Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: Xew/YMwwddHYlwUYJgbYlmaVVpthRJwV2bcncaivmvo=
Subject key identifier: 28:F4:B1:B8:A5:A9:D7:C8:CF:23:C8:BF:D4:1C:72:40:25:E6:BB:48
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019CAA58207079601CF843B211582B2A8B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 07C8
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: 4C29b8inPUJw930WR8HvsXqpF70Rgt7ifwjhczEAPqc=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:20:70:79:60:1c:f8:43:b2:11:58:2b:2a:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=28f4b1b8a5a9d7c8cf23c8bfd41c724025e6bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:8e:9a:a4:23:34:74:69:7a:42:53:7c:4e:
33:9c:e2:8b:b3:09:dc:99:b4:65:72:29:fc:d3:89:
ed:91:5c:58:da:a1:64:b3:fc:10:a2:1a:31:57:65:
55:fb:2f:83:c4:66:04:87:e7:91:d7:e6:a4:73:d3:
66:b0:4e:59:d9:43:32:97:99:43:85:2b:05:30:f3:
34:49:49:06:e9:f7:42:c0:f3:d1:53:15:c2:b7:f0:
64:11:77:8c:ac:93:ee:3a:c5:82:91:99:4a:6e:2a:
1d:70:81:b3:01:63:41:f3:a6:e9:5f:4b:1a:8f:f5:
d0:59:44:0f:22:22:81:28:de:01:d1:7b:bc:35:be:
92:1f:e2:2d:92:b4:26:39:cf:42:fd:70:8a:9f:3f:
11:57:d8:0e:63:e0:2f:ae:b7:fc:45:29:99:ba:50:
85:e5:79:2d:db:4f:b5:46:8b:c4:f4:f8:e0:8d:46:
15:0b:ce:19:21:da:05:f2:df:2f:39:60:3d:90:e1:
0e:0f:b2:10:58:7e:c8:92:48:5d:0b:4d:c0:2d:93:
6f:6c:f1:9f:85:f0:e2:4a:96:e6:ff:6d:91:92:98:
b9:0e:e3:af:6d:3e:18:c3:e1:a0:71:39:b4:d1:21:
67:a5:09:50:2a:eb:e8:f8:b9:ab:8a:21:2f:85:a2:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:B1:B8:A5:A9:D7:C8:CF:23:C8:BF:D4:1C:72:40:25:E6:BB:48
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:86:ce:5f:a9:d1:8a:f5:54:95:c3:38:d1:7b:f4:c4:ab:
c0:71:bb:cc:97:93:b4:08:04:c9:cc:53:18:42:60:97:40:4d:
79:27:c6:09:a1:7a:0f:b3:dd:a2:f7:bf:5e:a6:e2:29:bf:d9:
c9:46:39:8b:39:89:2e:74:2e:3a:38:35:75:a2:9e:80:41:29:
8c:c7:16:99:0c:17:29:ea:18:c3:02:2e:a0:76:88:eb:e9:46:
66:f9:92:c3:ba:51:4b:83:ee:24:24:2e:1e:81:b9:2f:24:9f:
ab:22:2a:c1:16:d0:ee:93:bf:82:51:76:3a:a5:06:03:9b:e8:
4c:2e:84:69:94:c0:c4:63:48:45:22:b6:41:b2:f4:57:54:f0:
50:38:ea:5c:e0:87:90:66:b9:60:1c:93:fa:d2:f8:6a:71:e0:
5d:2c:51:4d:8d:06:3a:79:c7:9a:c6:aa:bf:d1:ff:cd:f8:54:
45:7b:b2:ad:9c:9a:80:26:9f:bc:80:60:f6:63:7c:98:27:61:
3f:fb:70:8b:d4:87:b3:df:91:92:0e:a4:62:94:a6:a2:00:f2:
d1:76:d9:06:d5:3c:35:6d:1b:91:40:0a:1d:ef:ee:a0:19:84:
4b:e4:c9:3b:a0:8a:6b:f7:d9:8f:15:cd:6d:61:b2:26:a7:e1:
62:25:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:32 2026 by rpki-client