Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: pV004WWX6OREXCRfQWqgG4X3gDMR1hohIYAtR9p7x2o=
Subject key identifier: 41:7C:46:C7:22:7D:9A:64:16:E4:F4:37:C6:DD:95:15:57:33:3F:0C
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019CA9EB636A35E087D947BB54E6F0069E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0162
Signing time: Sun 01 Mar 2026 15:01:41 +0000
Manifest this update: Sun 01 Mar 2026 15:01:41 +0000
Manifest next update: Mon 02 Mar 2026 15:01:41 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: fw8L8f+76p+4tVWLQER/zodxb2jSTYM8V7vccUGyY+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:63:6a:35:e0:87:d9:47:bb:54:e6:f0:06:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Mar 1 15:01:41 2026 GMT
Not After : Mar 2 15:01:41 2026 GMT
Subject: CN=417c46c7227d9a6416e4f437c6dd951557333f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:1c:35:e4:4d:39:75:1f:a8:fe:1e:de:35:
4d:3c:0b:42:8d:c4:17:3d:e7:90:51:3c:e9:1a:0c:
7e:62:9b:09:52:32:ac:12:b0:29:d5:81:fb:9c:5b:
e9:e2:eb:8f:2b:e9:30:50:d0:86:f2:d5:a0:55:c7:
09:d8:90:bb:21:ca:5d:4e:25:be:91:df:2d:de:67:
1d:eb:e7:a3:b0:3b:2c:57:c2:00:ab:e5:be:51:f7:
83:91:ed:e9:2c:a7:79:da:c7:f9:60:04:c6:fd:2f:
a0:85:bc:84:86:cb:24:18:b7:ec:27:19:6c:c1:35:
5f:21:e5:8a:ba:a1:94:49:fd:d3:d8:64:70:1d:d4:
6e:8f:8b:a7:b2:4f:44:a1:f8:7a:f3:bf:fa:25:a4:
07:63:3f:a4:02:7a:8a:df:de:35:d9:58:14:3e:b5:
a8:52:6a:94:d2:32:5a:55:eb:b4:9b:0c:e0:aa:7d:
51:36:78:f8:f3:69:d4:1d:f7:f4:e9:86:40:97:04:
6f:82:1a:d5:45:8c:10:ab:d6:5b:ed:24:99:d9:67:
00:83:6c:e4:c3:91:bc:64:67:91:56:fd:a9:47:2e:
ab:69:79:b5:d0:a8:e7:53:87:76:7d:fd:0c:cc:b1:
e7:d9:26:d5:11:4f:f1:25:e1:eb:1b:fe:ff:cf:ce:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:46:C7:22:7D:9A:64:16:E4:F4:37:C6:DD:95:15:57:33:3F:0C
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:80:76:a3:fa:48:66:cb:88:b2:b0:eb:fc:4d:6d:16:e6:
ec:8a:97:d0:4a:c0:14:6e:3a:64:fe:3e:0e:6c:95:d6:62:d0:
f2:9d:b5:37:5c:97:7a:60:8e:94:bd:85:54:ce:24:da:a0:90:
1d:12:56:c0:65:82:9f:98:68:4d:55:89:ce:93:1b:57:c1:6a:
90:f3:cf:c7:91:ae:9f:1f:bc:af:21:1a:f5:20:61:f5:ca:6d:
b3:07:a8:8a:a6:4c:87:fc:49:df:ca:e6:e6:14:a5:dc:54:79:
3a:6e:b1:af:72:e7:b1:98:28:14:2b:e5:aa:50:db:65:62:22:
a3:b0:81:e1:11:f5:d4:4a:28:b0:2a:7f:da:59:43:38:98:12:
80:e3:27:fb:02:fb:32:77:96:61:91:ed:a5:44:fa:6d:d7:35:
5d:83:eb:a5:27:44:05:ed:db:a1:78:b3:6f:4e:d2:c2:50:9d:
bb:2e:51:64:1d:ac:b3:66:a1:09:99:ac:b7:7d:1a:86:80:94:
bc:c4:c1:dc:1b:4e:4f:fe:bb:ab:48:18:8a:f2:f4:71:24:89:
20:a9:50:a0:4a:2f:83:e1:45:bb:a9:49:b9:f8:21:5e:3c:cd:
8e:ab:a8:c3:e7:83:9e:74:11:1d:de:49:d0:61:cb:c0:63:1d:
88:93:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:03 2026 by rpki-client