Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 2wVPFB3Tf0t8v9t1eUMdJyDgXiutvlPhYQeioOHaYSM=
Subject key identifier: 6B:96:71:42:4B:E0:1E:77:36:0E:8D:AC:63:32:4E:DB:22:34:71:75
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019CAC472CB35C62E2C94343DEF6CB59A4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0568
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: YCqByQS+2u1G/Tp9XXsG6w0uhHDpg75z3TFamAU6VgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2c:b3:5c:62:e2:c9:43:43:de:f6:cb:59:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=6b9671424be01e77360e8dac63324edb22347175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f5:5d:69:36:d5:76:45:3f:8f:70:87:64:a2:
13:40:63:50:95:1a:3b:87:28:c9:ce:15:f5:b3:2f:
69:b8:e5:3b:3d:89:18:54:25:a8:22:a8:2a:6e:47:
c6:f9:f4:41:d2:8b:ec:33:44:05:aa:ae:e1:92:f1:
d3:62:0c:b3:48:86:85:e6:e5:af:fc:e2:ad:b5:0e:
d8:c2:c6:8a:ee:62:e6:c9:55:f4:b0:38:54:8e:1c:
ff:6e:e0:03:cf:64:c0:04:46:b7:dd:f2:5e:72:4b:
64:4f:41:a6:aa:ad:f7:7e:57:20:fe:04:d6:2f:a1:
c1:e7:ac:52:67:8d:d4:bb:2d:12:54:d0:e1:c2:55:
e0:ab:9f:b0:32:aa:1f:e8:6f:70:a0:a7:a4:59:5a:
08:52:2b:57:ac:45:bd:e8:ee:3c:2d:4f:57:fc:56:
b4:da:e2:69:10:cb:01:29:08:e8:15:60:08:06:e3:
ba:0c:9a:4a:2d:b3:ae:6c:c5:46:28:98:26:34:51:
30:9d:2f:be:61:6b:57:4f:63:76:db:45:d2:62:e1:
e0:0f:00:73:8b:d6:54:86:36:96:ea:39:5d:0c:3f:
cc:1e:d3:0a:7c:9b:7a:68:99:ac:78:4b:cd:d0:18:
00:34:30:84:7c:37:b0:08:5f:55:3c:5f:57:ab:b2:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:71:42:4B:E0:1E:77:36:0E:8D:AC:63:32:4E:DB:22:34:71:75
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:f4:e7:6d:6f:f0:4a:f5:b7:2a:25:e4:a4:b7:73:e3:e2:
78:0e:ad:60:21:ee:7a:a4:77:57:5f:14:61:46:d9:c0:49:c0:
2d:36:04:53:42:47:dc:ea:2b:12:b3:e0:58:59:7b:19:75:53:
aa:ae:d8:17:41:8f:50:94:43:b7:98:77:b2:a6:27:45:76:c5:
1a:d2:ce:4b:e7:d9:01:fc:31:39:32:70:97:a4:8a:71:0a:3d:
d5:33:5d:45:56:cc:be:3b:03:e9:a6:fb:27:ba:a8:5d:7e:0a:
3c:da:f7:70:50:6c:02:c9:1e:27:f6:c2:92:a7:5c:fe:d6:8e:
0a:de:9f:dc:98:e2:e6:78:71:f9:bf:d8:1e:5a:52:8e:02:ea:
4b:46:8d:e8:74:ae:5b:23:2b:ed:59:88:e6:c4:b5:1d:a5:0d:
72:d5:30:60:e6:7c:8e:cd:69:01:61:76:f6:ef:1e:cf:fe:6c:
19:da:a0:3e:1a:9f:ab:6e:0f:0a:b6:ec:e8:2b:fe:62:c4:22:
68:94:5c:85:12:32:ab:e4:81:b2:84:8a:84:e1:12:3a:f0:1e:
b2:33:86:04:ee:83:33:1e:89:b3:9a:9b:a9:e8:21:ed:18:7d:
5f:78:e9:91:74:0f:25:47:d7:cd:88:e2:aa:f1:e8:17:9b:d9:
98:b2:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:37 2026 by rpki-client