Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: lB85eCKic4eUG2Yk+5mBB89TueQHL1KT2C5e6bo4ZEU=
Subject key identifier: 43:5E:C9:0B:34:05:78:10:49:91:CC:57:38:50:20:A7:14:97:DD:D6
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019D26960D9EDCF6C6721E0D7A1D6777E9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 041C
Signing time: Wed 25 Mar 2026 20:01:01 +0000
Manifest this update: Wed 25 Mar 2026 20:01:01 +0000
Manifest next update: Thu 26 Mar 2026 20:01:01 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: V9aWQ6WlWrlM/8gAdNdeUTdEe018ecclyuOb8JO7P98=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0d:9e:dc:f6:c6:72:1e:0d:7a:1d:67:77:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Mar 25 20:01:01 2026 GMT
Not After : Mar 26 20:01:01 2026 GMT
Subject: CN=435ec90b340578104991cc57385020a71497ddd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:66:13:98:e6:8b:6a:be:ad:ac:53:39:d4:
12:9f:78:95:6a:91:3b:5a:73:ac:64:fa:7c:37:c9:
06:d6:56:9e:ba:77:bf:9c:8d:8f:ae:5c:cf:cf:b2:
5a:22:9b:69:65:22:54:e1:e6:9f:c2:65:4e:4b:e5:
e9:9d:af:b3:b7:02:88:e1:d5:b0:56:7b:cf:4c:4f:
5e:09:07:35:b6:9a:16:34:0b:98:21:38:08:01:25:
97:dc:e9:4d:03:cd:6d:0e:32:0f:ad:2e:e0:af:c1:
df:dc:10:d7:e6:a7:b3:41:cf:7c:90:2f:60:a7:c5:
a9:bf:07:90:a1:58:23:de:ba:7c:eb:c3:97:00:8c:
07:e2:8d:b7:42:c0:09:45:8b:03:08:3b:6f:2f:28:
17:4d:aa:ec:0d:f2:ff:d1:3e:4d:8f:f8:d8:3e:ec:
84:c5:6d:ac:98:c5:7c:44:18:65:ed:6d:61:72:c2:
61:40:93:19:bf:9e:73:32:8b:b7:9c:17:e1:42:06:
0c:4c:b4:bd:c3:14:4e:6e:1a:93:77:07:83:6b:57:
9e:ad:02:1f:f9:80:b4:eb:f2:72:82:61:84:3b:67:
10:de:a3:c5:69:bf:f1:9e:b9:02:65:be:55:c8:af:
47:ed:f4:d0:50:a3:9a:6e:58:a3:1e:75:0e:97:0b:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:C9:0B:34:05:78:10:49:91:CC:57:38:50:20:A7:14:97:DD:D6
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:c6:46:a8:10:eb:b6:a8:2b:a9:6b:80:f4:6a:61:17:e1:
13:84:63:6a:56:64:fc:71:67:07:4a:46:87:38:e9:ed:05:e6:
6c:c2:77:24:7c:ec:c7:b8:88:48:9b:ae:2a:ec:79:71:e2:33:
47:f0:df:f1:b6:9d:f3:3a:71:ed:e6:b4:16:ab:b2:0f:0f:3a:
45:e5:ce:9e:7c:72:4b:b3:68:fe:f3:1d:a9:56:42:28:0c:b5:
09:d2:62:1a:06:83:a7:99:88:90:60:e0:6b:6e:a3:fb:7e:bc:
c3:28:2e:a9:83:6d:db:f7:9d:fa:2e:cf:af:fb:3b:78:58:fd:
f8:f3:ce:00:1f:65:c7:96:8f:13:eb:36:e1:70:31:a1:a6:99:
0f:f9:88:fb:89:88:5d:07:48:9f:53:96:79:73:49:d9:26:0d:
e5:fb:24:8e:28:f6:52:f7:03:4e:0b:64:33:96:e0:fc:35:c6:
94:6e:62:f1:02:e5:92:63:57:43:cd:ba:6c:20:db:7a:89:08:
d7:e1:1b:bd:28:c0:9f:f2:dc:0f:20:fe:c4:27:32:d7:59:ef:
fd:9b:de:d1:0e:d4:cd:3f:16:cd:d7:5c:3b:89:e6:99:ad:d5:
fc:80:31:9d:e0:c3:73:41:7c:97:71:58:9f:3c:81:94:48:ea:
e2:db:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:42 2026 by rpki-client