Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: HuUiiuPxMepojqVFGPi1xIYZXF/CSPzjugAmIh7oZLg=
Subject key identifier: 76:AA:8B:B1:30:DC:89:CC:C8:41:80:8D:87:5E:51:0F:77:4D:6A:89
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 019D27049CA33CE1AC3E0B8256CB5DB5A4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: j2rayAbLjvKVlNkeDMPojHfNEf6Yx6qcxlvMdiCjJEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9c:a3:3c:e1:ac:3e:0b:82:56:cb:5d:b5:a4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=76aa8bb130dc89ccc841808d875e510f774d6a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:29:7e:a3:33:e4:53:93:4e:85:eb:ae:66:
7c:17:b9:d0:50:42:9f:e1:7e:fc:3e:61:33:b2:5c:
9d:57:4b:2b:42:94:0c:d4:80:d2:32:f1:1e:29:68:
25:82:3c:e6:46:6d:83:19:32:9e:21:9e:77:2e:ef:
1e:11:57:4f:91:81:ac:f2:20:66:59:05:c2:01:2c:
3a:04:d0:f2:ab:ab:a7:c8:c9:78:0b:9d:47:f1:40:
78:a2:1a:21:ec:06:7a:83:d5:f6:1b:9a:df:6b:aa:
d4:a2:d2:33:76:ee:95:30:db:20:d4:68:55:64:26:
25:aa:9b:3f:2b:5b:a2:8d:12:3e:5d:4b:5d:6c:e6:
1a:44:38:cb:52:f2:89:c6:23:db:d7:c3:e7:4d:a4:
2b:a8:69:12:b5:1b:c2:00:ac:16:96:3e:a9:f1:ba:
73:93:c6:d3:e8:d6:44:8d:f8:4b:92:da:e6:5e:03:
3a:76:50:22:e3:e0:5b:81:2d:b9:46:4b:af:4d:5c:
08:cf:ac:5e:d3:b3:d4:a2:c2:f2:47:3e:1b:32:bf:
26:1a:64:c0:3d:4c:43:60:80:69:ce:17:3f:e6:a8:
71:c6:90:e7:23:9b:b8:4b:d4:63:0c:7f:5f:1d:83:
67:4f:92:34:aa:3e:0e:a5:07:40:f6:d6:ab:52:01:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:8B:B1:30:DC:89:CC:C8:41:80:8D:87:5E:51:0F:77:4D:6A:89
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fc:0d:c0:5d:bd:70:d2:d9:3e:08:36:51:83:c4:f0:5f:7c:
a6:88:bd:e4:a5:ba:92:e0:f9:95:b0:eb:8e:d3:97:87:d7:5f:
62:9d:76:ee:b1:ef:b6:19:bf:52:a8:11:54:a0:2c:2e:86:4b:
b6:49:8d:f9:2c:b2:50:ec:5c:07:81:0b:6c:d2:71:44:9c:2c:
c9:3d:39:45:c0:b1:2e:20:5b:ea:73:45:ce:79:b9:db:6f:76:
f4:7c:4f:43:36:50:2d:68:63:fd:03:b8:c5:4c:55:5f:1f:87:
05:8d:83:3f:69:d1:b8:7d:c0:af:92:fe:86:1f:62:8e:82:00:
23:66:6f:23:0a:e7:b8:2d:51:bf:92:a1:c4:bc:b5:be:2a:5c:
02:c3:db:85:89:ba:a8:93:92:af:15:02:f4:c2:7f:38:f7:f5:
42:77:c5:1b:20:76:75:6e:a2:eb:11:1b:5b:63:49:bd:51:c5:
66:46:81:89:a3:ad:3c:dd:f3:98:b8:eb:bf:bf:5b:79:39:50:
d2:f4:64:b9:d7:f0:38:64:d9:5d:f3:ad:cb:a8:67:f0:39:47:
ff:b1:e0:a1:01:91:28:cb:79:2a:2b:16:22:0d:0b:7f:e7:c7:
18:f8:74:d8:36:8d:06:5f:02:57:da:2d:07:a3:14:30:10:9b:
08:da:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:10 2026 by rpki-client