Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: V6SHODbCLmQtbQSUXt20K3TpqgbL5GM4unmvmESMRdI=
Subject key identifier: 15:7A:60:FA:85:38:D0:23:28:F4:0F:BB:0C:DF:0B:64:65:DE:96:35
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019D27DFC28EB114695066C3581E74A34838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0809
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: mM0kf3NkM03jtW2iR+aUWaK39PkaxLxTL0UhX9XD794=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c2:8e:b1:14:69:50:66:c3:58:1e:74:a3:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=157a60fa8538d02328f40fbb0cdf0b6465de9635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:31:d1:51:cc:04:4d:12:39:ee:25:68:8b:
93:d4:cc:04:88:4b:b6:13:77:b4:d9:85:2f:79:64:
34:e6:6c:32:17:96:6f:d4:b6:db:3d:8e:b6:dc:ac:
d7:23:0f:87:73:d4:78:cf:c2:b2:0c:4a:53:38:ef:
c5:25:c1:39:2e:5b:1a:82:20:b0:2d:94:f6:12:fe:
f1:2d:0a:1e:66:83:cb:fe:00:ef:74:3d:34:83:d5:
19:90:6e:17:44:f7:fd:ce:98:21:66:09:49:6a:e5:
d0:00:1c:54:ef:70:e2:ef:60:96:4f:3b:c4:85:da:
c6:3c:be:3c:5a:8c:6a:b4:f8:86:2d:98:c6:b8:6d:
e2:33:10:56:df:77:4a:dd:be:30:87:30:c3:ca:d9:
ed:78:56:67:db:9c:e1:2e:9e:4a:30:3b:66:9c:a1:
82:2d:dd:b3:a0:4d:59:b2:c5:7f:9f:00:aa:44:fb:
76:d2:a7:3d:6f:65:a5:98:96:ad:47:76:f5:72:18:
eb:8f:73:dc:68:4e:64:3d:f3:89:86:d6:55:22:db:
eb:e0:eb:20:49:16:48:e8:37:44:0b:b3:82:df:70:
c6:03:89:27:ea:94:63:39:6e:16:f4:f2:b4:aa:f0:
c6:a2:69:a9:3d:c3:80:27:70:d2:7b:0c:a0:6f:e3:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:60:FA:85:38:D0:23:28:F4:0F:BB:0C:DF:0B:64:65:DE:96:35
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:31:d4:ff:81:0e:b1:54:db:57:cf:bf:40:1d:6f:bf:18:
83:95:dc:bf:b9:cc:c0:d3:15:24:c0:66:54:86:fc:f4:bc:22:
45:ea:51:89:bc:8d:03:9d:ef:df:ce:26:84:6b:f8:35:3e:7d:
a7:b3:65:e0:a6:c1:1f:49:1e:8f:03:4e:54:21:6f:aa:75:66:
3b:d4:39:a9:ca:ec:5e:f1:2a:8a:77:86:92:a8:db:15:e2:f6:
ae:60:42:4b:6a:6f:d2:68:22:89:3d:35:e6:24:99:dd:44:6c:
af:49:1e:c0:3f:c6:c4:cb:32:cc:47:b8:ae:3f:8f:97:bd:0e:
d0:dc:75:69:fb:9a:55:80:50:46:04:6e:ed:66:6c:73:3b:14:
36:db:98:a9:b7:a4:ac:d8:a6:08:a1:56:ea:4f:99:38:35:9a:
8b:5e:62:43:6b:94:3b:65:46:7f:8d:91:37:d5:60:10:5a:11:
9f:61:22:fa:27:7f:6c:24:11:1c:25:a3:b7:c2:53:a5:23:54:
7b:d5:b0:94:53:a6:d3:94:b2:a9:b9:db:4d:9a:fa:d1:66:d6:
de:c5:2e:92:0d:19:07:75:dd:2b:fa:f1:43:22:14:c8:7f:99:
3d:7d:f0:96:a6:a6:a1:aa:7c:20:ea:7d:5c:6f:41:3d:cc:57:
22:d6:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:06 2026 by rpki-client