Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: SKMrbINw2h8Xkysszk4DpPftDmmnhJ7RBGqxjWo08tE=
Subject key identifier: 0B:A7:BE:98:BC:28:C3:F3:09:11:66:27:88:A9:D5:59:E9:FF:83:54
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019D29979008581FAE550AA2F46433E49D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 067E
Signing time: Thu 26 Mar 2026 10:01:31 +0000
Manifest this update: Thu 26 Mar 2026 10:01:31 +0000
Manifest next update: Fri 27 Mar 2026 10:01:31 +0000
Files and hashes: 1: KMzQyZn0sL4K5ZP9K9I0Og-xt_U.roa (hash: Gf/LGVEeT1adLQAQqGIqK3h3EJC7/QXPQ3sFnCSBko8=)
2: Ukx2pX6eNsn9qNUR2nCL2LPZvjA.roa (hash: au3fqQ6RcZ2zMdL3gn35FM2inTn32yGF3JxGQGNFq+U=)
3: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: 2x5t38j7hf02Abz0bgyWJXLgd8Qxgf8q3/r5b+GS6O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:90:08:58:1f:ae:55:0a:a2:f4:64:33:e4:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Mar 26 10:01:31 2026 GMT
Not After : Mar 27 10:01:31 2026 GMT
Subject: CN=0ba7be98bc28c3f30911662788a9d559e9ff8354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:6c:93:5b:2e:8b:cf:c4:42:06:52:ef:fb:
b9:4a:a9:4e:b7:d4:c8:0a:60:4d:95:86:bc:dd:d6:
42:16:f3:dc:a8:e5:78:eb:eb:63:2a:3a:e6:43:26:
c7:c3:28:dd:49:81:26:0b:b1:07:1c:98:b8:47:d0:
ca:2e:fc:ce:c6:6b:d5:cb:fc:fb:69:0a:23:41:55:
a4:02:5b:97:19:8d:a3:1d:e7:7d:b6:e7:fa:0f:b4:
1e:86:30:65:8e:d5:70:1e:a7:d8:c5:84:33:fd:6e:
ab:19:ae:3e:00:48:27:cc:a7:08:df:b2:87:f8:bb:
18:33:3b:a3:18:ca:bd:bf:74:34:34:ca:25:b8:b7:
01:cc:83:51:10:f2:82:34:a3:87:c9:fa:f6:59:81:
cf:9b:47:c5:34:bf:bc:1f:29:bb:7e:dd:b0:13:80:
81:5a:68:74:b5:d9:92:bc:7f:25:6e:28:f0:72:3c:
9f:6d:6b:2d:b1:48:e3:5c:49:72:3c:53:6a:9c:6f:
91:33:1c:de:4d:0f:54:cb:c0:da:f7:ad:3b:4b:46:
b2:c3:98:b0:37:94:69:39:47:d2:16:ac:ff:ff:b9:
db:f2:e2:82:0f:d2:dc:cc:51:59:94:60:f4:2d:80:
4a:41:b5:88:62:1e:12:f0:00:80:d4:6b:4e:16:2a:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:BE:98:BC:28:C3:F3:09:11:66:27:88:A9:D5:59:E9:FF:83:54
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:01:69:43:4b:88:61:1e:99:a5:f5:94:1f:5c:e3:2b:17:
0a:9f:52:1a:50:02:b4:2a:8c:3b:6b:eb:0f:29:08:59:c1:b1:
98:f1:3e:6a:74:1e:fd:bd:75:d4:77:79:f4:e3:19:96:f9:11:
50:aa:83:05:d8:a4:31:b7:e8:64:b8:bb:12:69:fd:05:a8:ad:
44:03:a7:50:1c:51:b3:70:3a:b2:77:c6:b5:09:f0:b4:23:42:
09:6a:15:5d:6b:25:e3:c8:34:c0:5f:3f:21:a5:d6:fb:80:95:
ac:81:b9:60:81:6d:78:b1:f3:56:3a:aa:91:38:c5:e3:cd:af:
3f:85:59:cf:e7:0e:4d:13:a8:e7:5a:27:31:04:87:6d:92:f7:
a3:2a:cc:ea:08:fc:40:de:54:ac:d4:db:ed:6d:98:cd:a4:ba:
eb:44:14:1e:2d:01:10:31:b9:9a:b4:56:5e:5f:c2:66:10:a2:
11:f2:64:66:8b:e6:0a:59:7d:33:99:f9:ad:5a:8b:60:05:8d:
7e:5a:04:26:58:2e:3b:63:09:91:9e:56:31:fa:9d:a0:84:b5:
e6:bf:c8:8d:dc:a5:4b:62:cd:d8:c6:5e:f4:4f:9b:ed:52:78:
86:a8:22:8d:aa:ab:c2:02:47:56:22:e2:27:0e:18:a9:31:89:
40:44:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:04 2026 by rpki-client