Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: IUv/JJoDl+0Uy9aa6hN+fXGj2TIbYf1xEJLN3+xD1QU=
Subject key identifier: 96:68:BA:C6:C0:BF:AE:49:1D:A0:EE:BC:21:D0:9F:6E:EF:A6:22:CA
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019CAA8FD12A8EEC9DA8588CCC4006BDC812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: RPotfDXXPiIiZLa+qDDsiuXD/dkQRBj7oIdFYZSY0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d1:2a:8e:ec:9d:a8:58:8c:cc:40:06:bd:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=9668bac6c0bfae491da0eebc21d09f6eefa622ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:a5:16:9d:c7:96:80:84:f6:82:45:f2:64:
06:c6:e5:92:76:f0:11:13:fa:bc:ee:78:b8:9f:35:
ba:f2:e6:a8:6d:de:17:10:11:46:a2:0e:da:15:47:
d4:4e:08:17:39:48:e8:6c:11:4e:28:16:39:64:16:
9b:e5:71:35:06:81:36:af:3c:03:a7:05:a8:db:32:
88:f8:df:de:9d:14:f4:5b:83:5e:92:01:e9:03:8c:
14:24:4c:2e:09:8a:f1:d7:2d:6b:74:b0:40:85:f3:
2d:3e:e6:a5:8a:46:b3:76:4b:b2:03:70:09:c7:16:
a4:76:e7:64:06:e0:f2:ce:57:6b:9a:b1:3d:6d:fc:
05:46:28:e4:f4:6e:95:6b:c5:62:0d:68:1c:d2:86:
b1:ab:54:4c:56:ed:69:35:b9:03:b8:79:8e:ff:b6:
af:de:4f:3b:53:7f:de:6e:6e:4b:fd:ff:ba:57:c7:
34:c1:7c:77:59:e6:3f:86:6e:bf:8c:35:c0:3e:72:
2f:ce:65:ad:63:fe:c5:f9:c5:7e:5f:09:67:0a:16:
05:15:46:74:e8:f5:ab:ea:0d:64:ac:cc:3d:d5:8b:
85:43:89:60:98:f2:23:d5:4c:f3:2d:e2:3a:dc:bd:
db:88:d9:86:95:f8:f5:45:35:6f:3f:f4:40:b3:9b:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:BA:C6:C0:BF:AE:49:1D:A0:EE:BC:21:D0:9F:6E:EF:A6:22:CA
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:f7:96:15:ee:00:e2:3c:81:43:74:55:95:1c:0f:ba:49:
63:87:87:f4:66:3c:97:d5:b7:2b:f5:2b:06:51:64:c5:99:a4:
91:2c:80:9e:e7:3f:f5:3c:8b:c9:3a:00:48:b3:6d:a9:61:9d:
5b:e2:5b:b5:dd:20:3a:79:8a:86:f1:41:81:a8:d5:32:16:22:
05:e2:71:c3:58:77:b7:6c:61:ee:ac:b2:57:e7:c2:9f:64:39:
5d:fd:d9:b4:11:2b:c9:ef:61:11:25:44:2b:77:0b:ba:5f:45:
36:4a:32:e5:29:9d:70:b3:68:00:ec:33:33:77:3c:4f:fa:1f:
be:dd:55:76:df:1a:57:6b:cb:f4:b7:b6:d0:f1:5a:ff:ae:7d:
26:95:1a:c1:ab:da:2f:d9:35:09:f3:dc:c6:87:85:ad:8d:c9:
93:8d:62:ce:7f:79:ea:35:85:d8:e7:c3:3a:b1:bc:a4:b1:40:
5b:d4:fc:3a:22:dd:00:dd:fc:67:9e:29:a1:7e:c0:f3:3c:0e:
41:c3:4e:5f:ba:79:d8:d2:53:5b:ca:bd:62:4e:31:b1:a2:02:
77:d7:ea:59:be:3f:c0:48:78:dd:c2:a5:5a:55:61:24:d6:62:
93:65:31:75:e1:5f:d2:6e:4d:b2:dd:79:a1:2e:f8:43:54:70:
c6:fe:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:36 2026 by rpki-client