Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: i4g0cd0n6+67xvmjtvXv/ahU1lGDP0S+VaJ//ilOFso=
Subject key identifier: 04:37:C5:53:10:9F:77:10:2C:C0:E1:3A:46:9D:DA:6D:30:3E:55:F0
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019D299709352B6792B69687064A5652B5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 137A
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: p6gCeYi9PabRT4L1A/U4eeqlcMtbiWWn5x+GVtwnVOM=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:09:35:2b:67:92:b6:96:87:06:4a:56:52:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=0437c553109f77102cc0e13a469dda6d303e55f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:d6:ea:16:d7:aa:9f:15:4f:1b:72:b8:36:
61:2a:ee:79:de:11:a4:47:4c:24:42:02:13:9f:c6:
13:02:f7:5c:c0:99:41:a4:5c:31:2c:ad:96:0b:eb:
c9:f8:2b:48:7a:26:4b:6e:2c:19:96:d2:66:75:93:
96:4f:77:5b:fb:f5:14:0e:b5:fa:7d:9a:66:55:5d:
4c:0d:7a:58:6c:77:c2:1f:54:ed:14:ba:fe:79:62:
73:f7:6a:09:70:5d:56:84:23:d2:e1:53:c2:0e:f1:
4e:42:09:71:f6:30:70:37:c0:f6:83:6a:9b:24:9a:
3a:8a:9c:0c:1c:83:4f:b0:c0:b6:15:2d:47:6b:bb:
63:80:5c:38:cf:e6:e2:f0:ec:81:a0:4c:5c:2b:e9:
54:98:4c:32:38:5a:8f:08:f3:ea:03:b1:65:b2:94:
29:19:f5:b2:7f:44:bd:4f:f4:d8:5c:93:ba:08:83:
0b:73:7d:79:e2:60:5a:83:a8:a5:ad:55:65:a9:d4:
cf:58:61:8d:5a:5d:d4:f8:29:55:8e:bf:05:8e:64:
b6:29:78:f5:e1:7c:70:b4:37:87:4b:13:ef:7f:f0:
aa:b7:06:a2:f1:94:60:e0:13:c0:f8:29:80:42:22:
d0:76:2b:77:3d:34:e5:61:a1:66:a3:39:0f:d1:15:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:C5:53:10:9F:77:10:2C:C0:E1:3A:46:9D:DA:6D:30:3E:55:F0
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:20:e5:3a:90:2a:93:0e:e5:24:82:2f:97:d3:b8:58:ef:
4f:ad:66:af:ae:76:32:1c:ec:25:08:c2:06:cb:88:7c:c2:86:
8c:c4:de:06:ac:cc:87:57:a4:bd:17:26:3c:fd:32:c8:b3:2c:
00:7c:e9:ff:4e:10:a7:04:07:fb:c7:63:e5:73:21:d4:21:dc:
e2:64:08:cd:61:fc:c9:de:14:8b:97:9c:2f:fc:18:f0:f1:d5:
93:52:10:78:e1:73:d9:bc:e2:7f:c8:cb:1a:d3:b7:61:b1:05:
34:53:ae:c6:b9:2c:aa:5a:a9:e9:f2:69:be:84:64:eb:65:9a:
44:71:e5:21:38:1a:30:d0:dc:c4:e9:49:6d:9b:8f:40:e3:ad:
d4:b7:df:af:76:8f:97:5c:f6:b6:aa:54:57:48:81:c7:63:c2:
77:fc:d1:a3:be:e7:45:df:88:30:e4:c3:59:c6:bb:cf:70:60:
ed:14:79:61:4f:f3:d2:50:61:49:1f:98:da:dc:4c:99:3a:fe:
ad:a3:f4:49:d8:f1:30:ef:63:1a:99:9d:c9:8b:0b:4d:4d:c5:
49:7c:72:e0:39:33:0e:d6:86:d5:83:4c:88:c0:02:cc:c1:80:
1a:21:14:97:6e:b8:21:43:5e:8a:f7:08:2c:cf:39:6d:81:2c:
32:03:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:59 2026 by rpki-client