
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: YbTFRUtvXtYF+4C1AVqkiL/AEO9WZ54w2uKcPCEuz2w=
Subject key identifier: 8F:2D:85:DC:E3:20:8A:31:EA:8D:C4:EB:1F:1E:C9:D4:D7:26:E0:E8
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 019D270486AA3139F668FB0CF77A760749C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0781
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: 0wPSDW0pHpKj3jgVI+t61I9ecPdUCmHmZez6K6YsrZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:86:aa:31:39:f6:68:fb:0c:f7:7a:76:07:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=8f2d85dce3208a31ea8dc4eb1f1ec9d4d726e0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:ba:57:cd:27:7a:73:ec:5d:6c:36:9b:17:
66:aa:5e:df:8f:3e:d4:1c:ac:90:5d:ab:61:d6:24:
ec:1e:d2:7f:43:ca:59:35:e2:b6:57:ff:10:cc:e3:
f0:88:7f:da:ff:33:e5:ed:97:9d:70:d3:93:82:f3:
72:ef:ba:c7:be:42:b8:ff:26:01:3d:33:11:9b:23:
5f:e9:72:04:2c:6c:02:af:a6:27:87:c3:52:06:b9:
d5:5a:72:e2:bc:49:df:30:bc:ad:a0:a0:36:eb:50:
51:84:b5:c6:ec:af:37:29:5b:68:7f:40:53:c6:8a:
d4:8a:ae:35:8b:b2:cd:9f:1d:af:ed:c6:95:17:06:
87:bc:26:26:88:8b:fe:dd:00:e2:8e:23:51:d3:b8:
0b:7b:24:ce:14:8f:2a:f2:1c:41:76:3b:de:d0:7b:
74:ec:01:1d:1d:58:c5:bd:be:c4:4e:14:37:12:9c:
e4:0d:15:39:c5:b5:41:46:8e:32:88:e8:f6:7c:b2:
a1:81:19:41:16:8f:28:db:73:aa:0a:99:9b:11:7f:
f3:2b:6a:64:46:5e:df:26:ab:99:5a:fe:34:86:97:
c6:80:c5:28:cb:f1:fc:6c:d8:7d:5b:14:a8:36:07:
70:67:c3:c8:1d:03:e4:8d:cd:5b:d4:66:3e:24:a1:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:85:DC:E3:20:8A:31:EA:8D:C4:EB:1F:1E:C9:D4:D7:26:E0:E8
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:a5:1f:95:88:64:35:14:bd:3e:a1:e7:36:3a:11:83:2d:
5b:4a:35:7e:b9:39:c2:4f:ad:1c:fa:c6:2f:c8:b7:e1:80:c5:
2d:0a:97:00:3e:ca:43:fe:14:5d:4d:99:e1:55:84:d9:76:ec:
01:39:6e:3d:fd:65:dd:13:e3:69:08:26:a8:63:a0:5b:1a:15:
e3:dc:b8:28:36:56:76:e1:4d:3d:72:1c:ff:3a:84:16:b6:b3:
1a:ed:ef:38:5b:ff:21:36:2c:5e:f4:b5:be:40:f3:de:5c:74:
fc:53:51:75:28:ce:ee:3e:d4:1e:67:16:8e:b9:b8:16:48:37:
1d:d5:13:a7:df:b6:7f:6c:f3:1b:82:8a:3b:d9:f3:21:96:e4:
36:57:a5:49:10:21:b8:3f:99:dd:62:ac:15:b4:6c:72:35:e1:
70:27:6a:7f:94:28:55:ec:b9:03:63:58:8c:76:1f:eb:4c:70:
d5:d1:ea:68:70:66:c8:96:7a:40:0d:e8:57:89:2f:52:3e:7a:
b4:9f:09:bb:df:e0:99:c9:e8:8e:eb:51:39:91:14:10:37:d7:
01:9f:33:0d:70:80:ad:49:f4:b8:1a:01:dc:fd:8e:eb:ea:3e:
c4:2a:ff:3c:84:2f:dd:90:9b:5e:1e:16:5d:06:b0:77:52:c6:
04:fe:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client