Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: csvTh2ifKLf/5/Tpqrwp53LddFNEia/PLBmLWmwNPh4=
Subject key identifier: A8:FE:75:CC:BF:77:15:3B:3F:90:15:10:77:02:1F:FD:A2:40:FD:CA
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 019D26287E50FCB8AC6C53BB454AEC32BA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 1B
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: ktDHpAKJUPqku+G5i7fq1iF6ppZi9RLkFdyLg/WW77I=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7e:50:fc:b8:ac:6c:53:bb:45:4a:ec:32:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=a8fe75ccbf77153b3f90151077021ffda240fdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:36:d7:27:b4:18:6a:04:fb:e7:0c:03:60:
e5:aa:04:91:d6:89:82:9a:b2:2d:74:03:26:90:c9:
f5:53:cc:1d:ff:3a:c5:ab:06:55:fb:83:36:b8:15:
76:87:32:9c:fa:0f:02:73:32:ec:74:da:48:57:34:
e5:89:54:8c:cf:9f:36:45:87:05:c7:26:ae:77:e1:
88:10:d2:3d:7b:cf:6c:56:c7:7e:1b:f8:be:4a:a3:
fc:6b:77:4a:3c:08:73:f9:c5:7b:06:d1:a6:90:84:
32:49:17:df:14:04:8b:be:0e:3f:4a:d8:e6:21:a3:
8a:26:a1:69:d7:7b:e6:a6:8a:20:d2:90:b2:a6:95:
ed:bb:7e:70:a7:f5:ff:59:a8:92:e4:4d:ea:7b:40:
8f:f7:42:65:fa:c8:0d:4c:15:bd:da:78:55:f8:20:
1f:3f:ae:15:99:07:a7:9d:70:8c:42:c9:9c:6e:e0:
0b:49:f7:01:58:24:bc:f2:c2:4d:9e:73:bf:c7:66:
06:f8:1f:8b:35:54:1e:3c:94:26:ad:7d:74:f4:c9:
24:b9:f3:a0:e5:e4:7c:71:b1:44:50:71:25:b5:dc:
89:60:93:98:7e:d8:b6:98:a4:19:2e:1e:17:74:76:
04:f4:6d:a7:9f:45:9f:20:84:eb:c0:74:c2:b7:3b:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:75:CC:BF:77:15:3B:3F:90:15:10:77:02:1F:FD:A2:40:FD:CA
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:5d:98:18:47:74:2b:62:79:7b:b2:5f:40:69:6e:22:6c:
9a:2b:d4:28:e5:10:b0:b4:84:f4:d8:31:a6:c9:19:dc:a7:08:
db:43:e9:96:60:98:12:5d:c5:ab:76:e7:1d:81:34:ef:ba:9b:
f5:15:05:47:48:61:75:5c:f5:ab:93:20:8c:29:48:97:e2:9d:
4b:1a:70:54:25:13:dc:79:70:df:29:6d:d3:e0:01:43:b8:9a:
d1:7e:e7:6d:c1:1b:02:b6:b9:6f:8f:2d:36:cf:67:2b:d6:55:
d3:f3:d3:7f:4b:43:52:fc:29:a7:3d:48:dc:b0:63:bc:f4:7c:
25:6f:a5:0e:db:47:d7:7f:68:8b:60:f6:ca:fd:3b:85:1c:f2:
64:8a:38:e8:62:c5:cc:80:27:1d:2d:24:0b:89:2e:c8:2a:b6:
0e:bc:3f:18:65:59:62:c5:47:d3:58:01:22:b4:ad:d6:83:d8:
6f:3a:cf:43:c1:b0:e1:c5:a8:4c:7c:25:13:8c:e1:28:cb:c8:
83:bd:db:12:49:c0:45:f7:01:82:a6:0a:43:66:23:01:fb:4a:
0f:91:1f:25:da:83:e9:36:90:8f:ac:1f:e0:af:23:bf:02:4e:
72:3a:13:71:ab:43:42:e2:2a:8f:18:75:6e:35:95:45:e9:55:
af:68:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:38 2026 by rpki-client