Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: COLBuZ+KBAa5p8bd2tCY06f9GfoLBEPkDYks+Rxzs9w=
Subject key identifier: AA:4B:BA:4E:E2:7B:B2:59:51:93:ED:E8:EE:1F:A6:62:53:6A:09:A1
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019CAD596A2332F9C6878026CFCC8A1E0137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0412
Signing time: Mon 02 Mar 2026 07:00:44 +0000
Manifest this update: Mon 02 Mar 2026 07:00:44 +0000
Manifest next update: Tue 03 Mar 2026 07:00:44 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: E0SZnkVczjZFLuNh+2oHmdacw0e9refEGhuKyYzKaF8=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6a:23:32:f9:c6:87:80:26:cf:cc:8a:1e:01:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Mar 2 07:00:44 2026 GMT
Not After : Mar 3 07:00:44 2026 GMT
Subject: CN=aa4bba4ee27bb2595193ede8ee1fa662536a09a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:83:eb:78:54:ed:5d:4f:46:d6:18:e5:ef:
67:eb:15:f2:d2:e9:d7:06:60:8a:70:82:7f:7a:a7:
56:94:68:1f:40:cc:ea:88:be:62:b4:80:3f:18:99:
86:98:f7:f8:45:14:73:eb:ea:68:be:88:f3:f5:9c:
c8:43:bd:f3:17:bb:f7:1e:4e:20:d2:c6:99:72:d5:
7f:0e:92:34:fa:51:93:83:71:1c:27:52:a0:37:27:
cd:99:5f:98:cb:a0:76:9d:b3:76:86:f6:05:e8:c9:
35:97:f2:13:cb:45:11:9e:ce:b4:5e:19:0e:d0:10:
93:89:bf:39:41:79:dd:8f:98:39:7b:cb:b4:0a:8c:
e8:c7:9a:79:19:aa:54:23:72:0b:6e:93:98:33:0e:
8e:fd:c1:30:22:13:85:a8:46:d8:07:7b:fb:ed:cb:
61:9a:cc:a9:a0:ee:a8:40:73:12:78:76:e6:8c:1e:
e6:94:65:0a:36:1b:03:26:ab:1a:1e:9d:53:7a:ac:
b4:eb:4d:6a:a2:6b:52:23:a4:fc:0d:d2:2d:78:72:
29:8b:cb:c0:57:1e:05:8b:28:42:29:78:4c:8f:6e:
65:1e:30:7d:59:ed:04:2f:94:a3:28:c0:81:d2:b8:
72:5e:17:ad:d4:96:b1:c8:fa:f1:1c:66:84:7a:2f:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:BA:4E:E2:7B:B2:59:51:93:ED:E8:EE:1F:A6:62:53:6A:09:A1
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:84:ac:9e:e1:ef:09:81:4a:29:ef:2c:6e:17:f5:79:c9:0b:
56:3f:d4:04:29:ae:c3:9a:ab:1c:71:75:f1:bd:65:01:2a:d5:
15:8e:ab:aa:63:b5:45:29:aa:74:0b:87:5e:4a:7b:69:3e:49:
33:1b:93:49:21:50:a0:80:29:a7:c0:f2:79:77:1a:cf:01:f4:
37:27:97:63:e6:d8:1e:23:2d:91:9d:1a:a8:36:28:03:88:95:
d9:64:9b:8d:26:12:1a:87:85:28:76:6e:0b:17:e2:eb:f1:35:
7a:1c:86:28:a7:40:98:c5:77:25:f2:17:34:93:23:cd:c9:42:
5a:97:7e:e0:4a:83:89:3e:bc:08:3a:cf:d5:4f:c0:82:03:fe:
d7:63:5c:43:b9:41:9e:80:08:08:23:77:ea:7b:83:9b:1a:d3:
dd:e2:a7:e7:7d:58:3f:a8:0b:de:08:f5:06:79:83:77:01:63:
88:54:c3:b5:33:1b:f3:6a:d6:ad:48:5c:02:7f:d6:0c:70:07:
53:6c:45:30:f8:27:32:de:76:d9:de:fc:d6:c4:09:69:02:f7:
ff:e7:c5:a3:2d:03:1c:3f:48:a1:bf:bc:36:4b:a4:cc:ae:2a:
02:1e:45:46:e5:e9:c7:53:02:03:64:bc:55:10:10:0c:64:f8:
75:7a:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:50 2026 by rpki-client