Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: ITPYodfMdIBeHgk9YroWw/4WSCUtgZ63UeqkfCzy8yc=
Subject key identifier: 48:13:6E:8B:C4:B0:31:D9:E5:8B:D4:40:50:DC:97:98:89:AC:2B:03
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019CAAC70559D4280718EC753D0DC00870A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 071C
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: 5rzMHaqqGZbg54w1NhxcbUJniCv7R3rDT/g1aKzO6mE=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:05:59:d4:28:07:18:ec:75:3d:0d:c0:08:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=48136e8bc4b031d9e58bd44050dc979889ac2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:b8:94:17:a9:51:ef:dd:a4:4e:fb:a4:2b:
e8:7b:74:05:d7:42:a9:2c:7b:9a:f8:06:89:e1:14:
6a:53:61:ef:7d:89:83:8e:a7:b8:35:ca:62:24:4d:
a3:c8:2f:d9:f5:25:c5:30:ba:97:bc:1e:4f:2f:94:
a2:05:cf:8e:b8:b1:07:7e:b3:e3:3a:29:34:47:29:
3d:84:b6:d3:54:79:3b:e3:f8:6a:a7:60:fd:1b:13:
ae:ec:4e:92:9b:97:d4:0b:ae:4b:23:dd:da:cd:75:
dd:46:29:97:08:86:74:ac:7f:bd:51:35:ad:e5:1d:
9c:ad:d8:e4:7a:8b:81:d4:8a:4c:33:fc:36:c7:49:
3c:6e:61:6e:c6:06:29:90:fc:06:d5:43:fa:89:ec:
d9:e7:15:e4:c5:ff:e7:64:bf:00:91:d6:84:ec:1d:
05:44:44:53:60:66:e1:2f:97:ea:e1:6d:3c:e5:e0:
ea:d9:a4:86:b1:35:66:89:24:71:80:91:04:68:5c:
4c:06:5a:0f:9e:a1:af:bd:d9:1e:2e:53:82:50:da:
3e:aa:38:9e:1c:35:1a:81:b9:b2:80:fc:3b:c3:e6:
5a:d2:fd:89:37:29:87:b3:a5:8e:39:b6:b9:1e:81:
45:65:57:6b:42:fc:35:7d:1b:f9:86:c8:7a:5e:7a:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:6E:8B:C4:B0:31:D9:E5:8B:D4:40:50:DC:97:98:89:AC:2B:03
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d1:1b:63:10:f2:25:e8:97:99:30:63:51:81:60:c4:34:7a:
8a:0c:50:ac:c5:4c:21:1e:89:86:2c:3d:9e:d0:12:81:03:81:
ba:56:01:c1:4f:2f:08:bf:c7:46:0a:1d:3b:a1:0f:b7:95:8d:
79:14:5f:2a:da:8d:db:d6:1e:74:0c:68:51:75:79:a3:7e:11:
de:03:42:d8:4d:93:2d:6f:e3:95:15:dc:5f:6c:30:3e:49:62:
bf:f7:2d:6d:e6:57:38:d4:20:2d:50:64:b2:6a:f7:e6:24:c9:
7e:59:d3:8b:2e:e8:a7:6f:9e:57:ea:a3:29:5e:72:a5:bd:13:
a5:6b:2a:e9:b1:cd:fd:6f:2b:cc:5a:01:27:f6:ba:c6:3d:f1:
d1:91:2e:0b:ee:9e:dd:27:ae:12:6c:81:a6:6f:6f:6a:85:d0:
59:90:02:29:64:25:1d:b0:fe:24:47:ee:42:27:a9:5f:da:0f:
14:78:c5:12:57:ad:8d:d4:5c:7e:65:a4:2f:30:64:59:6e:82:
0b:8e:69:2a:58:43:b6:29:f9:1a:32:db:c7:3e:c9:9e:e2:a6:
e4:03:ac:be:84:33:a0:cd:b2:d9:5d:78:9b:a4:5d:46:80:aa:
99:22:0f:9c:34:c5:36:4f:db:1f:91:47:09:17:07:58:a6:e8:
7c:00:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:44 2026 by rpki-client