Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: Rg5f4JXjNk/bCZN8l72TKuOH/ev2qGj5NLjjZlJqJGk=
Subject key identifier: 76:33:C1:3C:29:65:AB:2B:B6:B4:8B:3F:5B:6D:FA:09:2D:97:71:08
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 019D27A90C9FEB48F901310A768BEC9BD67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0F6D
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: QN44v5Bi6QKQMoi5Kyb4T8NXVqh8P9sWBV08Mw9qvLc=)
2: jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa (hash: ASLwprhv9CqnRanTW6K8l0OBhjWckJJYB7wKNCuJgis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0c:9f:eb:48:f9:01:31:0a:76:8b:ec:9b:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=7633c13c2965ab2bb6b48b3f5b6dfa092d977108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:dd:b5:0c:80:7c:08:48:df:47:f7:5d:b1:
0a:48:fc:23:0a:a0:ef:b4:8f:3a:7c:80:f9:fb:1a:
d1:cd:ad:50:22:28:56:44:2d:07:e1:44:e9:1f:6f:
63:35:77:60:b2:69:7a:a0:42:d5:73:b4:ea:53:8b:
03:c5:56:5c:0a:08:80:6d:d1:1e:6d:2d:9d:77:ff:
3f:aa:aa:6e:2c:0f:af:b1:f9:81:7f:dc:81:64:28:
20:e2:6a:bd:90:43:d4:fc:cb:d7:6b:d2:43:b0:af:
27:58:6a:24:25:55:d4:3d:7c:e0:33:cc:13:67:c0:
ba:4d:12:f2:16:14:41:2c:86:85:06:9e:22:5c:5e:
d7:aa:3b:71:85:98:51:08:b8:f8:3f:6e:52:19:e6:
49:4d:05:2b:22:53:35:ad:a9:56:25:df:ea:98:39:
ee:b9:d8:fc:26:38:ed:92:ce:86:94:dd:ea:bb:70:
c3:80:15:b1:14:23:f3:e2:9f:13:fd:a1:23:0f:6b:
53:e4:d9:98:c1:5e:94:19:48:e0:61:fa:4f:54:2e:
89:04:11:ae:dc:5a:d8:56:9d:7c:d6:b4:dd:fb:38:
77:af:b0:b2:53:7e:34:4a:72:8c:82:0c:c5:5f:43:
76:9a:2d:7d:22:18:a6:6f:fa:38:ba:da:66:3c:bf:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:C1:3C:29:65:AB:2B:B6:B4:8B:3F:5B:6D:FA:09:2D:97:71:08
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:33:93:77:41:c8:f9:c2:99:2c:cb:42:ce:f3:c5:c9:7d:c1:
f6:88:06:1a:fe:8d:be:6a:f9:97:40:c6:49:6c:13:1d:e2:82:
72:4c:54:d4:f3:49:9b:b3:a7:20:5c:79:1a:35:24:61:c2:e0:
b7:b4:06:ba:65:6e:9f:8f:27:bf:8c:f4:7b:2b:7b:9b:9b:d3:
36:e5:98:e5:96:19:e5:c6:d7:51:ad:00:b9:62:05:ef:6b:85:
2b:d5:26:39:11:f4:c4:0a:d8:5b:fc:ae:94:2c:61:de:64:f0:
c5:88:1a:a8:6f:ea:b6:48:db:57:ef:7b:0a:33:7b:52:87:fb:
e4:59:a2:53:05:0c:ca:cd:ee:d0:ad:45:8f:8f:77:4f:1d:38:
f0:95:4d:f7:d5:ba:16:b4:1c:a7:e7:b0:ad:1e:a5:dc:26:70:
51:b2:16:ce:19:fd:72:3d:0c:56:73:29:05:df:ba:e5:58:d7:
15:9e:db:b8:af:ad:3b:c8:1b:ce:cb:67:a6:3a:a6:56:25:c5:
06:74:c5:20:52:02:72:a9:e9:dd:80:a5:9c:56:7d:8e:ef:4d:
a9:d0:6b:0b:ff:cb:09:16:78:0d:92:48:97:da:2a:3e:c4:aa:
b9:3b:b5:a5:d6:f9:63:16:c2:0f:0c:6c:0d:8e:3a:c2:8b:18:
bd:77:f4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqQyf60j5ATEKdovsm9Z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1
ZDNmNTAwHhcNMjYwMzI2MDEwMTIzWhcNMjYwMzI3MDEwMTIzWjAzMTEwLwYDVQQD
Eyg3NjMzYzEzYzI5NjVhYjJiYjZiNDhiM2Y1YjZkZmEwOTJkOTc3MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYrdtQyAfAhI30f3XbEKSPwjCqDv
tI86fID5+xrRza1QIihWRC0H4UTpH29jNXdgsml6oELVc7TqU4sDxVZcCgiAbdEe
bS2dd/8/qqpuLA+vsfmBf9yBZCgg4mq9kEPU/MvXa9JDsK8nWGokJVXUPXzgM8wT
Z8C6TRLyFhRBLIaFBp4iXF7XqjtxhZhRCLj4P25SGeZJTQUrIlM1ralWJd/qmDnu
udj8Jjjtks6GlN3qu3DDgBWxFCPz4p8T/aEjD2tT5NmYwV6UGUjgYfpPVC6JBBGu
3FrYVp181rTd+zh3r7CyU340SnKMggzFX0N2mi19Ihimb/o4utpmPL8RsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYzwTwpZasrtrSLP1tt+gktl3EIMB8GA1UdIwQY
MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt
ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh
LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajOTd0HI
+cKZLMtCzvPFyX3B9ogGGv6Nvmr5l0DGSWwTHeKCckxU1PNJm7OnIFx5GjUkYcLg
t7QGumVun48nv4z0eyt7m5vTNuWY5ZYZ5cbXUa0AuWIF72uFK9UmORH0xArYW/yu
lCxh3mTwxYgaqG/qtkjbV+97CjN7Uof75FmiUwUMys3u0K1Fj493Tx048JVN99W6
FrQcp+ewrR6l3CZwUbIWzhn9cj0MVnMpBd+65VjXFZ7buK+tO8gbzstnpjqmViXF
BnTFIFICcqnp3YClnFZ9ju9NqdBrC//LCRZ4DZJIl9oqPsSquTu1pdb5YxbCDwxs
DY46wosYvXf0ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:40 2026 by rpki-client