Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: dpi7k8oI20oVE+7vQibU3m9V1V7NE5Fp7cKx80Fk4qE=
Subject key identifier: E4:72:6E:77:2B:31:BF:4E:0B:6C:5B:0D:FD:DD:35:77:9F:55:65:6E
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019D28167CE3CBA4664C5E16F2B4E0EA1B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: L+KodRLAKw6eDZU3rFTnHl6K/RyrZgDImjMdCw6PFWE=)
2: bpt9BsJOl3owDEYCjUtmuxEN8E0.roa (hash: nUeffKsyk9gHED4nwJFpfEhtvPTx7ZUa82CM8DIOyWQ=)
3: pUq5FgDmcbsOBzOSxvfT-61HYXc.roa (hash: UB81wheS00LuQ/3CNRheeKScZVmaRZ7KVUFOcqWElYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7c:e3:cb:a4:66:4c:5e:16:f2:b4:e0:ea:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=e4726e772b31bf4e0b6c5b0dfddd35779f55656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:4e:28:ec:9e:51:4e:7c:f5:f2:42:90:bf:
19:c6:cc:20:d6:b4:dc:c4:69:1c:64:ba:35:dc:9b:
b3:44:4a:a7:05:59:bf:d2:c8:bd:5f:8a:13:7e:6b:
ac:1a:eb:66:7d:f8:b1:e4:0a:7d:20:4a:4a:49:ee:
25:d4:c3:b7:2b:3c:c5:9f:fd:00:44:06:45:9b:98:
f9:50:65:e1:0b:d5:51:61:59:b7:1b:f8:07:03:c3:
a8:1d:e3:ba:fc:38:d6:72:61:01:76:68:9c:89:53:
62:a3:14:12:48:7e:79:ef:bc:15:ad:35:cd:f9:44:
77:47:8c:5f:21:78:f2:25:d8:25:00:f2:d6:6b:08:
5e:ef:a4:cc:12:3a:f5:09:2c:8b:d6:d0:d9:a7:41:
64:d2:38:5f:51:5e:5a:87:fe:79:56:2a:48:6d:f4:
2c:6c:76:98:fa:6f:2e:b4:84:52:65:e9:76:1e:a3:
8e:99:cf:e6:39:ea:df:a2:50:68:8e:47:b2:8d:16:
97:76:63:75:5f:35:34:63:45:26:86:4d:34:87:84:
5c:3e:06:c8:9a:3d:98:ef:6e:a2:ce:d9:92:77:09:
03:f1:52:cd:21:14:ea:81:1c:81:ff:8a:3a:dd:9a:
71:9d:89:6a:f5:ba:48:2a:6d:85:46:c2:f3:24:d0:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:6E:77:2B:31:BF:4E:0B:6C:5B:0D:FD:DD:35:77:9F:55:65:6E
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6e:5b:fa:18:37:eb:0d:07:0c:6f:e2:d2:4c:05:57:ba:7d:
5a:09:68:3c:d6:93:46:ca:a0:14:bc:66:f5:51:96:11:e7:fb:
1a:9b:e1:ed:33:d6:51:d9:09:35:07:c0:a3:47:f8:50:70:d1:
05:c1:76:18:ee:39:95:0c:52:e3:16:85:bf:80:66:9f:ba:a2:
1e:ff:3f:8b:58:ab:ca:4f:9e:27:ad:a2:98:d1:66:29:23:03:
a6:ee:6d:f1:ea:2a:93:70:ed:38:95:9f:b2:d4:7f:cf:91:40:
84:7b:34:cc:ef:43:51:c4:54:86:11:05:dc:09:1d:5f:83:ff:
7c:e0:3c:58:3f:dc:13:35:b5:a5:88:4f:8d:b7:55:c7:51:44:
cc:f6:41:26:3d:51:26:3c:10:71:24:7f:48:b7:31:b7:6f:fc:
bc:5b:55:90:6c:be:2b:42:66:7c:34:46:f3:97:e6:46:8c:8e:
b1:cb:28:63:10:84:71:67:2b:26:fe:02:73:00:5e:c7:fa:c8:
63:51:44:b6:b7:25:bb:16:60:da:ad:5b:79:38:89:41:95:fa:
83:a8:ef:04:0c:99:04:8d:4d:88:92:1e:d7:15:9e:1b:d4:03:
cc:01:5c:43:e2:2c:69:60:c9:8c:bf:03:5a:a7:7d:c7:ae:9a:
eb:db:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:22 2026 by rpki-client