Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: UuXYPATXXMwqM8m0z705wZi7+cCd6pRExUsDmX3E58o=
Subject key identifier: 95:48:A8:95:01:84:EB:16:9A:ED:F9:6A:FC:54:67:37:D8:71:07:F7
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019CAC104258C39EAEA1B5B058AAFF683A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 075F
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: r+LX1aOgYiWuMF3T02MInwEbBnRVqKp9bjS9ignBnX4=)
2: xL9ifbNR1mOs9uO93ZIkaaIy3p8.roa (hash: VzaUpnGlk6PWKD7kHafESlUjnLnbyjchehYl4PxFAp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:42:58:c3:9e:ae:a1:b5:b0:58:aa:ff:68:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=9548a8950184eb169aedf96afc546737d87107f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:dd:18:50:e2:ad:79:4c:37:df:fd:21:25:
d0:f8:84:72:2a:b1:56:28:90:c4:26:1a:65:1c:70:
e5:db:2e:b1:5d:a0:18:3e:6c:ac:ea:85:f3:9d:42:
ec:e0:36:21:e5:a6:1a:d2:ac:06:f6:d0:5e:7c:22:
e9:cb:05:99:a5:4a:33:9f:c6:59:ee:18:17:bd:cf:
bc:4d:dc:0b:fa:5f:fb:8f:bd:d7:ff:ba:0e:16:cd:
ba:e0:d0:21:e7:6b:cb:c4:1b:da:01:6f:6f:d8:b9:
bc:7b:e1:17:f7:07:e3:9c:d6:83:f8:bc:fc:a4:92:
2b:1e:2b:bc:99:fa:85:0b:af:40:54:94:eb:43:47:
f2:ff:85:f5:2e:8f:85:22:fb:bb:67:c5:46:7d:06:
55:99:d4:13:d7:74:90:ee:a1:fb:44:60:45:98:9d:
b8:ed:37:60:39:15:8e:a3:55:1f:4f:29:a3:00:04:
93:29:5f:20:bd:fd:af:77:32:1b:28:34:32:41:09:
a4:75:1f:82:cb:0f:cc:53:15:bf:b7:a2:5c:4c:88:
8b:53:ab:1a:ce:98:32:75:6d:a4:f8:cc:db:0d:8f:
c8:61:12:07:06:ab:d6:f6:75:43:c6:ef:29:de:35:
e4:df:f0:90:92:36:58:b4:6c:ed:3e:89:de:48:10:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:A8:95:01:84:EB:16:9A:ED:F9:6A:FC:54:67:37:D8:71:07:F7
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:47:2c:91:d9:33:63:65:5f:27:de:95:84:02:c9:7e:58:
1c:26:a7:8b:28:95:bb:37:50:23:ef:1f:36:ba:13:6b:19:7d:
f2:47:d7:90:32:c9:7a:85:06:36:6b:2e:e5:5c:03:dd:c7:a3:
44:ab:7f:63:4f:95:ef:b5:ee:66:dc:75:d7:a1:fd:ce:34:ac:
f8:39:06:82:9e:bc:dc:fb:70:ae:bc:f8:d4:1b:5e:9c:3b:9a:
09:e4:80:f4:fe:00:e2:03:2f:53:2e:f6:fb:c2:2e:e0:eb:84:
16:d6:c6:bb:a7:53:41:7b:35:f7:41:45:bf:06:f2:9e:00:c8:
10:ed:be:e1:51:44:b3:07:1e:8b:9b:87:c7:1b:64:bd:5a:e1:
1f:40:4f:9f:8c:b1:ce:d8:7c:20:ea:77:b0:0f:de:20:88:d0:
b8:21:10:79:93:e8:b6:22:50:f9:88:c0:5f:3c:24:33:70:5c:
77:72:83:95:aa:62:94:ab:29:f7:01:67:ac:86:53:50:05:de:
dc:51:89:82:63:ef:07:36:08:f7:2d:a1:d0:ad:1f:fc:99:ca:
11:9f:e8:9b:9f:c0:70:e0:3e:e6:19:25:71:04:35:87:c6:25:
ae:76:ed:7d:5c:d1:46:a0:c6:0b:de:e0:bd:3a:36:bf:8e:ee:
ad:2a:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:28 2026 by rpki-client