2:42:3d:33:
51:bb:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:19 2026 by rpki-client