Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: LrYUQXIFoe1fYw6czbgBvXfV8+OL0xUIZKlkJHvx0dw=
Subject key identifier: 03:C3:94:6E:65:8E:70:8C:8B:99:A3:83:EB:10:E8:D2:66:62:8C:1D
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019D2929648FFF98D2CB5C078DCE9BB09FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (hash: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=)
2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: KJM3KJemFB5VPp7452drad2QJgSTRitqXxnLHcT6C64=)
3: zmOplfT1YKhLKnx8WielhvBrOFw.roa (hash: eaJL0aLY76J5n+3Hq2EQSn+31eGw4xT4GWelS0Nf5Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:64:8f:ff:98:d2:cb:5c:07:8d:ce:9b:b0:9f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=03c3946e658e708c8b99a383eb10e8d266628c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:fe:a4:8c:a2:97:4e:c7:d5:95:f7:12:7f:
9b:f7:2e:15:f7:f4:42:77:44:23:cb:73:40:7c:2f:
98:dc:09:d0:83:07:38:7a:de:78:2e:ea:99:e9:04:
22:07:cc:21:22:49:ff:fd:fb:83:d0:33:62:71:0b:
dc:50:89:ca:15:0b:15:d4:0c:d4:13:44:66:38:37:
29:06:02:d4:07:12:e9:3d:9b:e1:c3:47:95:c6:5a:
f6:eb:7c:fb:6c:57:63:ea:b2:af:3f:01:0a:30:a1:
6a:d6:5e:8b:d5:0d:c5:d4:a7:12:8a:30:d4:bd:e7:
1e:f8:0b:2b:00:e1:90:d2:ab:bd:e7:ac:a4:9c:f7:
7f:f3:83:69:7f:5e:cf:35:e3:63:25:31:6a:45:05:
ce:03:9c:18:c3:d0:ab:f3:ec:3b:33:30:3e:b7:75:
3e:84:8e:b8:f6:43:5f:4b:01:58:51:9d:aa:01:fb:
85:3a:f1:f9:89:96:65:cf:8c:7a:d3:82:52:36:08:
c2:42:9a:73:81:fe:cb:26:1e:56:0b:7f:da:1c:73:
a9:a3:42:c7:56:94:4b:e4:a2:66:2b:30:57:ca:70:
7d:2d:60:9a:70:e8:e4:41:46:39:ed:cd:34:69:79:
96:86:b8:d8:04:ba:70:89:b8:64:a2:ef:1a:e3:1d:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:94:6E:65:8E:70:8C:8B:99:A3:83:EB:10:E8:D2:66:62:8C:1D
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:39:3d:75:9a:8c:a2:db:41:71:e2:0b:05:fb:98:c8:4b:
5b:17:8d:ff:e5:0c:a3:9a:99:d3:95:e2:91:39:f2:41:ea:bd:
8f:f8:82:22:98:a3:cc:e9:b0:8a:0a:53:9f:80:ca:91:3c:49:
4e:56:82:76:2e:f3:87:96:88:98:7d:e1:83:cd:cb:6b:0d:d1:
85:ca:c7:00:7b:be:8f:f6:1f:d9:6b:cf:8b:6f:08:1c:c6:29:
88:93:55:02:57:94:f3:dd:2e:6d:51:3c:79:26:7b:ac:79:e0:
01:e2:91:9e:97:e5:5b:aa:bf:d8:52:b7:d9:6a:da:1f:27:c4:
f1:b8:b6:f9:f8:46:cd:f9:68:27:5a:40:08:71:65:90:aa:f8:
0e:1c:dd:4e:a0:e5:bd:1a:38:38:8b:46:76:c1:ef:51:9b:52:
c4:4c:fa:aa:fa:95:4a:80:3d:4c:62:98:b4:40:5c:e1:80:9a:
8d:eb:18:7c:60:ec:8f:d2:c2:a9:83:f0:cb:82:ca:e0:30:f9:
61:36:e0:50:16:87:78:71:95:22:e3:1f:72:cf:45:98:d5:e0:
c3:a5:32:16:ba:c1:a2:75:55:8d:f2:2f:9d:e4:09:c2:90:17:
87:ea:f5:7c:6c:6a:2e:ce:3e:09:7d:87:93:d3:d8:a8:6c:34:
19:2e:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:33 2026 by rpki-client