Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: a0yQ2fesDa84LsSQROkMS1SuFAjZi5hMWniv2IiapYA=
Subject key identifier: D3:1F:5F:EE:F4:86:35:B0:6A:75:16:1C:26:B6:D5:B2:5C:CE:32:20
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 019CADFE720C35A8E1E388B14F9C58AE02DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 166E
Signing time: Mon 02 Mar 2026 10:00:59 +0000
Manifest this update: Mon 02 Mar 2026 10:00:59 +0000
Manifest next update: Tue 03 Mar 2026 10:00:59 +0000
Files and hashes: 1: 9GBWdjPw-BNZrNnli56ahbKMkEA.roa (hash: Oupb+aKsrMig1VIpCyGRplvadhLjMfLJm8H0dkmS7pE=)
2: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: 5v6HIPKfFvQyxsFOdEuh20KddqCDwAb0UF8ST4E/XBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:72:0c:35:a8:e1:e3:88:b1:4f:9c:58:ae:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Mar 2 10:00:59 2026 GMT
Not After : Mar 3 10:00:59 2026 GMT
Subject: CN=d31f5feef48635b06a75161c26b6d5b25cce3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:22:17:11:fa:44:68:bc:93:f0:ea:7d:2e:
32:a1:f9:ed:15:df:7f:ae:5b:98:6d:38:be:b9:2e:
75:c5:50:b7:da:4d:75:13:d2:75:a3:8f:a2:17:65:
09:86:6e:5e:dc:3f:23:0d:2b:9c:8e:b3:88:f9:6a:
3d:a1:ab:61:92:3f:d1:f1:ed:88:d0:85:a1:03:a2:
44:54:65:e3:e4:8e:c6:a6:c2:34:92:01:5d:a2:21:
a4:7a:5b:1d:fa:85:9f:7b:f0:86:c5:3f:f9:3c:2e:
78:ec:0a:53:1d:45:69:06:82:fc:04:e7:07:f8:91:
d2:4a:b3:d7:0c:21:83:48:4c:71:ed:3f:46:b2:9a:
64:a8:69:82:f6:59:9c:8c:85:ec:a6:96:af:65:c7:
d6:4e:48:76:2f:8b:d5:a7:c9:2c:c1:86:c7:da:bc:
a7:b7:02:c6:cf:32:71:0e:54:07:a6:b2:c0:38:0b:
05:68:8e:7d:f7:11:d3:4e:77:46:0a:1f:40:29:50:
53:38:8b:c2:cb:ce:b1:ee:e4:16:e3:6f:ac:f1:bb:
3b:4f:81:e0:a9:91:98:ba:79:22:5c:64:fd:57:8d:
c9:5b:3b:da:ca:58:94:f1:b0:2b:3e:19:d6:6d:02:
4f:ec:98:7a:20:0e:af:dc:aa:55:f9:17:fe:1c:34:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:5F:EE:F4:86:35:B0:6A:75:16:1C:26:B6:D5:B2:5C:CE:32:20
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:e0:45:e3:7e:f8:43:e3:1a:b6:f7:9b:ed:b7:aa:71:10:
4b:1b:4c:6f:6b:7d:8c:8f:cd:98:e7:de:0d:f6:50:0e:b6:0b:
fe:af:9b:e5:3f:7d:91:cd:e0:29:35:62:4d:e6:e8:4e:92:45:
9d:a7:29:e3:8e:4e:0c:26:96:33:af:67:53:c9:b3:20:64:d6:
a8:6e:4b:ba:9f:86:f0:08:cc:55:73:81:48:a7:47:19:c8:19:
28:bc:a8:db:18:e0:ac:9e:dd:6e:4f:19:4c:1a:b0:85:1f:8a:
fb:0a:16:07:e4:ef:5e:4e:8f:fd:af:f9:55:d2:8a:5f:e5:89:
16:bc:ad:1f:54:1f:18:90:05:eb:9d:2c:96:13:92:18:55:56:
59:db:1c:9f:6e:2f:c7:d6:27:07:a9:60:c8:96:4d:48:cb:50:
69:3d:8e:18:94:01:ad:32:7d:51:b9:e6:28:32:da:0b:01:dd:
f8:c6:e9:9e:1f:38:cc:57:dc:0b:28:f2:6f:9f:f9:a6:64:3a:
fd:a4:3d:fc:8c:1f:1e:e4:83:06:13:db:49:c1:e0:8e:60:18:
c9:c5:3d:38:12:ec:ef:98:b4:16:36:d0:44:ed:16:4f:bc:61:
cd:cf:60:94:ac:5b:d7:0b:8c:5c:9a:39:c1:d7:d2:56:9b:30:
ff:a5:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:02 2026 by rpki-client