Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: ZOMBCnfbW50ThG4Lr/kRZYNzt+Kr3kAS6hA/MY+gi4Y=
Subject key identifier: 10:E9:B0:FA:D4:73:03:A4:0A:97:8B:18:F4:DA:AB:0A:A6:79:9F:1E
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019D277292D195212C92E9D7177FC4CB1E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0EC4
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: 3oNBPDxqPmEzCAgvOd6HFjME9OM.roa (hash: oEX/gxqcuspBR3wSJHEr/VS6QW0PNYcAWyELJ7EqCc0=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: FLJm3ree2UrS/PwJA6kEwsx8LQlYpf02s/II/B1PEfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:92:d1:95:21:2c:92:e9:d7:17:7f:c4:cb:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=10e9b0fad47303a40a978b18f4daab0aa6799f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:f4:f8:48:b3:3d:3c:c8:61:22:fc:64:a3:
6f:ea:77:9e:7f:af:58:85:56:9b:8f:7e:1d:4f:4f:
44:dd:d0:e3:ec:23:d5:3e:92:25:bc:5f:77:51:03:
75:45:34:7a:89:a9:12:6a:09:bf:b0:f9:29:e1:7c:
59:17:8e:b3:89:5d:a9:1e:4d:6f:98:76:f4:d6:b5:
c2:cc:8b:7d:28:36:2d:8c:cf:50:52:bb:cc:c9:66:
1d:2d:30:7e:f1:30:c0:71:48:7d:38:96:9d:fc:2d:
bb:d0:8b:dc:5e:6a:f7:e0:d7:0a:29:2a:82:f3:c8:
23:5f:0e:b2:83:83:5a:77:1c:d9:a5:d4:89:8d:13:
96:20:36:c7:06:bf:06:3e:51:e7:18:af:35:81:ba:
b7:5c:19:b9:11:fc:ed:90:09:70:96:b5:d6:e5:9f:
6c:2b:63:30:65:ea:a0:73:7f:ec:47:cf:5a:0a:c4:
df:00:fe:83:29:a1:ed:40:b3:2b:f0:7d:f7:43:da:
b9:d8:6f:d9:93:22:d4:2d:33:fc:20:44:c8:84:b2:
79:a4:c9:4e:77:ec:65:4b:7f:fb:50:14:83:e0:a7:
99:ed:60:89:fa:2c:54:63:a3:ca:9f:44:af:12:fe:
1d:c8:f3:a8:c2:e9:28:9d:e1:e7:2d:77:c5:a2:f8:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:B0:FA:D4:73:03:A4:0A:97:8B:18:F4:DA:AB:0A:A6:79:9F:1E
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:39:7d:9d:fc:a5:ce:2c:a9:c1:75:7a:71:a3:ad:9b:3b:
08:b6:27:cc:0c:6f:58:17:e7:a5:2c:98:a9:3b:f8:01:db:1a:
74:96:8d:92:10:d3:22:c3:9e:ef:9a:a9:f9:46:7b:2b:bf:32:
2c:e2:84:18:38:43:10:01:94:8f:eb:6f:00:17:89:14:78:c0:
66:b0:3a:bb:c4:dc:48:b4:0a:4e:3e:e1:b0:2a:4a:4b:13:42:
da:bf:9c:cf:1c:46:c4:4a:44:ed:6f:64:8e:9a:f2:b9:d0:14:
c1:7b:80:85:3e:b0:e1:7e:28:65:fa:52:fe:c2:b7:63:3b:4a:
a4:41:d6:f2:58:a5:7a:09:8f:62:63:b9:7a:0a:a6:93:4f:54:
9a:c0:89:5f:c9:47:49:5d:5d:e0:a4:6e:84:33:41:fc:ac:ad:
7a:61:46:5b:3b:45:a6:81:d2:a7:0f:7b:ca:6e:c6:09:fa:c0:
8f:50:26:77:7f:28:af:aa:0e:d6:9a:d0:88:a2:d8:75:cb:33:
09:53:de:57:28:92:42:4c:b9:54:f8:79:40:63:24:b3:df:6a:
a2:d8:e4:8c:88:e9:10:0b:ee:cc:f4:68:53:60:f5:7f:4f:64:
5d:4a:90:de:55:4d:ba:22:25:86:58:24:ee:c3:5c:1d:1f:32:
84:3e:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:00 2026 by rpki-client