Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: 8XU1Xxg3w6IrzjtGt0y8PiZV9weIaKkEsK/nDyP2WZE=
Subject key identifier: 01:35:8C:6E:F4:63:57:12:1E:1B:17:CF:B3:AA:ED:77:0D:94:74:E1
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 019CABD9A9143A15E720BD361D3AAE913F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: VE16MH4U9PBl99SYLncP8RgeHFV1mEvw7oTHiWRE34Y=)
2: vXSPj4U0XPgUCORzKqKn2pQ-_54.roa (hash: a+QqfJndzh+WZAcq/hkoF/C3W7oEsp7bn060vJhpI74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a9:14:3a:15:e7:20:bd:36:1d:3a:ae:91:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=01358c6ef46357121e1b17cfb3aaed770d9474e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:c2:4d:cb:d7:36:de:73:b7:40:22:3b:03:
8b:40:db:0f:9b:73:6e:3f:6e:9a:05:fe:80:c9:fc:
8d:67:1f:b7:fb:44:4e:b9:5e:33:24:6b:e5:29:fe:
e8:98:21:4d:29:a9:9a:98:f4:55:44:99:79:f0:50:
16:6f:4e:8b:46:25:5e:bd:38:6b:78:28:8a:7e:32:
0e:23:e5:9c:25:2c:c4:20:68:fa:72:d1:a0:33:c7:
81:ae:4d:ec:98:44:e7:14:13:8b:65:3d:f1:53:11:
57:a4:85:8c:07:5a:b9:c3:08:28:5d:a7:02:55:8d:
2a:63:0b:18:93:a1:ee:2b:dd:3e:a8:e3:65:93:be:
8c:19:0c:e9:46:27:b0:93:2e:5d:ac:11:0f:5d:2a:
ac:92:0d:93:6e:ab:84:76:d7:8a:aa:4c:57:07:8a:
aa:31:82:e7:bb:c4:d6:34:bf:3c:af:af:7d:74:5a:
db:33:e9:5b:95:83:9d:06:1f:6a:5b:5a:1a:53:4e:
17:bd:01:c4:c0:a4:d6:5b:fe:b5:1e:6e:ec:83:15:
68:1b:89:89:96:94:e0:86:40:c7:4c:42:14:9c:ac:
3c:9f:23:d6:0b:b5:8c:f8:1c:28:4f:1d:fd:ff:40:
d6:eb:01:2f:da:3b:63:24:ff:d6:25:e7:aa:dc:26:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:8C:6E:F4:63:57:12:1E:1B:17:CF:B3:AA:ED:77:0D:94:74:E1
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:3a:22:d6:f3:48:a1:d6:62:97:9a:4d:ff:3e:88:0c:a4:
fb:17:4c:ac:cf:5c:80:0e:0e:db:f7:93:c8:c1:7f:32:f6:cc:
92:22:1d:71:2c:32:73:99:bc:e7:61:59:bf:7c:3b:4c:48:f7:
b6:40:b2:70:f8:f9:00:b3:35:c0:57:06:e0:09:15:73:47:39:
c2:5f:03:75:70:fb:34:dc:e5:b0:2c:9c:b7:b0:c4:93:72:5f:
ff:92:07:b8:0b:8f:1c:4b:a0:ac:6d:aa:7a:cf:22:3d:3e:e1:
a5:a5:0c:b9:ea:3b:cc:fc:b2:e6:f4:11:59:58:24:14:c4:df:
4c:81:b3:52:d6:23:c7:32:0a:72:31:80:56:c5:d3:6f:04:2e:
ae:88:dc:23:da:4f:1e:02:23:72:b5:c3:89:d6:c4:f2:e9:43:
36:71:5f:7a:09:5c:bb:2b:e1:b8:da:5f:82:d2:96:a9:5f:42:
7f:be:20:40:f8:23:c0:9e:1a:52:7d:80:d4:4b:cd:39:1d:c5:
18:22:67:ed:d1:b4:cd:cf:c4:d6:cf:c7:f0:76:0c:19:40:c3:
ea:f7:28:cd:4e:57:94:8b:e1:8c:32:43:be:49:71:05:91:c7:
f9:cf:f4:0d:15:2d:03:d4:dc:ca:cd:8f:84:78:ea:cd:12:c0:
b3:00:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:47 2026 by rpki-client