Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: mmUsePcydQwPmC4o9pcGzP05bbyks8glC/zjku6l8uc=
Subject key identifier: 8F:81:42:3A:16:17:C5:C9:54:3F:63:96:4E:59:10:A6:8E:0D:C5:CA
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 019CAA2162276A5205F6D60B50B2BF1899D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0F2C
Signing time: Sun 01 Mar 2026 16:00:40 +0000
Manifest this update: Sun 01 Mar 2026 16:00:40 +0000
Manifest next update: Mon 02 Mar 2026 16:00:40 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: ejfEudC+r18xwG4QhpOhjY8wIt0RJfFa+k4Bvqs1WoY=)
2: jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa (hash: ASLwprhv9CqnRanTW6K8l0OBhjWckJJYB7wKNCuJgis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:62:27:6a:52:05:f6:d6:0b:50:b2:bf:18:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Mar 1 16:00:40 2026 GMT
Not After : Mar 2 16:00:40 2026 GMT
Subject: CN=8f81423a1617c5c9543f63964e5910a68e0dc5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:ed:bd:d6:79:d6:e8:a8:0b:f7:14:17:f7:
7a:d6:71:a1:2e:69:97:a0:97:98:f6:d2:04:65:2c:
28:10:1a:90:98:63:0a:fb:be:dd:9a:87:ed:b3:9a:
f3:da:95:c2:9e:a4:46:20:4e:97:d0:7d:ce:3f:9b:
ce:99:d3:0d:39:1c:7a:c2:8f:dd:8f:bf:00:98:ac:
3f:40:05:4c:e3:26:ee:84:2c:e4:87:f8:65:d1:94:
95:c5:67:3f:f0:63:c3:fc:33:7d:33:ba:3f:52:1a:
91:e0:e4:53:07:53:8f:83:0e:c8:28:a3:73:95:3e:
bb:67:c5:21:73:a4:2b:3a:72:e5:15:3b:87:10:c6:
18:df:65:86:8a:d5:48:36:61:e1:3a:f6:55:bd:f5:
55:bb:e8:d0:78:22:c7:d9:d0:5e:13:95:9d:53:c3:
fd:be:f0:1f:b9:5d:8f:2a:8a:0b:a9:6b:c3:1d:a9:
65:8e:b6:e4:02:d1:d5:66:eb:12:55:8b:f0:f3:94:
4d:63:b2:a2:7a:b6:e0:e3:9b:c4:eb:d0:33:16:33:
06:3b:94:b9:d0:6c:f2:2c:37:e8:03:c7:cb:27:f7:
b3:3e:9b:1f:14:c0:ae:ba:92:39:fd:e7:d2:4a:2d:
36:eb:91:1c:ff:f8:75:bd:a9:32:57:9f:27:80:10:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:42:3A:16:17:C5:C9:54:3F:63:96:4E:59:10:A6:8E:0D:C5:CA
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2b:a3:33:a5:7b:07:27:96:37:db:a9:b3:6c:01:80:84:08:
2e:7b:53:46:cf:e7:32:f7:54:7a:3e:9b:c0:28:5b:05:bb:d1:
e7:16:69:5b:53:af:35:82:36:e5:21:ae:e7:eb:11:e9:dd:d2:
3e:31:b3:8a:5c:3f:5d:35:bb:15:d5:3b:81:fa:1b:88:13:f3:
6a:ab:40:37:80:89:32:af:df:23:61:95:91:72:5c:67:4e:a5:
d4:ce:ed:8d:72:56:b2:b8:89:ae:7a:cb:d0:0d:f3:6f:ce:e6:
22:97:df:08:bc:61:53:68:a8:ca:04:44:f0:d1:c1:7f:1f:53:
7f:c5:c1:08:5d:6f:c1:1f:df:da:86:5f:6b:65:9a:55:06:8d:
dd:b9:42:42:b5:ba:12:fe:b2:f5:7e:3c:31:c9:bb:0d:9c:a6:
ae:a8:b1:de:30:88:f4:93:50:8a:e8:1a:13:70:aa:67:1a:4a:
e2:25:b9:55:e3:ab:c2:d3:f2:d1:58:dd:6f:97:62:89:44:7c:
24:4f:b5:b8:77:9d:17:39:01:54:f0:e0:06:66:57:18:ea:e9:
fe:6f:19:bd:11:b7:7d:8c:72:1c:69:a1:01:d1:77:c8:e7:fe:
c4:3e:02:cf:ce:8d:8a:62:83:98:42:e7:b1:75:7b:3a:e4:7d:
6b:17:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:35 2026 by rpki-client