Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 12OPs7INs2dCxqubGOCM89bH4rNhrXEAB0sx0adPlFw=
Subject key identifier: BA:A4:C9:CC:5A:F5:97:E2:A0:F4:6E:CC:43:45:7E:A0:B7:02:B5:03
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019D27DF7C47550CE500C3DFB708932B03F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: FoapRzp6zzbk1bDhEmAcYk33XpAIZhm+CvIdudsrquw=)
2: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (hash: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7c:47:55:0c:e5:00:c3:df:b7:08:93:2b:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=baa4c9cc5af597e2a0f46ecc43457ea0b702b503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e9:2e:44:bc:43:6a:5e:87:b4:1a:79:3f:
39:25:d1:8a:56:e9:36:9b:fc:38:fa:f4:69:fe:d2:
fc:78:bb:35:40:51:62:f6:39:7c:fa:81:9f:ba:14:
88:c5:31:92:a6:f4:cf:90:9c:0e:b3:1f:bc:ce:81:
b0:f0:fe:6f:8f:0d:83:9a:fa:f3:ec:d1:ba:39:5c:
9d:b9:60:09:2c:77:2d:bf:01:a1:7a:b1:f6:85:51:
5c:5f:3b:17:8a:ea:76:76:1d:19:90:7e:f5:6c:74:
43:5d:78:91:0b:79:29:43:90:de:70:f2:1e:1f:70:
6c:59:ec:14:da:59:77:e2:f1:9f:af:d9:6c:b9:e8:
52:a3:9e:22:81:d2:a5:76:b9:01:ea:71:86:c1:a9:
13:46:80:ee:a0:50:ec:e1:7d:22:9a:a4:85:d9:66:
7f:d3:03:5a:fc:d4:92:46:21:a3:f1:9a:4d:e7:76:
85:3e:8a:0c:f2:bb:90:52:dd:ed:07:d8:06:e0:9c:
ad:15:57:8c:82:ba:05:98:9c:09:54:3a:e2:c5:f8:
57:34:c6:e9:6e:ae:b8:79:2b:fc:89:a8:a8:77:11:
d1:89:71:27:dd:80:d3:96:88:09:73:20:a6:19:09:
41:aa:ba:af:6a:c2:24:09:3e:9b:95:33:5d:68:2c:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:C9:CC:5A:F5:97:E2:A0:F4:6E:CC:43:45:7E:A0:B7:02:B5:03
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:38:5f:1b:eb:a4:a6:62:85:48:0b:35:d2:07:ef:7d:82:3e:
8e:30:9a:0f:ea:f3:ae:40:8b:c0:e2:cf:ed:4a:4f:f7:95:a2:
26:80:c3:a5:9f:8c:f0:af:90:45:9f:45:e4:01:6f:6c:79:c5:
75:02:b0:3c:89:92:cc:57:9f:5c:e5:c0:be:94:f7:21:0b:d0:
f8:ee:55:47:56:02:b8:f8:16:3c:39:8e:09:76:d9:22:62:cf:
d5:39:0a:99:4f:a9:5d:cb:dd:c2:32:ce:e5:b2:8d:ea:01:8f:
94:2b:74:f7:05:e4:bd:ae:25:43:b6:13:8b:9f:e1:e7:61:a0:
07:93:a2:6f:f6:43:00:ef:93:d2:86:ef:ed:28:37:e4:ee:22:
53:d5:4f:74:11:65:1b:2a:8f:99:a4:56:53:66:f2:72:80:0a:
8d:67:24:c9:8c:f1:8e:f6:c1:26:15:6b:9f:f7:b9:b3:0b:e2:
14:5a:f3:e5:ef:c6:ef:3c:52:02:d8:8f:55:be:84:1f:1c:8d:
21:f6:b8:bd:ac:f7:d3:71:6a:02:7d:1d:6e:1c:6c:fa:0b:d5:
bf:6a:3e:b4:4c:5e:89:98:6e:f7:70:6a:f5:d4:34:29:9b:1c:
2a:5e:0a:58:66:48:67:55:45:95:c8:a4:d3:fa:6d:02:3d:a7:
62:81:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:35 2026 by rpki-client