Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
File: Z8-tqx1DTEwmEYyaYp50-p83xGE.mft (raw, json)
Hash identifier: g5yFDBRgCXVSkvrsIZ1FX61Zf7CZrgGcFeQACmLF8G4=
Subject key identifier: EB:54:8C:B1:64:79:48:C4:88:FA:37:3F:E5:59:4E:97:41:8A:86:E7
Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
Certificate issuer: /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Certificate serial: 019D28BB0D456BA3D344EA8DDDD1F41018AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
Manifest number: 0153
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa (hash: LerB+EHbGtYIBcGnSEDKbVb334OwXWnKx/1mjIc2mvE=)
2: Z8-tqx1DTEwmEYyaYp50-p83xGE.crl (hash: N3h8/5bmjcRKFAvzq+zFgpZ7yEI/Z0kyz+P+W//Uomg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0d:45:6b:a3:d3:44:ea:8d:dd:d1:f4:10:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=eb548cb1647948c488fa373fe5594e97418a86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:f3:d2:7d:f4:3d:29:d7:a9:f9:5d:c3:26:
1a:97:05:b5:8a:c9:96:35:31:61:86:fa:81:24:bb:
90:47:0a:90:72:cf:39:ad:04:33:e3:d0:2c:48:7c:
69:e4:c0:2c:16:d5:a3:87:ad:f0:83:3e:8a:1c:a1:
ab:56:5b:cd:08:1e:ef:fd:66:8a:b7:c0:cd:bd:d1:
0e:64:e6:5e:67:cd:08:d6:dc:6f:50:ee:8b:bf:53:
f5:90:db:61:74:66:93:44:39:8e:1a:f6:23:e7:9f:
23:2c:e1:54:77:cd:4d:49:8b:63:6c:5d:6d:80:5b:
c4:2d:52:f0:28:5c:6d:14:08:4c:84:18:3a:2a:19:
cc:54:39:fd:54:68:bd:6a:9d:ff:e2:71:59:9e:d4:
8b:b7:62:e8:11:5e:38:73:2e:87:ae:34:a1:fe:04:
68:d2:0c:78:29:0c:be:40:de:ec:e8:73:3e:b5:a3:
8e:3c:e6:d6:7e:0d:61:a5:f9:1a:b2:9e:5d:89:b2:
1c:c8:79:da:a2:0f:0f:fa:b5:74:e8:4c:29:3a:03:
24:0d:12:44:e6:38:44:d0:a5:e8:db:35:c3:34:0d:
70:d8:f1:79:64:4e:1a:e0:42:83:16:cf:bd:e1:75:
32:17:17:15:21:5b:05:81:35:ac:5a:a1:05:74:1e:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:8C:B1:64:79:48:C4:88:FA:37:3F:E5:59:4E:97:41:8A:86:E7
X509v3 Authority Key Identifier:
keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:40:57:4f:92:0a:af:1c:ab:03:4f:8f:9e:bb:74:4d:55:
d0:f2:fa:61:30:4d:c6:dc:4f:64:70:4b:30:9e:88:97:87:90:
11:e0:df:3f:02:7f:1d:7d:cc:4e:0a:3c:7c:54:3b:63:a2:db:
46:1e:8d:dc:b9:98:68:31:5a:52:01:27:84:20:1b:35:58:4e:
5a:64:a3:80:24:90:38:53:44:49:b2:7e:5d:ed:b1:68:17:5e:
37:0f:99:d1:a5:05:2d:ff:9e:fe:cb:ed:bf:83:50:6c:92:71:
fb:c4:e9:fb:f8:54:09:bd:17:3b:40:04:fd:96:7b:c5:88:46:
5d:30:17:5a:35:49:a7:00:0c:49:7a:11:04:f4:a3:67:49:e5:
2c:78:2e:53:a8:fb:0d:7b:3c:b9:45:d6:06:de:37:b5:0b:f0:
70:62:f0:1b:6c:5a:12:5a:b5:46:8f:0b:12:8d:66:9d:e9:47:
e1:12:d5:a7:bd:3d:1e:0b:6a:61:35:de:bc:da:ba:fb:40:e5:
37:3a:81:10:ca:5f:fd:ef:71:5f:2a:9a:0e:c2:7e:b2:a7:7f:
52:d4:cb:ff:42:9c:25:fe:70:3b:5f:53:2d:e3:d3:1b:9a:ea:
ce:a3:21:49:aa:42:bd:14:66:8b:e0:09:57:a6:8c:4d:8f:b2:
d6:b0:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:33 2026 by rpki-client