Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: z7aAjYH+ci3lQr9kwPZgBzAmkUIVbljUv2qRAmLdBfI=
Subject key identifier: 62:77:06:84:0A:2F:8E:F5:4B:32:27:F0:A0:1D:E6:F9:9C:5B:56:15
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019CABD8E4D420F3AFB8AE67C4BBFF612118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: UdvBmzIKI82PgugwtLPqHLoyELjxqygReACPGn1sSok=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e4:d4:20:f3:af:b8:ae:67:c4:bb:ff:61:21:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=627706840a2f8ef54b3227f0a01de6f99c5b5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:f0:1d:67:76:97:18:35:56:a6:c8:3e:50:
d5:78:21:60:4f:f6:5d:46:e3:06:d2:bd:65:64:19:
a6:ce:62:15:e8:0c:05:71:49:90:20:52:79:29:34:
e3:39:2b:d8:5e:25:a9:d6:c7:c1:17:fc:32:25:a6:
b4:de:00:e1:c3:7a:1f:0b:f6:3e:87:92:9a:57:14:
9b:29:7a:88:b4:48:63:e1:38:a3:14:fa:98:11:b0:
bd:54:e4:08:86:9f:ec:91:50:3a:bd:07:cb:bc:1f:
26:3e:d4:d2:f8:76:39:15:27:da:2c:89:17:c7:6e:
68:22:f5:fd:12:f7:ec:2e:19:e9:bd:d1:73:00:f5:
72:0e:78:16:ee:92:c9:4c:f7:22:52:92:be:58:a6:
fa:0a:9c:2b:37:28:ac:b7:1b:cf:0f:a8:6a:2f:6c:
42:e7:75:d2:56:bd:19:c7:b9:33:86:5d:c8:4a:0d:
be:64:7d:d0:2d:c7:02:b6:91:07:93:61:d9:6f:90:
96:e1:38:92:4e:07:26:44:b2:05:bb:45:3f:08:9c:
43:2f:4a:fb:7c:58:89:d6:97:d8:87:2b:ef:54:11:
08:09:22:01:1e:da:3b:f8:cb:65:07:5e:1a:c0:71:
9f:67:ac:dd:66:6e:fb:a0:fe:99:70:bd:2e:40:c4:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:06:84:0A:2F:8E:F5:4B:32:27:F0:A0:1D:E6:F9:9C:5B:56:15
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:48:d8:a4:f5:ea:18:5e:9a:83:34:c9:44:4b:5a:7e:30:
20:f3:ca:d1:3d:8c:d9:7a:21:ae:3c:41:c0:ca:5d:65:23:93:
8f:b5:2f:40:9e:89:ed:f6:eb:46:5b:87:85:e6:78:da:d3:7d:
f4:78:ac:7a:17:72:2a:c4:7f:c2:e7:63:91:94:51:8c:2c:82:
bf:55:16:dd:4c:09:d2:d8:5f:33:59:8e:f2:0c:0e:ac:4c:6f:
01:85:31:21:4d:89:31:89:5c:70:b2:5b:3e:fb:9d:0c:32:c4:
98:79:a4:09:a1:22:c6:4c:15:9f:31:4c:d8:f4:95:95:e6:59:
2b:2c:70:9b:88:26:0e:16:35:17:77:3b:de:61:cf:91:da:c3:
22:51:ae:d3:96:ab:4d:01:26:82:ae:3f:0c:2b:fd:e7:ac:6c:
eb:f8:65:10:80:7a:9f:73:26:12:d7:68:25:11:5f:e3:ec:78:
05:0d:ce:0d:b4:9a:64:6e:35:45:9e:f0:8b:37:19:26:9a:2b:
94:7c:11:66:97:b8:d1:8c:b3:03:c1:df:47:ac:ad:2a:83:f9:
db:00:59:e4:e0:82:40:4e:7c:ca:74:ec:ab:36:bb:62:68:d0:
4d:5e:22:28:c5:44:38:83:dd:48:c8:94:22:5f:29:4d:08:b8:
61:6c:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:55 2026 by rpki-client