Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: d+wDA2RSWU/hWRC3oxkphN1f4HKedw7MT5EI7z2iWa0=
Subject key identifier: 00:C6:4A:E2:18:1D:37:64:45:95:FF:4B:33:7C:71:50:C1:34:B1:23
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 019D265FD373970FA08031E41C96CDB98554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 14FD
Signing time: Wed 25 Mar 2026 19:01:47 +0000
Manifest this update: Wed 25 Mar 2026 19:01:47 +0000
Manifest next update: Thu 26 Mar 2026 19:01:47 +0000
Files and hashes: 1: JG-FpgO91koLXjHnrbLdw0m_DUc.roa (hash: fj1OTuklppVkirqmv0QJOcnEevrxbA10Hf/01NWY+bQ=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: 1oNzg3Fa2JKQu/B3VnqEiD2x6wEp8ZvqCB72l2zI++U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d3:73:97:0f:a0:80:31:e4:1c:96:cd:b9:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Mar 25 19:01:47 2026 GMT
Not After : Mar 26 19:01:47 2026 GMT
Subject: CN=00c64ae2181d37644595ff4b337c7150c134b123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:0f:4a:96:c5:0c:64:15:13:04:e8:74:7a:
84:ba:79:b1:dd:20:eb:66:8a:48:c8:88:0b:e2:26:
e5:b2:b9:ee:51:83:15:2b:ec:0e:48:cf:12:0a:a6:
52:86:67:dd:1d:86:17:ef:88:1c:0f:ca:58:55:d3:
cc:dc:3e:9a:9e:ba:d9:a8:56:2c:11:80:83:19:c1:
cd:56:92:1e:a3:13:f7:9b:63:3e:4b:7e:9d:c6:13:
93:5e:cb:4e:f0:2b:8e:2f:97:51:ff:85:75:d3:5b:
84:f7:87:6f:38:80:25:63:49:b0:b7:c3:70:39:10:
0c:3f:1d:58:1b:0e:2c:37:82:01:89:6d:56:53:49:
1a:d8:a3:96:fb:91:cb:c7:7d:b5:dc:1e:68:d8:bb:
c2:0c:29:a3:8b:44:3c:28:d9:b9:95:a4:f4:67:fb:
6b:88:8f:00:f2:45:11:71:94:60:f0:ea:90:66:b7:
25:68:67:cc:f0:dc:bb:b7:f5:de:ce:e4:85:b9:9e:
eb:6f:6b:61:2c:67:f7:68:58:8a:b2:30:38:35:bb:
6a:b4:34:3d:f6:42:63:ff:fa:d1:c0:51:e9:c0:67:
8c:13:03:2f:91:22:e8:5b:a0:cc:59:96:54:d5:02:
49:07:ec:25:e2:bb:d9:ed:b2:0d:50:20:f7:4f:34:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:4A:E2:18:1D:37:64:45:95:FF:4B:33:7C:71:50:C1:34:B1:23
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:68:03:9b:4f:25:12:30:11:e8:3c:bf:f0:61:ff:6d:0d:
28:53:e5:b1:a3:96:b1:6f:92:66:86:7c:54:f8:b1:73:7a:52:
44:6a:6b:01:cc:a6:7d:91:3c:ee:2b:8c:e0:7d:3c:99:8c:6c:
a5:1e:55:f1:2a:56:9a:c5:fb:67:d7:8f:a9:12:eb:6c:ff:25:
6c:44:2f:61:6f:23:64:b6:a6:bf:00:42:44:7f:b1:87:1b:e9:
47:2f:47:77:f0:91:27:96:8a:21:c3:9d:bc:46:2a:b0:15:f5:
e9:01:61:ba:b7:a1:17:00:a7:d3:f9:df:5f:54:4f:f3:1a:22:
39:7a:82:80:0d:af:a8:09:68:25:58:7e:00:f3:f4:25:fb:58:
af:26:8a:5a:85:d2:36:a7:72:98:15:7e:8b:e0:a4:92:91:bc:
1d:4f:62:56:ee:02:47:25:d8:a7:6f:5d:07:8f:f3:9e:2d:a2:
4b:61:71:e1:bc:c3:bf:aa:3c:7f:93:d3:e2:e0:7c:24:b0:f0:
10:31:b7:fc:a5:d4:8c:70:c4:53:3f:a3:dc:21:d7:f7:a5:8c:
5d:e6:6b:90:e6:2d:57:9f:28:87:a9:c8:7f:94:74:02:14:01:
ba:db:b3:f9:63:bc:65:92:9b:e2:00:ba:ce:68:b2:af:1e:e7:
c1:55:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:59 2026 by rpki-client