Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: 9OgtFjsNIKn+n4ajeXwggGFrrB2zDzgbWvMUNzMlkbU=
Subject key identifier: 0B:58:05:4F:7A:A0:4C:B9:38:E1:ED:4E:F0:04:CF:BA:89:26:7B:33
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 019D265F7054F8740606C775B2D2CD365C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: 1xMZz9pSGq85vXf20FbCjYLr-kg.roa (hash: GLQz1TL8Rtkw2tIKftRi3ZiQjePeddOKBNexMBK6YVc=)
2: HEzbpkGlixMJMAH4xLJPiJ7HjDw.roa (hash: TdJqBEj+bob33O1NnFNh0HeCwlgemJTrTUX71e8Q5Ig=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: Fo4QZiWqqUHXvcV729FpHNtxBaozQvDCWXqeH4gFOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:70:54:f8:74:06:06:c7:75:b2:d2:cd:36:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=0b58054f7aa04cb938e1ed4ef004cfba89267b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:98:d9:3d:6b:dc:ad:5c:bc:f5:0e:46:79:
e4:de:1e:92:00:25:ba:6f:7b:37:e2:a4:21:8b:dd:
d7:58:ca:e5:1d:cf:9f:a9:17:72:8c:cd:95:68:32:
be:4c:39:b6:cc:1e:8c:60:b0:2f:09:14:2e:95:9b:
d2:85:1c:3f:6c:0b:e1:78:c4:a2:6d:89:54:8f:05:
47:13:22:20:3e:9a:36:ce:ab:0a:a4:6b:b2:09:0f:
2b:00:5d:64:b9:f6:9c:3f:6e:5a:1b:21:bc:e7:1e:
d4:89:28:d2:83:70:3a:4b:34:a6:a0:09:f3:86:8e:
04:a4:17:58:79:0f:01:eb:9e:3a:97:8b:5b:64:88:
ea:df:0e:b3:41:f1:c0:c8:73:7d:4b:b9:cb:98:af:
0c:96:02:7b:01:45:10:98:be:10:a5:bd:7d:5d:a9:
84:ff:b0:1b:8b:bf:f0:90:cd:30:76:4b:9a:94:4c:
c1:e0:44:1f:d8:5a:dc:bf:69:d4:3a:94:d6:e8:d1:
81:0c:f4:1d:bc:ce:ac:a2:a4:97:ec:6f:21:2f:21:
b5:5d:2a:8f:f7:6c:8f:5a:4a:be:b2:c9:90:b6:93:
de:21:82:59:41:1c:57:d7:a6:89:27:8f:7a:6a:4e:
2f:fa:7e:6b:58:90:dc:8d:5e:93:92:5a:81:20:a9:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:05:4F:7A:A0:4C:B9:38:E1:ED:4E:F0:04:CF:BA:89:26:7B:33
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:f0:4b:88:33:b3:1e:60:2e:4f:74:b3:d5:c5:48:46:1f:
f5:60:92:ca:53:98:77:d4:34:35:82:f1:d5:e7:eb:c4:b1:49:
6e:b9:9c:5e:ff:be:0d:f1:ad:31:8d:31:86:af:0f:c1:25:2e:
ce:c2:25:4c:11:c4:2e:ba:ee:26:34:13:d5:04:eb:bc:ba:46:
66:d1:88:ed:1f:c0:c5:c7:6a:3b:40:21:60:10:52:97:51:9d:
c3:8e:72:e4:77:38:f4:f4:37:41:6f:2f:8e:d7:1f:f0:91:4d:
8d:1c:b3:90:3f:12:8c:11:b1:33:5a:bb:d6:5d:30:b3:77:d4:
3d:72:d6:41:3d:d7:87:3b:c0:33:4e:c2:6b:e5:50:38:bf:2a:
70:8e:74:0d:42:17:87:bf:b9:4c:eb:68:89:3a:27:cd:2b:68:
d0:4a:f4:63:a2:e7:15:a4:cf:d9:32:f2:8d:24:c6:54:64:b8:
0c:99:73:91:f8:53:4b:c7:d4:58:8c:f1:5b:5a:f0:b7:56:78:
ba:ea:1f:ae:bd:0a:cc:a9:ec:c0:30:c4:29:3d:13:d2:17:14:
ab:82:3d:6d:92:30:db:20:fa:ed:9b:70:a5:f4:c1:a2:9e:69:
74:fe:97:05:f5:5b:83:ed:85:41:38:2f:f2:3f:49:ab:a4:c1:
c0:ea:60:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3BU+HQGBsd1stLNNlxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk
MDFiNDMwHhcNMjYwMzI1MTkwMTIyWhcNMjYwMzI2MTkwMTIyWjAzMTEwLwYDVQQD
EygwYjU4MDU0ZjdhYTA0Y2I5MzhlMWVkNGVmMDA0Y2ZiYTg5MjY3YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hKY2T1r3K1cvPUORnnk3h6SACW6
b3s34qQhi93XWMrlHc+fqRdyjM2VaDK+TDm2zB6MYLAvCRQulZvShRw/bAvheMSi
bYlUjwVHEyIgPpo2zqsKpGuyCQ8rAF1kufacP25aGyG85x7UiSjSg3A6SzSmoAnz
ho4EpBdYeQ8B6546l4tbZIjq3w6zQfHAyHN9S7nLmK8MlgJ7AUUQmL4Qpb19XamE
/7Abi7/wkM0wdkualEzB4EQf2Frcv2nUOpTW6NGBDPQdvM6soqSX7G8hLyG1XSqP
92yPWkq+ssmQtpPeIYJZQRxX16aJJ496ak4v+n5rWJDcjV6TklqBIKnVKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtYBU96oEy5OOHtTvAEz7qJJnszMB8GA1UdIwQY
MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt
MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0
LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkk/wS4gz
sx5gLk90s9XFSEYf9WCSylOYd9Q0NYLx1efrxLFJbrmcXv++DfGtMY0xhq8PwSUu
zsIlTBHELrruJjQT1QTrvLpGZtGI7R/AxcdqO0AhYBBSl1Gdw45y5Hc49PQ3QW8v
jtcf8JFNjRyzkD8SjBGxM1q71l0ws3fUPXLWQT3XhzvAM07Ca+VQOL8qcI50DUIX
h7+5TOtoiTonzSto0Er0Y6LnFaTP2TLyjSTGVGS4DJlzkfhTS8fUWIzxW1rwt1Z4
uuofrr0KzKnswDDEKT0T0hcUq4I9bZIw2yD67ZtwpfTBop5pdP6XBfVbg+2FQTgv
8j9Jq6TBwOpgHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:51 2026 by rpki-client