Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: J2rv2L46Kd8+1n7SbJYSZtrLBPIxH5HMaVOnrGQrYLk=
Subject key identifier: 13:89:B3:BE:B8:5D:51:5E:72:51:3C:EF:92:30:D0:31:EB:A1:8E:F0
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 019D2BF30DC63F63FD034E15EEBC6E102A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 21:00:42 +0000
Manifest this update: Thu 26 Mar 2026 21:00:42 +0000
Manifest next update: Fri 27 Mar 2026 21:00:42 +0000
Files and hashes: 1: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: tvaZmJAVwyCmrHOzc5LqK53qNRK6C7m7kg8pkdHizqg=)
2: tQM1b8GfsM4oaMAkjEVJDdjjfU4.roa (hash: jP5wrci2mHQY2sLGCxUGNLtJM8ANIGltDX/7h4YI+3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:0d:c6:3f:63:fd:03:4e:15:ee:bc:6e:10:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Mar 26 21:00:42 2026 GMT
Not After : Mar 27 21:00:42 2026 GMT
Subject: CN=1389b3beb85d515e72513cef9230d031eba18ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:05:44:8e:8d:fc:19:37:db:ea:60:91:cb:
2c:40:39:f9:2d:c7:7b:bb:24:db:19:d2:fe:be:2d:
db:7e:4a:9d:fc:09:8c:20:78:36:7a:2a:89:cb:9f:
5b:bd:f4:57:05:66:cf:92:72:24:6c:9e:43:b9:78:
66:03:a4:ce:fd:b2:63:90:f1:01:2a:39:70:34:10:
8f:f0:33:fc:11:17:21:79:41:6f:f4:a5:4d:ad:fc:
f2:f6:b4:74:d4:26:ef:a9:38:af:d5:b9:7c:ff:e0:
61:59:ff:9a:95:06:32:08:88:ef:73:59:a4:5d:52:
4c:19:2e:d8:21:58:ff:53:e5:19:05:14:05:37:3b:
0e:6d:ba:2b:7b:bc:1e:41:0f:2a:f3:0a:6d:07:09:
30:d6:26:29:3f:e0:99:b4:82:2f:e7:57:eb:4f:c2:
d4:0b:ed:ce:6c:21:ec:14:6f:12:68:bb:20:b5:75:
16:f0:c4:9f:81:0b:92:96:1c:8f:6b:4c:9e:6b:c4:
41:fe:37:9e:d4:17:dd:ae:b1:21:9b:3a:14:6c:05:
ac:62:09:7e:92:a8:76:76:30:1b:c1:cb:bb:87:3e:
6d:51:7a:81:e5:76:0d:00:14:e6:e8:1a:10:f7:5c:
95:7f:dc:58:10:13:a4:3a:b8:90:c0:de:88:f3:eb:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:B3:BE:B8:5D:51:5E:72:51:3C:EF:92:30:D0:31:EB:A1:8E:F0
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:be:9d:76:f3:93:7a:e9:0f:37:41:e1:41:18:4d:8e:ce:
92:d8:7c:dd:d9:36:60:d8:f8:66:8b:b9:8c:cc:54:ad:66:f6:
6a:76:d3:8e:73:29:0d:b6:93:b5:98:20:7e:d7:3e:5e:27:9c:
1f:07:ba:b3:5e:9d:1b:c8:42:37:2b:b6:2e:fa:e6:ac:8c:2d:
2c:bb:f8:e2:09:8c:5f:af:c3:0e:10:68:88:97:fb:50:cd:17:
db:2c:45:97:49:c9:5f:a0:7d:a1:07:1d:f2:26:de:47:5b:d9:
b3:50:59:48:f9:f8:fd:6c:b1:ec:98:e0:39:7b:a2:4b:24:d9:
34:11:26:e2:e9:a2:81:74:b1:d0:be:60:37:c6:f0:2f:9e:28:
4e:86:65:e2:f7:9d:ac:1f:28:1b:c3:a0:fc:36:8f:ae:a4:6c:
85:9f:59:37:56:26:89:c9:a9:11:6a:df:65:99:5e:6c:0c:12:
96:d6:30:42:05:e3:28:9c:75:f4:23:97:1a:55:93:86:94:80:
ad:a8:2e:db:78:1a:13:54:02:2a:af:8a:8a:b8:7a:f1:dc:4d:
97:af:9f:27:91:34:1b:26:de:16:bd:28:95:a2:48:06:dc:1a:
ee:30:c9:7f:d3:b5:b4:4e:59:8e:6b:0e:52:21:bb:1e:42:ec:
e6:d8:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:54 2026 by rpki-client