Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: SZzxzE0oJwklrCQHHn9qFYto0dxWbUJcjL6d2eEbJXA=
Subject key identifier: 4A:F3:F9:6F:A0:EB:41:D2:56:5D:43:03:0E:D9:A7:85:09:1B:F8:D3
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019CAC7DE813F7EB5A6ECBEBB5AADCCAEE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: ABUTPtvd09pzSLO39dzmG5dU4TwbxE05bEI9rxYX3tQ=)
2: bpt9BsJOl3owDEYCjUtmuxEN8E0.roa (hash: nUeffKsyk9gHED4nwJFpfEhtvPTx7ZUa82CM8DIOyWQ=)
3: pUq5FgDmcbsOBzOSxvfT-61HYXc.roa (hash: UB81wheS00LuQ/3CNRheeKScZVmaRZ7KVUFOcqWElYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e8:13:f7:eb:5a:6e:cb:eb:b5:aa:dc:ca:ee:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=4af3f96fa0eb41d2565d43030ed9a785091bf8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:52:9b:77:c8:2d:23:b0:70:85:f9:51:f7:
ca:b7:3a:11:05:09:08:37:49:63:81:61:1b:07:5d:
a6:38:e2:45:49:07:e6:84:4f:b3:94:c8:01:a9:6c:
00:6e:d7:b9:4e:5e:d5:84:96:9f:84:c5:91:84:0c:
90:c3:79:a3:ce:91:de:96:3b:f5:44:3c:0a:29:6a:
1a:17:d0:10:e6:29:bc:09:46:9f:78:bf:51:60:f2:
00:56:95:59:98:10:9b:fc:b6:cc:c4:c1:43:50:c8:
98:6f:e7:d6:58:93:31:97:fe:fa:87:e4:28:67:c8:
9b:39:7d:69:36:c0:58:fa:a5:e0:35:86:56:65:f3:
f1:44:6d:43:9f:fe:e1:c3:5f:58:c5:54:21:45:b7:
3c:ad:2e:72:ed:cc:e3:37:d7:d0:de:ea:4a:5f:65:
b2:0a:4f:75:19:19:83:d7:9a:7f:ec:3c:b6:c5:ed:
9d:da:21:2e:84:96:e4:73:4a:93:da:fa:1e:4c:b0:
5e:63:bc:02:eb:88:aa:79:4b:13:5b:e0:09:f0:a4:
8c:44:b2:f0:90:5b:32:89:8b:94:48:99:c1:b4:f5:
7d:c6:51:2a:cf:ed:51:55:c5:48:28:0b:27:d8:9e:
05:e0:35:37:08:f8:2d:6d:1d:29:c9:fa:15:42:1b:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:F9:6F:A0:EB:41:D2:56:5D:43:03:0E:D9:A7:85:09:1B:F8:D3
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:2e:21:49:95:8d:e1:d2:22:64:a1:69:aa:9d:07:19:82:
a4:82:3b:8e:0d:21:23:67:30:fe:34:db:ff:a7:0e:84:c0:a3:
6f:05:22:6b:cb:3c:47:16:77:cd:4b:35:a3:f1:df:6a:dc:3e:
ff:03:e1:dc:1a:7d:59:f9:bc:16:b5:d0:42:f0:f0:ad:2a:5c:
e6:e6:67:96:cc:88:4b:f6:24:ba:97:e7:c0:ee:09:fc:06:af:
fb:ce:90:f9:b3:3d:4e:eb:72:1d:26:bf:88:a6:ba:74:a5:33:
b4:a3:76:9a:82:be:89:d9:ed:16:17:c7:39:fa:91:55:07:f8:
01:43:86:25:cc:9c:09:00:1d:11:78:4c:4f:68:93:93:03:7d:
64:fe:be:2a:af:c5:48:ca:d5:f7:c4:8b:74:58:f4:72:60:f0:
00:20:e3:bf:7e:90:0d:19:61:ec:4d:ce:7e:0a:ca:c9:82:31:
12:b1:d6:51:e4:7a:08:40:ce:06:62:05:7f:71:50:3c:3e:f3:
8d:f0:16:58:de:f5:c5:c2:c8:7e:b4:60:6e:13:5c:57:06:79:
b6:91:ed:a2:03:f9:f5:94:a1:ff:23:ea:4f:ac:9e:f7:a5:72:
62:cb:bc:32:5d:84:1d:14:3d:bb:38:47:75:38:90:d8:83:79:
66:ca:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:25 2026 by rpki-client