Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: lJej/aQN3oTJMneyEFCyJVdOtUpH67OGq8LmNQCKZrs=
Subject key identifier: 09:46:22:59:3F:21:01:04:1D:F1:FC:3B:18:7F:0E:13:D7:E9:ED:7D
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019CAC46B2052B6C0AABBFEC2C5DED1BBDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0D56
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: c0s8P+0X7wI8yY1Zf1FAJ+vQ9y+XcpMWz973l3qpLBg=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b2:05:2b:6c:0a:ab:bf:ec:2c:5d:ed:1b:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=094622593f2101041df1fc3b187f0e13d7e9ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:6e:9e:d6:f1:84:a9:88:62:57:6f:95:f2:
c5:df:bd:d9:9b:5b:fb:75:38:0b:36:75:e5:82:f2:
02:ca:8c:52:1e:b5:26:3d:d2:37:87:dc:11:cc:0a:
a2:ce:d1:49:79:61:e3:fd:6a:12:44:82:2a:74:3a:
08:75:73:31:45:b9:29:2c:fe:9f:70:b6:f9:19:b3:
8d:55:4c:bf:fb:b3:cd:d7:00:e3:ee:39:ea:99:a1:
cc:5e:e1:41:f3:8b:81:3c:b0:fc:64:39:c9:eb:07:
f0:67:33:a8:d0:d6:61:e4:e9:9a:bc:00:14:cc:fc:
5f:2e:d9:54:4f:bd:5e:92:1d:86:38:d1:26:38:b5:
a9:c0:a7:45:84:93:58:21:e6:32:cf:e5:fb:79:a9:
7b:2e:16:5e:45:34:ef:ae:f0:bf:28:97:e7:cd:8d:
c5:a5:04:3e:95:28:05:5c:fb:c0:74:14:81:bd:9d:
e1:18:b8:41:7b:83:7e:b8:71:65:72:6e:de:2e:bd:
14:7e:ba:3f:f5:52:b0:b9:a9:da:ac:e6:12:d9:ba:
9d:16:a8:40:9b:17:9b:61:58:94:17:b0:40:db:54:
3d:06:27:00:d4:03:64:aa:ff:1c:ce:9c:e0:c0:bc:
8b:b1:6f:d4:10:4e:e6:9d:bb:20:f6:8d:83:5a:73:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:22:59:3F:21:01:04:1D:F1:FC:3B:18:7F:0E:13:D7:E9:ED:7D
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:e0:34:e9:72:eb:a2:69:26:89:d9:83:03:1a:e9:60:0c:
b4:8d:e8:9f:8b:13:a6:bf:76:02:1c:a2:0c:61:99:9f:06:8c:
9b:e6:d2:04:14:3f:bb:f4:a7:94:bc:58:9a:17:82:74:c8:11:
39:d1:82:52:b4:7c:4f:a8:58:10:2b:db:2c:f8:21:b7:63:e8:
79:03:8d:66:33:e8:94:1f:52:58:70:58:fe:cf:9f:50:49:cc:
07:99:bd:01:6b:22:a9:23:98:71:24:bd:9b:3e:77:04:13:24:
da:29:9d:0f:53:b6:e1:90:13:b3:83:1c:52:28:94:36:82:44:
05:1f:57:34:bf:24:05:eb:9f:c7:92:74:71:3a:2b:06:fc:36:
50:13:43:ed:cd:72:c0:6b:fc:12:64:90:ec:b7:a5:2e:07:1d:
ca:fc:db:a0:12:9d:1a:7e:9d:7e:dd:c4:17:4f:94:c2:3c:1d:
07:4d:a6:a1:a9:97:e5:a4:1d:d9:26:f9:69:16:a4:b2:6f:90:
1a:3e:20:4b:d3:07:b3:dc:0f:e9:d9:32:fb:2c:06:af:e2:9e:
0e:1c:cc:78:27:a9:95:25:52:be:bf:c6:c0:b7:53:35:fe:f2:
df:61:e4:95:c6:a8:ab:93:e6:e2:fc:90:aa:c5:66:36:e4:3e:
b9:58:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:32 2026 by rpki-client