Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: 3h69WZ4PXCyCLl13vamaKmeYjr8gXupx3fA+r/ntc4E=
Subject key identifier: 8F:A9:A6:BE:05:40:B5:8C:DC:EE:94:1F:0E:FD:93:50:1E:5E:F9:D5
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 019D284E4E6E3B3BA04A7BF6EDCE5A473D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 1036
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: WJpYUx5FsAfoWswnOUZG7ok+jd27ET54GzOSar3B/PA=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4e:6e:3b:3b:a0:4a:7b:f6:ed:ce:5a:47:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=8fa9a6be0540b58cdcee941f0efd93501e5ef9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:a8:84:65:1b:d6:9f:75:62:a3:8d:4b:c1:
43:0c:53:0c:47:f4:5d:30:03:43:44:5c:37:e2:f0:
95:fb:58:e8:87:ac:75:55:11:0d:ea:e5:c3:9c:6e:
e5:b8:95:29:29:e1:12:a6:63:08:d3:ef:b3:c6:0f:
4a:31:9a:6f:24:4d:e3:09:d9:26:1d:51:5d:a6:d5:
52:05:80:8e:95:ec:63:cb:24:88:ee:f0:54:e5:af:
cd:59:17:41:1e:5d:e1:55:7b:17:6e:84:4e:86:a6:
32:36:b3:61:e7:b4:9e:9a:6f:06:e7:a8:4f:f7:1c:
6d:b1:f2:79:8d:82:ed:e6:1e:a7:17:ef:f0:5b:7c:
69:d3:63:2c:c7:48:46:b0:9a:38:1d:af:f3:04:b3:
82:88:49:5d:7d:0a:88:09:f0:d6:2b:70:b4:bb:74:
50:cf:e8:4e:3a:25:ef:5a:4d:89:d9:58:5c:d9:9b:
fc:2a:66:b4:39:bc:ed:76:bb:7c:d2:f0:30:31:27:
ef:b3:7a:4c:48:16:3c:55:b5:6c:d9:06:1f:f7:0d:
21:99:32:f0:54:db:4a:d3:31:02:b6:aa:9c:7a:52:
a0:2d:78:78:ca:40:2f:ac:35:27:64:2a:d7:69:9b:
2d:2c:25:cf:f0:8c:3f:d4:25:e6:7e:d0:03:57:56:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:A6:BE:05:40:B5:8C:DC:EE:94:1F:0E:FD:93:50:1E:5E:F9:D5
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:52:d3:41:ce:2a:ce:94:5d:ea:68:76:3e:06:c8:16:52:
4d:fa:36:e0:52:f3:06:fa:04:4d:de:47:16:38:cc:38:f4:72:
e6:58:67:7e:d7:ff:7f:88:55:3f:67:84:90:12:14:2f:e5:4f:
9d:fb:7e:e7:c4:78:c0:c4:63:4b:0d:c7:0e:3a:01:b3:eb:9f:
ab:4f:fb:47:5f:ba:43:52:31:bf:b3:c5:9b:c7:40:67:a2:b0:
5d:75:67:31:f8:a0:c5:fd:11:57:6b:43:df:1b:1a:01:fd:fc:
f4:03:26:d5:f4:f3:22:7b:1f:09:ac:9f:9b:6c:94:55:32:b3:
65:88:62:b3:f5:82:9f:ba:86:41:cd:17:4c:e1:13:73:fd:74:
24:6d:14:3a:b3:1a:a1:e1:99:0a:5e:16:32:b2:7c:23:cd:7b:
f9:31:a9:1f:b4:77:b4:10:14:01:61:de:d0:b6:bf:de:e6:2f:
a3:6e:0e:7d:0e:6b:ca:e5:83:15:a3:6a:91:eb:a3:f1:45:02:
8d:70:5d:45:70:31:d3:10:09:ad:96:d7:9b:17:45:ab:22:09:
df:f7:70:2a:68:c6:6d:5c:41:f3:2f:bb:3c:27:9f:3d:a9:88:
93:32:79:42:71:e2:00:37:21:6b:fd:02:7a:4c:34:c6:d3:21:
c9:cc:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:14 2026 by rpki-client