
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: qyRhp3oYfIOjZAlVQOdM9u8wLisLigZZJfeSf9+MV9o=
Subject key identifier: 46:56:04:D9:93:D7:D8:BB:1D:15:6C:4D:5D:D3:E5:51:A9:E8:7B:16
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 019D284D2EB2A5F418B9F20A1FC78EF18EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: ZnqwWMA/ZheNmVDiRJUTxaeihxqkZnnxxLOi8uqLMaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2e:b2:a5:f4:18:b9:f2:0a:1f:c7:8e:f1:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=465604d993d7d8bb1d156c4d5dd3e551a9e87b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:91:f0:69:49:1a:23:1a:13:c0:51:2b:0e:
99:c8:1f:60:a0:e4:4c:7b:5c:82:cd:cd:03:fc:8d:
2d:db:08:b6:3b:73:d3:87:db:42:2f:4b:09:4f:88:
89:ff:43:81:cf:d5:3b:a6:7b:a6:4a:1e:4f:2c:9b:
a8:86:87:22:ff:b0:d8:32:d6:0d:5c:54:6a:9e:bc:
e1:e3:7a:66:45:43:62:96:73:70:e1:ef:cf:39:9a:
45:13:00:0f:83:0f:f2:bf:06:34:8e:36:2b:4a:0b:
23:19:77:d9:50:37:e0:f8:2c:60:74:44:30:d9:69:
55:58:b1:38:93:4f:ff:49:a1:75:9e:0c:d3:c5:59:
a3:82:b1:09:04:0d:17:e8:c3:66:89:38:3d:f6:cd:
02:1e:45:7c:54:d6:e7:3a:c5:39:8d:79:5c:92:af:
bc:9f:5e:7f:30:c2:ba:50:43:41:18:7f:ed:1c:9a:
9f:2a:50:e7:04:fa:da:aa:ec:31:11:db:76:ea:1b:
1b:e7:1f:ea:37:c6:88:c2:fc:53:c7:95:f5:4e:d0:
b4:07:4d:c5:0c:eb:52:df:b7:24:a5:69:33:bd:5f:
af:f4:d8:fc:d1:62:5f:e0:b1:67:89:6e:7d:aa:a1:
99:83:32:92:aa:22:9b:3f:d6:5c:02:e9:d5:2e:16:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:04:D9:93:D7:D8:BB:1D:15:6C:4D:5D:D3:E5:51:A9:E8:7B:16
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:3f:d3:f6:06:ea:ad:10:bd:a0:4a:30:a5:8c:e9:aa:61:
d3:0b:4c:82:50:1e:8f:63:74:e9:bf:7f:a7:b8:a1:c6:2b:7e:
1e:62:18:23:b5:f8:7d:e4:ae:b5:d7:ed:eb:f4:92:76:c0:68:
3c:f8:85:65:c3:21:c7:d8:a0:3f:87:39:3a:bb:01:1e:fc:2c:
a6:18:a5:ed:1d:ee:29:c8:b1:5d:32:9b:4e:87:27:03:d5:32:
62:3e:ea:4d:ad:6d:ae:5d:09:31:89:50:7b:df:70:43:4b:19:
b3:49:21:4a:3b:28:57:c1:3d:47:b1:74:9a:b4:3b:d8:85:6b:
d6:69:0d:ef:86:6c:2d:62:92:be:54:30:0a:fb:e9:cc:ce:fe:
15:9f:87:77:93:8d:04:1d:f3:38:1b:1e:92:d3:6f:da:27:12:
df:cb:84:6d:d8:ae:19:3f:2f:b1:ca:9f:54:7d:85:ec:50:df:
5c:98:0f:f5:4f:d3:18:5b:d6:57:a7:27:d2:aa:22:13:4b:ce:
03:a2:e7:af:e7:c9:90:ee:64:01:68:7a:70:da:11:43:fa:35:
23:ec:61:b6:7b:d7:21:39:4f:30:28:02:3c:77:d5:80:c2:48:
8a:09:2e:06:b2:44:26:20:4d:5f:8b:fe:5e:3e:55:de:1a:55:
48:05:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:15 2026 by rpki-client