Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: pYujpMxgVdABTyVJLcBZ/XacyUx5muzJH+xC2p1/ews=
Subject key identifier: 9B:4E:A8:52:95:EE:83:A3:CE:27:C6:93:50:90:44:D3:D9:D6:7D:B3
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 019CAAC667ABDEF28DAE046EFECEB1EA04D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: XgBVM3hEiMxkmTz4Ck5o3gPIs+S7LSrJgFTFdVQRK+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:67:ab:de:f2:8d:ae:04:6e:fe:ce:b1:ea:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=9b4ea85295ee83a3ce27c693509044d3d9d67db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:33:d2:71:22:cf:33:8f:6c:7d:e0:73:34:
c6:ac:cc:7a:a4:08:d2:81:19:42:9f:96:15:89:73:
c6:4d:82:da:32:cb:6c:5a:5a:14:56:57:06:b6:ae:
11:70:b7:b7:75:aa:56:2e:9d:ff:a4:34:fd:f2:8f:
e8:80:f8:20:a1:1b:5e:3d:8c:ec:8f:a1:c8:65:a2:
fc:6b:0d:41:dd:b7:1f:1c:c5:86:4f:99:46:69:a8:
22:3a:e3:32:22:6a:e0:98:29:62:78:65:48:64:d9:
0e:c4:d3:86:f7:65:72:fd:83:e1:a9:03:36:a2:dd:
e5:d8:7e:2a:05:cc:05:0d:f2:5b:07:01:17:d4:e2:
65:a5:23:a7:61:fa:fe:2a:f2:7b:bb:18:05:c2:89:
13:1d:11:32:d3:4b:9e:2f:da:41:21:53:7e:16:22:
71:7c:9f:39:88:9e:f4:d1:26:dc:ac:46:0a:9e:8a:
91:d4:51:0f:ad:6d:82:a2:b1:ae:f0:c4:19:c0:79:
5b:7f:48:81:53:09:8d:a1:e4:c5:27:bf:a3:e1:fc:
12:d9:4b:7f:56:5a:be:16:ae:36:b5:53:fe:41:df:
07:5b:94:56:bb:7d:2a:84:03:72:42:37:e8:0a:7b:
a1:ef:28:86:26:78:d5:e0:10:b5:d0:a1:09:97:e8:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:A8:52:95:EE:83:A3:CE:27:C6:93:50:90:44:D3:D9:D6:7D:B3
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1e:29:b3:e0:e8:95:2e:d9:90:a8:dd:27:c2:ad:98:1d:65:
09:e2:a5:c5:f5:d2:95:45:7e:23:5e:5a:1f:88:25:d7:a5:82:
f0:5d:92:c3:25:ec:a8:fd:58:df:49:73:e5:cd:ea:52:c9:3a:
35:02:23:a0:10:ae:0c:cf:a8:06:36:39:10:b5:0a:49:67:41:
36:13:f8:7c:20:dc:b4:a9:0d:39:41:81:ef:b9:07:b5:f3:f3:
ec:51:a3:8a:55:dc:db:79:36:5f:ad:c8:f9:27:cc:39:85:11:
2b:50:e1:d6:3f:39:ad:64:6a:41:c3:59:da:d7:0c:02:e4:2c:
9f:b0:12:12:4d:7c:d6:84:72:3c:da:73:6e:20:23:92:46:4d:
a3:81:7b:00:85:fc:62:2a:37:25:81:97:1a:cc:ff:83:3b:89:
db:8e:04:7e:25:a3:27:4c:87:d6:82:74:4c:4b:8f:8a:56:0e:
bd:80:47:65:be:e6:41:78:9f:08:01:aa:f0:48:00:b3:51:ba:
b2:31:12:d0:b1:b6:fb:07:e6:d7:ba:2d:0a:90:59:c4:ec:05:
e6:35:90:48:66:34:04:07:77:6c:cf:ae:61:4c:75:f3:8f:2b:
54:89:cd:a8:1b:e4:47:75:8e:04:98:d6:a8:5b:82:e5:82:72:
8c:75:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:14 2026 by rpki-client