Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: MbMezniQqZ8PpweiXZ6+3H9+pk8/aORx9Gilzkrfmdc=
Subject key identifier: 13:6D:D4:76:8A:64:A4:CF:26:AD:F0:AA:98:16:82:83:A6:8C:42:D3
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 019D25F1E621E637758FA3CAE819D8B993F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 1198
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: GSjgftqq3fsasoRBiwgyoGVynxk.roa (hash: 9bH/WK8qEWYXbBVodpWZWBBCr2Ad6muHm/adFtN+AO0=)
2: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: alE9pnoycv7rX8NzCfwnbwcUJULkZfQS5Oees8qJUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e6:21:e6:37:75:8f:a3:ca:e8:19:d8:b9:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=136dd4768a64a4cf26adf0aa98168283a68c42d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:2d:e5:51:48:a1:8a:dd:3f:18:1a:6a:3c:
47:f3:53:8a:d8:26:4f:9b:a4:7b:aa:bf:d6:41:a3:
4b:f9:cb:2f:b6:35:6f:fa:41:99:36:4a:c5:c2:d4:
c2:5c:a7:8b:b4:85:47:cf:85:50:ad:ac:70:c8:b0:
76:ce:48:93:a5:ff:fc:53:e5:d1:50:78:10:aa:7e:
1d:a7:ec:ae:f0:c4:07:fc:58:50:fd:d4:a6:4b:68:
92:04:e8:a8:3a:93:45:ed:f5:34:f8:44:59:a6:18:
52:b6:46:d4:9e:f9:14:9b:fa:7e:c8:bd:92:d4:06:
ed:52:2b:d2:66:35:73:dc:32:2b:12:75:92:a7:12:
6e:d9:e7:5e:76:24:99:11:cd:11:10:e3:4f:8b:9e:
16:3d:24:17:b4:58:29:01:b9:3d:b5:a3:23:f1:dd:
13:91:64:bd:c2:5f:c4:3b:56:8c:45:03:b8:06:ff:
df:e5:6d:d2:1f:85:30:eb:8e:3e:c8:c2:7c:fd:68:
30:9c:2b:74:97:a9:8f:bf:6f:31:b0:10:9c:18:4d:
dc:15:53:b6:c9:c3:90:2e:eb:38:fe:45:84:19:10:
f4:ba:ee:0f:db:5f:16:60:19:63:9a:16:f2:92:3f:
1f:f3:b5:a3:33:74:2a:0e:15:11:52:31:be:04:71:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:D4:76:8A:64:A4:CF:26:AD:F0:AA:98:16:82:83:A6:8C:42:D3
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:25:05:71:22:2c:ca:8f:8f:e5:55:d1:b9:ca:61:17:27:
ca:71:0c:02:7b:e9:73:47:4d:7e:3d:b2:75:4e:ab:12:a4:d1:
80:ca:b2:29:3a:e4:0e:d2:89:57:ed:5d:29:64:24:1f:14:60:
e4:ff:30:5d:ca:d0:89:9b:3e:47:e7:73:51:47:b1:ad:0a:6c:
d5:ba:3d:0d:d8:56:13:a0:df:9d:c1:24:cb:3f:e4:40:ce:ce:
00:58:0b:36:71:43:2e:e6:41:ea:42:ee:f3:c5:14:74:e3:c1:
a8:0e:4c:cb:e3:a9:08:d5:96:41:fd:6b:f5:65:fb:3e:43:f4:
87:21:44:62:73:89:0a:4b:11:3f:a9:d5:9e:a3:17:0b:9a:b6:
a3:35:e7:8d:b5:63:0d:60:4d:3c:3d:58:0d:ee:4b:75:cd:19:
35:9d:1b:59:7e:cd:0b:ec:f2:fd:df:f4:ce:e4:ee:dc:10:df:
3e:ab:d7:bb:6c:0d:29:ea:90:2d:cb:2d:21:b8:dc:86:8f:e9:
84:78:ef:d3:57:7a:47:eb:bd:ec:7d:48:bf:48:e2:6f:0c:d1:
56:24:bc:38:8d:5f:67:1c:2b:2a:d3:fb:f6:85:20:4f:a2:d3:
d0:cd:ba:5c:71:23:8d:76:db:ff:7f:f6:96:50:ce:ab:37:63:
0e:5f:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:11 2026 by rpki-client