Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: LMQXtVOBde/PmyJw4x/WAP2Edi+zBKNGsjPW6CGiUKI=
Subject key identifier: 6C:2C:F6:48:B6:11:11:B8:66:53:AE:8D:A2:D7:C9:75:6A:2A:20:AC
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 019CAE34EBC580F44765CB58C1905320E431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0F3C
Signing time: Mon 02 Mar 2026 11:00:29 +0000
Manifest this update: Mon 02 Mar 2026 11:00:29 +0000
Manifest next update: Tue 03 Mar 2026 11:00:29 +0000
Files and hashes: 1: B2wOUgohqeye9MfPxQxtz9YTAls.roa (hash: 1bpwvIgjEWlAzlHrAhdbiAA3AdkV/y3b10LOBBviIzw=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: XKXdAsCRLDY04wsvn+MDCA6MNFlZeSrFweRj2vQk0U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:eb:c5:80:f4:47:65:cb:58:c1:90:53:20:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Mar 2 11:00:29 2026 GMT
Not After : Mar 3 11:00:29 2026 GMT
Subject: CN=6c2cf648b61111b86653ae8da2d7c9756a2a20ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:07:cb:4a:7e:67:d0:dd:ee:f9:c5:48:16:
3e:10:99:8a:70:50:11:89:7b:57:eb:de:ad:f1:d5:
45:50:ea:06:90:e3:23:cf:73:99:55:cf:7b:94:73:
1a:e0:99:fb:58:59:7a:d9:3c:01:f0:f2:33:26:31:
07:65:d2:29:93:50:1e:d9:52:39:43:57:f8:b5:23:
0e:35:35:bc:a5:7c:fa:6e:2e:65:40:3d:9a:aa:7e:
df:4f:60:46:eb:03:59:22:6e:bd:a3:0b:22:80:0a:
4d:06:48:ef:d3:8b:3a:1b:cc:b2:1a:55:f0:4c:0e:
ca:c3:15:0f:f5:8e:4c:9d:5a:6b:8c:2f:4c:3d:3a:
79:db:18:76:78:b0:db:c5:fc:dc:05:6d:04:c1:91:
dc:48:d8:89:96:b5:a7:c0:3f:41:77:a6:6e:26:c1:
ac:69:b3:00:04:b1:87:02:c5:a2:4c:9c:f1:a6:6d:
97:8e:4d:fe:3d:28:d8:a5:85:fb:c4:42:70:ac:92:
02:49:7d:18:24:08:93:a3:fa:22:a7:2a:e6:20:1e:
59:f0:46:13:77:dc:79:9b:de:fc:2d:cc:62:75:bd:
a2:6f:ce:7d:50:eb:9e:2b:3f:ed:24:b8:19:27:60:
54:25:17:92:af:0e:2e:71:af:63:e3:0b:bd:86:29:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:F6:48:B6:11:11:B8:66:53:AE:8D:A2:D7:C9:75:6A:2A:20:AC
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:6d:24:28:fd:22:4e:e9:89:82:fa:07:7d:7d:62:95:c4:
0c:6a:d4:c1:4c:20:3e:98:e8:77:b6:44:17:89:2d:d8:33:21:
c9:eb:3b:47:9b:14:03:4b:00:8a:68:b7:b3:2c:ba:19:7d:80:
bb:45:84:d6:7a:08:30:5e:c8:1b:3e:31:8d:26:8e:c3:50:33:
f7:e6:ed:a1:8c:be:99:da:4a:b5:bb:58:11:52:9b:63:02:2e:
dd:f9:b6:87:c6:69:63:1f:fe:d9:43:b2:1a:49:25:19:d3:4f:
c9:f5:ea:5a:3c:4f:5b:c3:9d:66:36:bb:86:2b:fd:46:f6:06:
b2:3d:bb:16:c3:e1:46:34:95:f4:02:e9:98:58:df:f7:84:69:
5f:27:24:c1:84:2c:0e:a3:ff:59:af:3c:78:1a:22:45:ea:28:
19:ee:3a:e3:c9:b0:90:67:7a:01:95:30:5a:51:c8:47:f5:9c:
fd:ea:de:c4:bb:2f:88:62:d2:0c:f9:43:03:2c:71:13:fe:6b:
b3:e1:57:b6:46:32:e6:35:f3:d0:38:9f:55:4d:7c:3f:34:b6:
02:59:80:f0:a0:41:b1:b6:ca:f1:63:2b:24:4c:d1:55:c3:8f:
6c:68:88:48:7b:81:f7:8a:2b:ce:56:6e:ef:5d:b4:91:68:62:
20:d0:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:26 2026 by rpki-client