Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: G9KazfD838XAfjprSIQ6KZ49EzGf+BnUb93TAQwC5pc=
Subject key identifier: 81:D7:7A:DB:D9:C3:04:64:AF:F8:69:0A:2B:96:EE:86:D8:39:6B:96
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019D28F23A98C3843003532F60919A5BD0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa (hash: a0wsPiri9N8v0Qf4OIW+s20J9vgPW/O4uUqTrgadEUg=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: oN53fVbNZwYNqsObG89TYRu1rk2xo8c5aE+fdQ5D1xo=)
3: huyceIHVnvQkvqjpwCiPSV0-omg.roa (hash: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3a:98:c3:84:30:03:53:2f:60:91:9a:5b:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=81d77adbd9c30464aff8690a2b96ee86d8396b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:05:bc:ec:5c:a4:63:70:15:b7:64:71:54:
54:b4:b1:eb:99:f4:89:77:52:60:7d:14:5b:c8:78:
ad:13:a3:a6:d5:c1:32:2f:d3:28:62:dd:0a:ca:3d:
d6:2b:d1:5e:a6:b7:ec:c2:10:d5:91:63:b7:59:cf:
66:2e:2b:f4:93:3f:57:54:c4:e2:d4:7a:df:79:4c:
3c:5b:58:86:a9:c6:b4:5c:8c:09:a0:38:c3:74:01:
d1:82:01:bb:3e:a6:de:26:c1:9c:29:77:11:7c:03:
e8:2f:4c:60:92:89:d3:96:80:cf:38:cb:42:25:20:
58:b5:c0:c0:f2:de:f7:52:d7:85:1c:e6:e0:d9:5b:
7f:06:e9:a1:52:db:fd:ae:04:d2:6c:c3:5d:dc:70:
eb:42:01:41:8c:de:c6:2e:31:5f:44:d2:a7:97:f4:
f8:e0:7f:86:fe:a1:e0:56:e3:93:1d:d2:1c:68:0c:
b6:c9:2a:9d:c1:0a:c5:c1:46:cc:b7:89:f6:0f:08:
a7:07:74:bb:9c:da:e7:81:e9:c3:8a:04:bd:2e:d8:
0b:c3:84:e9:7a:86:bc:2c:56:5c:59:02:0a:95:8d:
17:37:6d:0b:49:f4:1d:0f:45:4e:9c:25:67:82:03:
74:00:de:74:26:c6:a1:52:d6:e5:d8:b4:f8:f8:29:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:7A:DB:D9:C3:04:64:AF:F8:69:0A:2B:96:EE:86:D8:39:6B:96
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:c5:bf:7e:d6:4e:91:77:e4:97:9c:b1:12:62:9b:52:24:
23:74:05:4e:9b:f3:f9:89:80:12:be:d1:99:c2:3e:8c:37:5d:
a2:80:8b:fe:cb:d9:45:a2:e7:46:91:7a:fd:2b:42:a7:71:ee:
9f:5f:43:b0:8b:2d:a0:3f:be:21:5c:93:6b:7a:17:47:a4:d9:
de:2f:64:be:ea:bd:f3:5e:c7:37:b8:8b:6e:4e:d1:fe:a4:4b:
0f:cf:68:55:e3:2f:25:1f:f1:18:f9:2b:b2:ff:6e:1b:69:30:
3a:74:f0:dd:76:83:46:b2:21:75:40:5e:03:fe:f4:57:56:57:
eb:e6:a2:f6:18:74:71:a6:c4:97:6b:d1:3f:d3:fe:de:e6:4e:
a9:e5:74:31:b7:bf:06:03:d3:69:13:8f:5a:05:2e:49:d8:93:
7c:ff:43:83:d5:12:1a:68:fa:57:bd:af:d9:6c:c2:e0:fa:d5:
8c:63:53:a9:92:e5:8c:d6:34:14:c1:fb:30:8b:77:b0:7c:ec:
af:cb:e9:b2:36:c0:4e:a8:7d:62:c0:71:02:c7:ec:7b:bb:ff:
82:3f:6c:40:1f:85:74:4f:04:84:d5:df:7e:dc:49:f2:b3:79:
ec:bc:55:e2:ea:78:91:00:47:aa:b4:63:46:ab:f1:eb:22:f3:
31:0f:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:11 2026 by rpki-client