Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: Bl8ZrikIB60pCH4bl5Pfab5L8oqDMrYlXnaf5rw/Wcg=
Subject key identifier: 44:7C:BE:4C:3B:53:1E:A5:8F:30:03:4B:45:C6:C2:02:97:8E:01:8A
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 019D2AE056C4F72EB2B93D895199E8FC4FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 057E
Signing time: Thu 26 Mar 2026 16:00:38 +0000
Manifest this update: Thu 26 Mar 2026 16:00:38 +0000
Manifest next update: Fri 27 Mar 2026 16:00:38 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: JQT5VDumjMinld87SEUmVSldC3Lhq3uIfvc5y5bai3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:56:c4:f7:2e:b2:b9:3d:89:51:99:e8:fc:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Mar 26 16:00:38 2026 GMT
Not After : Mar 27 16:00:38 2026 GMT
Subject: CN=447cbe4c3b531ea58f30034b45c6c202978e018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:91:61:c0:82:6e:bc:8e:77:7b:ed:93:be:
d0:0f:5e:ae:ba:01:38:d2:1e:68:e6:c9:5b:75:8f:
bf:cc:85:52:02:a2:63:14:b0:90:6e:07:ab:da:54:
b1:54:a8:ea:06:da:a2:c4:80:16:66:70:30:25:32:
52:88:42:6e:2b:d1:2c:78:0c:52:a1:ff:2d:4c:71:
ad:19:7f:30:92:b9:43:f1:90:3c:dc:7d:fb:0a:81:
d6:ac:b9:0d:1f:4c:4d:62:9d:a6:b2:9b:60:8c:c4:
75:b2:b7:b5:ee:52:4c:bf:3f:f6:8f:08:21:5f:98:
a6:f3:a6:dd:9a:b9:64:b2:2a:9f:73:50:4a:12:ec:
d8:b7:a0:b8:de:12:73:77:fb:0d:59:ac:84:a8:4c:
34:e3:df:fc:8a:2b:cd:4f:4a:46:0c:6e:2d:e8:1f:
cd:1b:50:f1:38:33:f9:9e:d0:c6:bd:89:43:18:09:
5d:d1:65:54:ff:be:a2:41:f0:3c:8e:b1:69:a2:cf:
2d:4c:b4:0e:61:6b:50:91:2f:59:de:fa:a3:aa:85:
37:32:94:c2:4f:03:dc:63:d7:0c:9d:75:5a:16:d6:
7d:34:17:4c:95:50:98:92:6b:7f:66:22:9a:2d:02:
cf:7d:ac:21:18:4a:1e:76:46:c4:f3:30:bc:9b:f3:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:BE:4C:3B:53:1E:A5:8F:30:03:4B:45:C6:C2:02:97:8E:01:8A
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:af:c1:93:e4:30:40:24:a5:e7:9b:73:f3:3b:4d:e7:53:c5:
31:d5:12:bb:13:63:a0:fe:3f:ce:ca:2e:72:3b:53:c9:02:af:
c0:62:26:ad:21:bc:6d:de:22:3b:5c:78:4d:00:f7:3d:ac:b2:
42:69:8e:66:e7:8c:dd:0a:2a:30:3e:8c:07:ab:70:06:93:a4:
b9:46:2a:9d:da:5e:9b:bd:32:87:0b:34:3e:98:b3:0f:c1:de:
3f:4e:b0:5e:b2:e7:c8:c6:57:bd:8e:7e:a5:c3:5a:f0:f8:80:
b7:bf:12:41:1e:55:34:f7:60:92:9e:b6:71:7b:f0:e9:2b:bb:
9c:1e:b7:d7:f4:26:3b:23:2d:b4:e4:03:c7:93:9f:69:e0:44:
c4:2e:ec:bc:e4:b4:77:71:c8:64:32:ab:06:6e:8b:24:be:df:
56:0f:9d:48:9e:0d:ba:d9:e3:e8:8d:94:9b:c8:95:93:83:08:
b5:dc:ca:f6:51:9e:ed:05:0a:36:ed:0f:41:35:23:3b:4c:b7:
a8:92:fa:31:5b:fd:e1:e0:ab:4a:f6:3a:c6:6e:49:f3:df:ee:
fc:46:61:05:67:fd:ca:4e:d1:c8:98:ee:1e:3c:31:4c:53:8c:
dc:d2:46:32:27:7e:d1:fe:4f:37:84:e0:bf:b4:c8:d7:33:50:
c4:c6:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:21 2026 by rpki-client