Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: GBQIhXm4RYX0WLu6ly+PNpANsjC6hcRIs3HjgGGhR24=
Subject key identifier: 38:7A:B6:F6:99:A5:90:66:E4:55:43:00:D0:FB:18:CF:FC:CC:35:D6
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 019CAB6AF64A5DBD11EE7FF28BAFFE882AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 053C
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: tBtrgxQDKd9y7zdgI10SFu4gL2tH/Iuhj85NXG0Kl78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f6:4a:5d:bd:11:ee:7f:f2:8b:af:fe:88:2a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=387ab6f699a59066e4554300d0fb18cffccc35d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:aa:a8:e1:7c:52:10:db:fb:d7:c7:d5:8c:
07:8e:28:ac:d2:15:52:a0:75:44:8d:2f:4d:20:9a:
4a:6f:89:d3:49:df:d4:e9:4c:78:b0:df:e3:27:a6:
e8:f9:a1:d1:49:73:8b:5e:87:99:77:94:ed:86:24:
1c:ef:0a:fc:88:72:ba:0b:6f:37:85:6f:4a:16:87:
1d:29:f7:6f:b9:c2:30:29:f0:ea:35:0c:5c:a0:dd:
4e:d0:49:f6:f2:27:af:b7:67:22:06:c8:a0:99:6a:
51:a2:16:2e:f3:4f:8a:39:06:69:82:21:54:5d:b6:
34:88:e5:f9:85:1b:57:59:7d:57:52:d8:cb:6b:f6:
bc:b5:30:9c:6a:22:c0:78:d5:6f:77:6f:cd:76:c2:
20:48:b0:cd:ee:6e:96:7e:10:f5:e0:48:81:42:41:
13:e8:e3:36:ae:da:7c:8a:b2:41:b4:a9:5e:c3:99:
81:61:67:c0:32:a4:92:42:d3:cb:1f:3c:01:94:0e:
22:ec:2e:de:62:9b:ae:c8:86:cf:bd:3d:b0:07:e3:
36:af:2f:f7:a4:10:05:ff:35:5b:79:df:04:2d:b2:
94:c1:09:57:f8:b1:65:16:f6:f5:a6:ac:12:a1:b0:
18:f2:ab:58:f0:49:d7:9a:5d:b1:c6:07:b1:98:4f:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:B6:F6:99:A5:90:66:E4:55:43:00:D0:FB:18:CF:FC:CC:35:D6
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:76:b2:62:c8:da:7f:55:57:b8:91:7d:11:9d:63:19:41:
60:41:ad:42:67:67:20:b0:45:ff:6f:fb:4f:e2:23:c5:d3:c4:
4c:9e:ea:fd:e4:44:a7:91:66:2c:4b:8e:10:3f:f0:1a:81:8c:
43:3b:6a:2b:a0:2e:1b:96:18:1a:e3:a2:0a:6f:4a:13:93:ae:
4b:7e:37:22:e6:35:7d:f4:af:7d:9e:1e:bd:c2:87:ef:b7:1c:
50:d2:b5:95:51:6f:36:0b:e8:fe:dd:5d:9c:a1:be:61:99:07:
a5:ae:13:37:74:c2:43:97:90:77:c9:91:6c:bb:ac:14:1f:7e:
05:4f:11:d7:8e:03:a7:d0:76:b4:a8:f4:e1:de:93:d7:51:be:
2f:f0:30:ac:41:32:9c:f0:0b:2b:8f:57:61:a0:87:db:b2:cb:
57:1a:c5:d0:e8:d3:01:cb:b0:98:1d:bb:e9:21:20:18:bc:98:
0d:e5:fe:c1:ae:2d:52:d2:6b:b8:e7:84:0e:f7:9b:a6:ca:47:
a6:e7:7d:f3:9b:b7:40:06:37:38:02:9b:0d:c0:7d:f3:17:01:
58:24:d6:b4:a5:22:ac:e6:d8:de:0b:c8:18:c6:22:0f:7f:98:
68:e9:b2:ec:c1:37:05:e4:b2:74:ca:e2:95:de:f1:10:fc:88:
06:e7:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:00 2026 by rpki-client