Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: 3WdwvZ77Kdgc71En9Avszj96r/oA8cLZdH1eNsfTnsU=
Subject key identifier: 03:C0:4B:69:4D:29:CA:20:E5:79:91:6E:43:08:DB:D9:0B:A6:68:C5
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019D2703F5D9135A35F966E735FD50004DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0451
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: ZmZq0f4uAg24Q6xXwOFyfxPN9jdomHduXct1WeBMJr8=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f5:d9:13:5a:35:f9:66:e7:35:fd:50:00:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=03c04b694d29ca20e579916e4308dbd90ba668c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:39:3d:db:3c:36:b2:6b:81:ff:0f:84:6c:
60:cd:f6:d0:cd:fd:e8:46:91:e7:26:f2:12:9b:43:
77:f5:f6:2d:40:ab:32:a2:13:af:01:e6:a3:e5:69:
e0:37:68:0f:06:32:3a:18:99:ec:30:4c:45:47:80:
16:a4:a9:a0:7b:0d:56:12:29:a0:41:d1:89:46:b9:
b3:98:72:e3:4a:fe:c1:3c:f8:59:51:a3:a3:e5:06:
51:e9:7b:67:94:b0:b4:60:6e:df:3a:61:c9:73:be:
bf:36:b5:e6:7d:c7:ef:b9:70:b3:f0:16:07:6b:01:
de:09:d2:d8:15:eb:dc:cd:d1:b8:f3:6c:35:e5:ad:
c9:4e:54:d2:a4:64:80:66:2c:e6:92:1a:28:4c:29:
50:be:97:4e:a6:9d:3c:1c:34:a6:31:2d:ac:25:a7:
08:5d:d6:4c:3b:f6:e0:db:9f:55:36:58:94:7d:16:
f9:78:06:fa:cb:10:73:f2:88:95:51:50:6c:8d:1c:
6d:50:3e:9c:0a:6c:fc:9e:ab:51:fe:36:9d:99:26:
00:52:8a:30:2d:b8:f2:e0:21:f9:63:94:33:a2:40:
10:cc:44:bd:b3:ea:ae:1d:71:14:34:53:5b:26:44:
9b:c8:ee:f8:b8:7d:e3:1c:ce:6a:9a:96:55:bc:07:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:4B:69:4D:29:CA:20:E5:79:91:6E:43:08:DB:D9:0B:A6:68:C5
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:af:f1:e7:1d:b3:20:62:10:2f:77:cf:96:84:a5:ae:bc:
c2:89:ee:6f:9b:84:2b:29:84:bd:06:8b:78:10:46:2d:d2:9c:
58:8e:96:4f:29:f0:25:87:cb:83:7d:c6:1c:b0:97:16:2b:76:
b1:c7:af:20:eb:fa:ac:5f:61:d9:48:77:7c:12:91:0b:28:03:
0d:2a:08:9a:73:ff:36:7e:eb:0e:dc:7d:28:97:dc:89:06:fe:
5f:f2:d4:29:35:b7:ec:40:63:8b:7c:58:ec:9c:60:27:aa:7d:
14:2f:67:4b:ff:dc:f9:5c:73:41:a9:c0:9b:b2:9f:ad:47:56:
a2:00:75:fd:2e:54:9b:d4:95:e4:48:08:02:90:ac:85:f9:b5:
17:6f:1b:f4:5a:12:13:6a:c1:80:4a:48:93:b8:58:29:32:50:
01:1e:21:21:85:ee:52:93:68:f4:9e:08:d3:4d:71:cc:5f:3c:
2b:4c:c9:00:bb:d9:99:b8:77:6f:be:a3:f0:8c:8f:df:5e:64:
ca:96:47:83:25:21:76:05:10:72:1d:f2:3c:bd:e7:b0:de:bd:
2a:ae:8f:81:87:16:12:4e:f7:b7:6a:0e:cc:9c:d2:3d:e5:71:
2b:aa:b0:96:84:c9:78:69:aa:4b:87:8c:c6:48:ce:83:42:db:
10:dc:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:08 2026 by rpki-client