Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: 8AlX9TZugzyACvTF8QeWFang0IdL0ycL3f/VoojVFhI=
Subject key identifier: 4F:91:C2:C3:A0:F2:61:E1:55:24:63:D9:48:4B:2B:9B:3C:88:DD:3A
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019CAEDA43C80B8410DDCFD766593A799F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 03DE
Signing time: Mon 02 Mar 2026 14:01:05 +0000
Manifest this update: Mon 02 Mar 2026 14:01:05 +0000
Manifest next update: Tue 03 Mar 2026 14:01:05 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: gx66rVwFvCHfmBsBwlDCpwuQp0GWEF9BBagHUp8VZYA=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:43:c8:0b:84:10:dd:cf:d7:66:59:3a:79:9f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Mar 2 14:01:05 2026 GMT
Not After : Mar 3 14:01:05 2026 GMT
Subject: CN=4f91c2c3a0f261e1552463d9484b2b9b3c88dd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:42:cb:39:f3:34:20:65:1f:e1:8a:8a:2e:
90:e2:82:6b:7f:46:5c:02:ed:fd:47:cb:89:ff:d7:
94:ce:dc:75:0f:c6:8b:95:e4:95:37:bb:74:c1:1a:
47:37:73:78:6d:bf:1b:c2:b4:f6:88:71:18:0a:fa:
9f:6f:25:7f:71:d1:05:d3:44:58:9f:ef:d8:70:95:
b0:03:9c:ac:0f:30:5e:cb:db:83:5b:84:6f:29:dd:
7c:62:9f:c2:37:d9:3c:e3:9c:e1:f8:5a:aa:72:7f:
0f:d0:65:8d:6e:aa:bf:dc:0c:d3:cc:fd:30:3f:22:
c6:ad:5b:a3:ac:c1:60:58:e7:fc:41:ba:80:dd:d7:
c8:49:5b:68:92:15:59:2b:1b:06:c1:bf:16:7e:75:
39:48:14:d9:34:e6:2c:ef:e4:de:98:4d:59:56:92:
93:bf:9e:29:91:08:b0:ae:80:09:de:a9:cc:78:a5:
c9:67:b5:67:f0:f3:9c:25:9c:26:25:bc:1e:70:84:
91:5b:84:94:17:cb:5e:45:82:0b:4e:e0:32:af:bb:
2c:e0:9e:06:2f:ac:ac:bc:f3:c9:c7:4d:a5:a1:ab:
f8:80:f3:21:99:e4:0c:a5:31:f2:e7:59:ad:cc:01:
89:5e:4f:89:8f:2f:bf:d6:cf:68:15:50:3f:2d:ba:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:C2:C3:A0:F2:61:E1:55:24:63:D9:48:4B:2B:9B:3C:88:DD:3A
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:6c:ce:0f:62:71:9c:50:7e:b9:8b:52:0f:3c:73:cc:d0:
1c:61:7e:c0:9a:ca:73:14:0d:95:83:99:e8:49:3b:72:0d:76:
97:c4:dc:fe:4f:9f:16:da:d9:51:00:4a:a9:93:37:27:39:bf:
54:c0:48:3f:7f:c1:1f:47:df:e4:85:f3:1e:a2:1f:74:f6:b9:
ba:99:4c:09:5d:4c:30:fe:a1:ab:a4:36:8b:c0:e1:b2:c3:fe:
99:14:a7:bc:b0:47:70:cf:c0:d8:16:77:97:e4:cd:a3:df:c3:
8c:ad:5a:ef:c4:d3:3c:09:eb:72:8c:82:ba:c7:0a:58:20:15:
b7:34:c2:f8:d7:c2:1f:04:2a:d0:3b:c8:6e:db:ef:3d:89:34:
6e:59:f7:d7:a7:50:e2:71:9c:33:ac:02:c7:ca:df:e0:a9:be:
8f:0d:1a:6c:4e:bf:81:7c:1b:77:93:91:34:a4:c9:a7:64:df:
ea:1f:f9:b2:ad:07:b3:17:e5:9a:f6:aa:3a:c5:f3:99:f1:fa:
88:93:06:84:2e:3b:32:9f:e8:37:15:05:37:9c:6c:c6:e6:46:
9c:af:4c:4c:f3:46:22:18:2f:fc:7b:e2:c4:0b:f8:82:9f:fe:
0c:94:0c:e8:e7:88:4f:93:63:e8:80:21:98:6b:4d:bf:3d:69:
8d:8d:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:22 2026 by rpki-client