Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: xw4EUo3fHLWC2wx/CMztXUJxOJ1WiZZrlKtmLIdj/fY=
Subject key identifier: 8E:43:73:87:AE:8F:AE:A0:21:DB:1B:6D:A9:21:FB:70:31:34:41:E3
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 019D292949E23230CF60CAA5EF0C7B432FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0E9C
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: 6GyP3SIkayEEjoDnzMpLq48YQU/k2GB4WM3jFyZKn9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:49:e2:32:30:cf:60:ca:a5:ef:0c:7b:43:2f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=8e437387ae8faea021db1b6da921fb70313441e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:fa:6f:25:cc:8b:fc:01:c8:a6:d9:8b:e6:
a0:ce:dd:ba:38:f4:e8:ec:f2:89:0e:39:c3:70:01:
a2:30:b6:93:93:1e:af:8c:b5:9a:c9:11:8a:37:bb:
f9:a2:d1:0c:17:d8:98:81:44:c3:ca:de:c0:15:df:
5e:45:96:a1:8d:33:0c:3b:21:ef:de:ae:ce:15:d7:
7a:2b:f3:20:e4:b7:28:fa:a6:f8:13:ac:37:2f:04:
d1:46:a1:0d:1e:03:44:2d:50:42:ce:4e:f8:a8:af:
25:df:39:0e:cb:2d:fc:6d:b1:b5:07:05:8c:92:d9:
71:4f:94:c6:3d:44:3b:65:22:61:cd:4b:f8:4f:07:
34:7f:6f:02:c5:df:51:0c:cb:b3:bf:b4:c7:03:3d:
66:ed:c0:e7:3d:8f:21:d2:a8:f6:f2:3c:1c:c6:b2:
5d:ea:f8:20:7f:de:da:0d:96:c8:24:02:56:1a:22:
2d:bf:ed:1c:65:56:c7:21:31:96:a6:fc:eb:57:02:
9b:4e:5e:3c:66:15:d2:ce:ea:d7:62:bd:26:2c:ba:
00:c2:1b:b0:f3:e8:fd:ab:8a:7a:51:d6:1f:1e:d9:
54:8a:fb:d1:bb:d2:ae:6b:73:1f:d0:39:63:f6:07:
1a:4c:5d:01:de:fa:56:15:1f:e1:57:c5:8c:74:67:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:73:87:AE:8F:AE:A0:21:DB:1B:6D:A9:21:FB:70:31:34:41:E3
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:61:9d:ae:bb:f2:fd:ea:46:46:24:dd:ee:42:52:41:2c:
18:12:21:d0:dd:80:53:df:74:09:45:40:8a:ee:59:b7:c2:4e:
16:61:6a:8f:40:e9:e4:57:a9:a6:2b:b7:05:c9:7b:81:85:82:
52:d5:19:50:50:da:c4:22:1d:1d:e6:51:97:43:d6:07:f1:c4:
ee:e9:d7:ed:b7:46:5c:b5:0b:f9:6a:cd:2e:ac:dc:bd:72:d1:
76:10:e5:5d:eb:62:45:c5:6e:b4:cc:cf:f6:7f:7c:d8:6b:05:
b4:4c:50:28:08:bb:5f:05:41:02:5a:46:4d:92:bd:fb:00:f5:
78:7e:62:54:47:e6:99:8b:b3:af:a6:9b:8b:b1:09:49:98:6e:
32:b1:f4:55:c5:ce:00:18:27:cf:5f:fb:44:6b:5b:c7:eb:f2:
40:be:c0:63:dd:be:fe:60:21:b4:34:09:f9:91:0e:e5:ae:25:
1b:08:16:54:e9:1a:15:55:13:9a:d7:4e:74:4b:18:0b:2b:00:
a5:8a:34:b0:be:ba:ae:5c:09:aa:49:17:05:0d:90:6d:6a:db:
94:4f:69:f4:20:fe:9a:13:32:16:74:d9:49:b9:08:30:7f:e5:
fd:87:5f:22:02:f8:fe:88:44:3a:1d:6a:05:c8:f3:be:1f:b6:
a0:59:4e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:09 2026 by rpki-client