Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: VrGMR+z4KvXBpRIDOusRST10yTMZOqFEhRq+7adJEII=
Subject key identifier: EE:F6:E0:76:69:BE:28:E7:02:61:89:A1:02:70:19:24:AB:B6:72:D3
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019CAF7EBDD750E5F95AAF34D4208BA1A0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 038A
Signing time: Mon 02 Mar 2026 17:00:44 +0000
Manifest this update: Mon 02 Mar 2026 17:00:44 +0000
Manifest next update: Tue 03 Mar 2026 17:00:44 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: xMOF5rngbbwI3e5yC9uw0VOj21rCbgJktv6x1FfTdnM=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:bd:d7:50:e5:f9:5a:af:34:d4:20:8b:a1:a0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 2 17:00:44 2026 GMT
Not After : Mar 3 17:00:44 2026 GMT
Subject: CN=eef6e07669be28e7026189a102701924abb672d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:97:7b:a5:de:28:4b:53:e1:48:33:b1:55:
d8:8d:39:68:e4:a4:0f:c4:0c:e4:8f:86:d0:4a:2b:
1f:a3:96:50:18:b8:c2:46:b5:1a:3c:0c:d9:1d:d5:
d6:ec:58:cf:f7:b0:d2:0b:93:ee:1b:ba:07:74:88:
22:c8:fa:28:02:51:b2:cb:0c:b1:37:d8:a4:a6:9b:
b3:86:f0:c2:c6:eb:2c:3e:0d:99:4a:bd:e5:5e:ed:
89:6f:fd:2a:ed:4a:62:99:53:f1:56:e4:d5:6f:dc:
b0:77:47:68:5f:d8:74:35:06:bb:d2:0c:54:b8:45:
c7:61:ad:45:0c:f1:32:d7:cf:0e:46:2d:b9:5f:80:
24:89:ff:82:d1:69:45:58:04:5e:d3:2f:27:d1:ae:
04:20:f6:ea:d3:3b:5e:e5:31:16:17:4e:98:a3:b0:
b2:b6:c6:11:ff:a2:cd:a0:c4:3b:6f:7d:4f:ff:d2:
bd:63:c5:6e:b5:59:bb:6d:98:87:7e:7e:59:db:50:
9e:73:d1:2a:f9:1d:e5:19:13:05:12:02:d4:52:69:
93:96:8b:c4:8c:30:b9:4a:e3:e6:e0:a8:20:33:ae:
35:d3:6b:1c:de:f5:ab:62:1f:8d:5e:ae:70:9f:ce:
0e:58:87:5b:f8:40:41:b7:fc:d0:58:9c:a3:c2:dd:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:E0:76:69:BE:28:E7:02:61:89:A1:02:70:19:24:AB:B6:72:D3
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:a2:0a:a6:44:9a:98:d9:93:b3:f2:4e:bb:58:e7:45:41:
63:7e:52:b8:c3:0c:87:ee:53:73:3a:83:f7:a3:b0:6e:c6:e1:
14:8c:5c:45:cf:cd:92:76:eb:50:02:c4:af:b0:8b:be:64:96:
4e:6e:3d:bb:28:2a:36:ab:f1:30:33:56:69:08:ee:2b:5e:30:
10:44:98:46:d4:58:a1:be:78:73:24:2e:7a:8d:0c:93:3a:f2:
fa:f4:c9:2d:23:33:cb:14:aa:c3:67:f6:ee:8c:70:1b:f3:54:
73:57:85:3c:fe:a3:80:e1:af:19:a6:a2:cf:17:ed:e1:77:cd:
a2:5d:0e:c6:d5:0c:18:d7:9e:52:02:b4:cd:ec:a5:8c:ca:63:
3f:09:d3:c0:51:a2:4b:bd:fb:d3:4f:e6:bd:70:80:ae:7e:0d:
69:f8:8f:6b:7b:57:b5:ae:c2:11:26:c3:6e:4f:e2:09:dd:03:
e6:89:04:b7:b6:68:f7:fc:20:46:e2:3b:cc:58:80:43:5c:4e:
be:41:92:4b:20:96:fe:5b:65:b9:bc:3c:61:0a:b5:f7:a3:b8:
4a:96:aa:66:bd:f9:6e:7d:5b:22:50:70:f3:d8:54:c5:26:2c:
c5:92:d9:c4:86:c1:90:01:00:b1:1c:5b:d7:66:df:4a:5b:45:
2f:ad:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:12 2026 by rpki-client