Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: wyAjRj7iox+US0IGIGU6y4kTTHCnSvRiPd4fytXIGK0=
Subject key identifier: 97:0F:43:E7:0E:45:DE:6D:06:A5:4C:ED:B6:6E:26:A9:50:FD:6A:62
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019DA3AEE0CA7AF199614498F3B0B9B9108A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 03:00:39 +0000
Manifest this update: Sun 19 Apr 2026 03:00:39 +0000
Manifest next update: Mon 20 Apr 2026 03:00:39 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: Hs+kKC+AJSD0fe2r7VrqEFLGL0s4LAydd44JBTLbDu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e0:ca:7a:f1:99:61:44:98:f3:b0:b9:b9:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Apr 19 03:00:39 2026 GMT
Not After : Apr 20 03:00:39 2026 GMT
Subject: CN=970f43e70e45de6d06a54cedb66e26a950fd6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:d2:e3:7e:04:79:78:d2:8b:01:68:7a:88:
b2:e0:0e:3b:e2:a4:9a:60:15:d8:1a:0c:f0:21:59:
93:f1:fa:38:22:ea:e1:1c:cd:f0:eb:72:1c:a5:e6:
86:60:fd:7f:47:81:6c:fd:c7:67:ba:f8:fa:eb:f4:
da:90:7a:00:7b:2c:06:15:f8:1f:9d:86:33:64:5e:
94:c4:fc:bd:a5:ed:ce:45:df:5d:ea:3e:c4:0c:73:
fc:cf:37:df:89:d7:72:6a:ec:d9:bb:9e:26:4a:0e:
02:60:a3:10:de:fb:07:90:c1:54:62:5c:6f:a0:07:
56:e7:0b:97:11:a6:2b:5e:a2:65:8a:f9:66:7c:67:
22:30:fc:e9:1d:eb:ac:ff:02:f6:f6:f9:9f:1f:92:
ea:d3:bf:44:79:8c:d6:25:ee:2a:fe:75:44:72:9d:
7e:58:0d:2c:80:db:18:97:24:bd:f7:86:9f:b6:4a:
42:b4:54:7a:e9:0e:e4:2e:11:99:bf:67:e9:99:e0:
d1:18:a6:2b:1f:d6:30:18:04:66:76:d1:04:4f:a6:
3e:2b:ce:6c:6f:41:9a:4e:fc:f9:ec:21:99:ba:f5:
87:28:ed:01:bd:84:77:4e:35:05:8a:34:7a:7c:4c:
2b:d7:9d:bd:9a:6d:ef:4f:29:d6:fa:da:c7:3d:5d:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:43:E7:0E:45:DE:6D:06:A5:4C:ED:B6:6E:26:A9:50:FD:6A:62
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:09:e0:4e:ec:94:75:e4:e6:e4:ed:29:f7:7f:ad:4b:7f:
50:32:2a:c1:b4:0f:5c:91:d8:fe:e4:dd:8e:4b:38:f9:3c:0d:
4b:e2:05:08:a8:d8:4d:57:f6:e3:fd:98:b0:d9:2c:01:a0:fb:
34:2d:3d:e5:76:33:5f:75:1c:03:c5:c1:10:1d:d2:d5:2c:ca:
5a:23:f8:3e:6d:ad:23:1f:82:cc:49:67:57:bd:fa:a4:12:8a:
d9:64:5e:b7:9e:16:ad:92:7e:6e:26:6b:ea:d5:e3:5a:93:c5:
fb:2a:c2:e1:4c:e7:fb:07:2a:82:2d:97:d6:31:02:dd:81:17:
43:b3:ea:7a:ea:54:7b:2f:77:06:02:19:6e:1e:fa:e9:c6:8b:
07:ff:fd:82:5b:61:5c:fb:5a:d0:22:2c:c6:51:85:ea:bc:98:
b7:86:44:69:a3:c3:3f:03:da:8c:3a:b0:bf:d9:25:c7:9e:1f:
6f:f0:d4:b7:3a:5f:4c:28:26:5f:da:d5:89:f0:e2:9e:07:cf:
69:df:ef:d7:67:b6:48:77:63:7f:7f:1b:cd:f6:92:1b:70:51:
68:6f:8f:0a:f9:7b:ec:8b:ab:ba:ed:8b:1d:31:92:72:89:30:
c0:e4:bf:27:86:7f:85:8c:2c:84:fb:23:5f:7d:2c:d0:af:3c:
65:76:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:25 2026 by rpki-client