Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: KxAV+J9Gym3um9sHdORuyOFjG0EurttCdjwHZUuG7Xo=
Subject key identifier: 91:8F:2B:F7:1A:19:35:03:32:44:2F:F6:BB:7D:D1:67:9A:5A:52:1C
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019CAD9053F35789AE4E07BA1841961BB01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0389
Signing time: Mon 02 Mar 2026 08:00:42 +0000
Manifest this update: Mon 02 Mar 2026 08:00:42 +0000
Manifest next update: Tue 03 Mar 2026 08:00:42 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: L2R4hBYCLG7nWuLcJNL9Wi5WoJpi75fAoZ4DMsZOsqs=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:53:f3:57:89:ae:4e:07:ba:18:41:96:1b:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 2 08:00:42 2026 GMT
Not After : Mar 3 08:00:42 2026 GMT
Subject: CN=918f2bf71a19350332442ff6bb7dd1679a5a521c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:00:b4:61:8f:62:79:65:1c:37:3c:1a:60:
78:0e:f7:5c:f1:0d:9c:e9:f9:ff:7b:23:d8:68:84:
5a:a0:26:96:5f:4d:3b:fe:3e:08:d6:4f:87:7d:55:
ae:4a:f6:72:b5:6c:13:c3:8e:32:7b:87:5d:ca:26:
18:ab:87:26:41:4c:ce:eb:9d:fd:a1:66:57:16:69:
0c:42:f7:3d:6e:79:40:95:4a:95:cc:e8:c5:84:ff:
ba:8c:1a:a1:7f:1c:2c:27:74:56:50:22:d3:05:69:
49:dc:13:ca:6c:c7:89:ba:22:7c:03:54:6f:10:06:
a9:b4:70:d7:0d:44:a6:17:7d:fd:c2:93:dc:76:67:
21:61:25:42:08:12:61:cf:b5:89:8f:1e:a6:bd:c4:
64:3b:56:4a:f8:aa:a5:70:64:6f:9b:9d:03:e6:f6:
e9:0d:4e:c8:01:3b:01:6b:eb:f5:b1:c5:f1:58:56:
74:57:cf:31:68:76:aa:05:a9:29:15:8a:06:72:dc:
85:14:7f:de:87:ff:c1:08:ce:2e:76:29:92:7a:42:
e9:31:97:3b:9a:2d:cc:6e:1f:67:ab:cb:72:eb:68:
43:8c:ce:9a:e9:f3:cb:b7:db:07:d2:3e:15:55:6f:
2d:cb:ad:3b:c6:0d:2f:b7:a5:08:0f:a3:ca:a6:36:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:2B:F7:1A:19:35:03:32:44:2F:F6:BB:7D:D1:67:9A:5A:52:1C
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4f:36:63:3d:f6:12:c6:db:f3:de:13:63:c7:4c:fe:70:e8:
9d:97:99:94:47:2e:3e:64:b1:4e:50:b4:43:f6:2f:4b:ca:c9:
04:02:06:0f:66:dd:e9:f5:35:bd:51:aa:19:49:82:92:95:11:
49:a6:b2:f4:53:f4:4d:33:6b:b5:34:5f:45:12:69:3f:46:2b:
98:16:e3:d3:f6:30:51:78:d6:59:1b:23:d2:d1:1c:7f:16:5b:
66:cf:01:82:14:15:f2:c9:74:c4:e8:5c:6b:76:ea:e4:2d:7c:
4e:9a:93:c3:aa:81:e0:10:84:27:23:c1:53:44:3c:5c:18:f8:
fd:55:01:1d:89:1b:5a:19:4e:a3:fd:7f:17:3a:5d:00:02:7f:
dc:42:4a:22:1f:6c:8c:a1:50:d9:bd:bd:36:28:79:72:cb:97:
19:40:15:d5:51:57:ac:9e:e6:f8:4f:05:8b:5b:70:53:f6:76:
d4:5b:ba:0b:00:f2:58:29:f7:40:e4:12:6b:f3:5e:40:c9:c2:
1e:0c:02:73:d5:d5:78:d2:52:b8:60:ce:16:46:9c:b0:8e:ea:
f8:b6:32:dd:2a:c7:27:67:d9:df:35:23:5b:39:a0:65:6e:b3:
4d:5a:30:66:ef:89:fd:cb:83:1a:4f:b3:26:5b:b3:c7:aa:03:
43:d6:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:38 2026 by rpki-client