Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: sxC7RfI86hzsUtCE1IeCNTqh9Zvy6q0uR47waVLAHGI=
Subject key identifier: E7:6E:B7:92:6C:76:EB:0E:10:94:91:29:E0:A4:B0:5F:86:BF:1A:32
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019D284E2D173C22189191A2D55DB261EF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 09D0
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: xU8hytpiaz6hBE+Yp+rxtY4dPg9wh4LrrpjgmO0fRUw=)
2: q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa (hash: GLAdjtugl2x3FM2Zba5Eclt3UAYEj3C31Itsrx0oxUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2d:17:3c:22:18:91:91:a2:d5:5d:b2:61:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=e76eb7926c76eb0e10949129e0a4b05f86bf1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:5b:d9:0e:a7:8a:1d:54:9f:7b:f2:43:9e:
5f:d7:2d:d8:4a:d5:cc:7d:83:ef:da:10:5d:db:41:
a2:0b:b5:4a:f0:7c:18:c8:64:17:b7:c5:a8:1e:3d:
dc:ae:29:3f:b2:4d:95:ce:f3:b6:f6:b6:92:ed:60:
11:61:11:0f:81:70:82:42:28:37:e1:1a:ea:16:cf:
52:d4:ed:1e:e7:24:f8:80:42:5b:23:de:75:c5:dc:
51:01:28:b7:98:60:5d:74:b4:e4:2e:6f:4f:da:06:
18:2f:97:47:7c:53:58:d9:45:0f:b7:81:f3:c5:2e:
da:4f:02:3d:78:39:9a:b7:b8:fa:85:6e:c3:9b:f4:
7b:ae:bb:e5:02:b0:f2:e7:3e:f0:d9:47:10:d4:e0:
c5:e7:5d:15:6d:1c:0f:88:97:37:aa:6c:e1:2f:4a:
51:92:ba:c8:98:d8:51:59:45:4e:10:ad:45:c9:60:
44:84:bd:1d:98:d3:15:8e:3e:bd:88:c8:97:3b:df:
6c:f8:f1:44:75:5b:e3:1c:36:03:36:22:ec:7e:32:
8e:24:c0:60:72:cc:b5:69:15:66:89:d2:0d:b6:30:
36:31:62:74:0e:fb:4f:f9:b4:87:b3:2a:40:e1:90:
96:87:d5:65:89:f6:ac:ce:28:94:c5:95:34:69:a2:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:B7:92:6C:76:EB:0E:10:94:91:29:E0:A4:B0:5F:86:BF:1A:32
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ae:fe:94:ad:54:04:9c:a4:fd:bb:24:ec:93:65:89:d7:28:
e8:ce:a2:ad:ec:a5:51:66:d7:9f:5c:8a:0d:0d:9e:ea:26:cd:
53:8e:80:72:a8:72:13:ff:35:64:81:08:cc:72:b6:19:b5:41:
01:75:1b:fa:4a:82:1e:50:db:b2:be:3c:a1:c8:18:12:f1:8e:
f6:37:a1:39:b1:e2:cb:bc:5b:a3:16:b1:97:1a:7c:67:d7:22:
2d:80:d0:c2:3f:37:ab:60:ca:cc:a2:4b:43:4f:99:23:5e:10:
23:69:f0:09:a0:ea:39:8b:76:59:5d:70:20:c8:90:13:45:3e:
0e:f2:59:b1:10:a1:4f:1b:de:e1:ee:5c:d8:f3:f6:86:7e:1d:
cb:12:eb:c4:06:5b:24:23:22:44:cf:d1:27:68:73:2f:d8:a2:
2c:38:5f:6e:97:2c:39:51:5d:bb:1f:27:87:60:37:e9:9d:9d:
86:d9:71:6b:63:b6:fc:9d:e0:72:90:bf:cf:3d:cf:83:e3:f6:
ed:d2:3c:8e:3a:2f:06:52:4e:13:ce:04:24:ed:c5:01:fd:ef:
fe:5a:49:1b:cc:3b:40:72:fb:49:ca:9d:d8:d9:76:71:16:7c:
69:88:22:33:ff:45:23:67:a9:4b:9e:a0:01:97:0b:84:0f:ed:
f3:e2:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:49 2026 by rpki-client