Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: 3B1T7VuD6ushTiPhcjKTSbixYvga0+A+ftSCiyvqMKw=
Subject key identifier: E3:61:DB:F8:90:AF:70:16:84:D8:57:55:9B:98:36:2D:36:20:1B:4D
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019CADC78DC8FDDC70F3664D8134F7A76C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0F3D
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: zkT7jLI7syBMChb0PZOJQCu9lNo/y09gX3w672erdhM=)
2: avC4TDy0YNmu43wu3PPZQnyz3tY.roa (hash: SjlTG6q/Qs6sxucjwFRvD4MugPMGQX1MddPjbQLIX8o=)
3: pqWAwtSrVWHhYeLyoOZYwb_89MY.roa (hash: UtepypB/1E+cJ1/s4IJjEbaQqJ0MlYB18cpRtSY7yhY=)
4: u0N0v0cqXVFGT5AQTDctFWn93WM.roa (hash: IuAcsweM8Zm44/Mf/txoK9/5Poy7ZOdXCqud2LmxB9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8d:c8:fd:dc:70:f3:66:4d:81:34:f7:a7:6c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=e361dbf890af701684d857559b98362d36201b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:61:83:e8:57:cf:7d:45:bd:24:5c:e9:cc:
af:61:c4:5d:50:93:62:58:c5:3f:5f:79:35:37:73:
55:5b:a3:4f:43:07:e1:08:fb:6f:68:47:25:0e:74:
14:0f:9e:0e:ad:77:43:59:da:64:84:15:ea:17:b1:
ea:8e:7a:5f:a0:28:5c:4f:f3:48:5f:05:3f:55:d2:
1a:ae:60:d0:65:71:a5:ea:90:5a:df:2d:ac:67:4c:
06:c4:f7:60:33:f5:a1:41:f4:e4:9c:cd:7d:2a:26:
bf:e9:1f:94:70:02:a8:d6:c9:56:b8:15:b5:48:cd:
d6:69:a3:0f:f6:ec:3b:9f:03:e1:46:04:06:44:e8:
31:55:81:15:5a:d4:b1:e3:fe:fb:ef:94:e4:e5:cc:
3d:14:47:4d:60:17:b4:6c:5f:fa:88:07:a0:39:55:
cb:92:89:b6:8c:cd:f6:aa:ba:eb:80:90:01:3f:dc:
f5:12:d3:51:8d:94:75:17:65:71:70:8e:bd:f4:d3:
ab:2e:7e:f5:f0:e2:d4:4b:53:c1:33:de:21:eb:05:
38:dc:1f:e1:1e:fb:01:a6:96:0d:41:bd:57:9e:4a:
9f:65:d8:6a:2a:10:cd:e2:6f:e4:e3:72:74:f0:72:
0d:78:e6:25:e9:02:3a:88:f3:83:c4:d5:0f:80:b1:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:DB:F8:90:AF:70:16:84:D8:57:55:9B:98:36:2D:36:20:1B:4D
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:9c:33:50:62:91:13:1b:2f:df:a3:55:70:23:21:05:6b:
98:d1:74:42:a9:54:1f:9b:42:c8:54:0b:8f:b5:a0:85:a4:96:
6b:a3:8a:2d:ef:5e:41:18:93:74:d5:4f:a4:80:ed:2c:e4:e8:
55:a3:71:ab:d7:c6:50:50:03:0b:91:0d:f4:6c:36:ef:b2:0b:
fe:af:51:cc:67:d7:3f:39:b7:55:30:c9:55:91:94:07:54:e2:
b9:e4:97:41:3f:b2:ad:6d:65:41:45:69:8c:6c:ec:b7:98:5e:
36:37:b7:e3:87:c4:e8:ab:aa:15:a6:7b:b9:32:89:79:77:6d:
4d:04:dc:70:6c:f6:8b:32:cf:88:20:39:fa:61:dc:2f:83:7c:
d8:45:93:40:27:34:f5:45:16:de:6a:df:f8:d9:78:08:98:df:
06:86:12:64:32:98:d3:81:b3:05:60:71:97:96:00:b4:72:48:
6b:60:95:43:2e:9f:74:be:fe:2b:48:90:a2:0d:34:bf:34:42:
f5:b7:e3:14:d2:ed:84:77:54:82:c6:fa:e7:a8:55:4e:17:21:
87:1d:26:df:2e:aa:19:d0:47:ad:52:cf:44:00:cb:d0:83:3d:
0c:25:3e:12:56:b0:56:3f:9d:24:39:8a:cc:f4:c4:a2:24:30:
20:82:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:24 2026 by rpki-client