Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: XY7BG62Q/vZZT+Eprqp8bHnPLg1s7JxvSS2fgNR4vKg=
Subject key identifier: 8E:2F:3B:10:E4:73:CC:46:FF:F6:6F:D9:A9:1A:FF:83:B3:01:78:7E
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019D2AE04721714E06FF86F32BB0CE0867DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 16:00:34 +0000
Manifest this update: Thu 26 Mar 2026 16:00:34 +0000
Manifest next update: Fri 27 Mar 2026 16:00:34 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: I6Q7cAxI55IfYci/SgwC1fgtItaksTJ1dPzFflX0AHI=)
2: murlFmYx_3jII0U53z-9rIh7SG8.roa (hash: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:47:21:71:4e:06:ff:86:f3:2b:b0:ce:08:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Mar 26 16:00:34 2026 GMT
Not After : Mar 27 16:00:34 2026 GMT
Subject: CN=8e2f3b10e473cc46fff66fd9a91aff83b301787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:d7:73:97:35:88:11:a6:43:31:29:2c:3c:
25:db:4e:9e:19:69:13:27:6b:7f:4e:fd:6a:c5:8f:
a8:16:56:81:b5:d0:8e:ee:d6:fb:92:88:00:11:96:
cc:5a:19:45:e8:ee:6c:a6:3a:fe:ef:2d:90:4a:55:
a6:3e:d9:ec:a3:1f:dd:83:10:b6:60:d8:61:2b:c6:
2d:52:af:c5:97:59:8d:93:b9:1a:dc:ff:27:63:ee:
dd:32:bd:e5:ca:a2:41:6d:3a:58:42:1e:02:37:6e:
03:61:1d:44:98:c8:eb:bd:dd:78:ef:aa:23:1b:3b:
2f:5e:2f:ff:41:79:22:8a:1d:31:37:7a:9a:cb:b1:
c8:17:eb:e0:d6:d4:83:5e:df:71:9c:6c:63:7e:e7:
66:16:52:19:c0:70:78:f0:1f:c4:88:6f:b0:67:e3:
f6:32:31:01:65:48:b5:e7:63:84:07:5d:bf:8a:43:
91:60:a3:b1:14:ba:ab:6d:ab:b3:34:fe:98:eb:48:
b0:62:4a:04:17:5d:38:41:eb:3c:99:d3:09:aa:82:
7c:54:ce:ce:56:88:60:28:f6:dc:55:db:28:45:d4:
59:6d:95:ac:42:19:62:a3:77:b5:c5:b8:ca:d4:c2:
95:67:ff:49:da:4a:7d:f5:ba:2d:89:5b:16:4c:91:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:3B:10:E4:73:CC:46:FF:F6:6F:D9:A9:1A:FF:83:B3:01:78:7E
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:57:cc:ad:eb:a2:ac:1b:67:5e:e8:f6:9a:d6:0d:9f:fc:d7:
2d:52:28:b1:3b:89:66:df:5a:55:aa:44:89:9d:d2:62:50:4d:
ed:80:13:99:b0:03:e5:dd:7c:db:9e:bc:d2:5d:e5:ea:0f:cf:
56:fc:5b:1b:af:12:fd:ac:1c:a5:90:0f:56:81:7a:f4:7b:b7:
4a:b5:03:d1:27:e4:bc:3b:c6:32:19:4c:e8:50:a2:b5:95:24:
96:29:9e:33:a0:1b:ed:85:f3:55:44:5b:55:29:74:22:cf:50:
82:7d:0a:db:bd:95:70:03:c1:36:16:2d:62:67:1a:45:da:18:
c2:b7:7f:59:7e:bf:ec:a4:11:6a:57:9d:06:3d:0f:8c:df:62:
35:6a:4e:7d:7e:df:32:1b:42:24:08:4a:1f:59:14:8f:6c:d8:
a7:28:a3:58:4f:49:2d:4f:cc:b6:43:37:8c:0e:18:f7:dd:f8:
4b:7e:b8:17:38:14:8a:42:64:48:8f:60:77:5a:7f:2e:36:13:
21:75:88:0e:1a:00:1b:f1:d9:5d:89:68:1c:e0:19:45:ee:ad:
d7:04:c8:95:10:17:4a:cd:ce:3f:40:74:9c:99:67:04:ba:79:
5a:28:c1:b9:c5:9c:2a:41:5c:dd:71:55:1b:99:89:b9:dc:e9:
7d:67:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:04 2026 by rpki-client