Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: GKgl6CdlGUpvEQlmd0bv6oI/ILT+eG8PJvk5A58kX5w=
Subject key identifier: 84:D8:1A:B5:88:CC:1E:0C:C2:13:EF:BB:C7:94:0D:4C:F7:10:A8:BA
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019CAAFD11ED04D2D5159D3BAB403D7CE16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 1656
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: vS0pNd1OEAxag7OpEcj7ZnGdzgPzDNfnWY16TxjFrxU=)
2: edP4akUMA-KW5rz8mARn_FxYYuc.roa (hash: Bpp4EPAnJ50C+lo/0XnBwL4aQGBYEBIyI5OyCtU4jV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:11:ed:04:d2:d5:15:9d:3b:ab:40:3d:7c:e1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=84d81ab588cc1e0cc213efbbc7940d4cf710a8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:ac:d5:e6:78:f0:56:29:16:78:1d:b8:5b:
b0:44:e3:73:a9:30:66:6d:bd:f1:ae:5a:13:39:b0:
fe:c5:56:69:10:a2:06:f7:1e:73:af:f7:c5:42:70:
9c:d1:a8:b2:cd:c2:81:06:e8:bd:ef:a8:38:9b:3a:
5b:d5:54:15:d8:bf:1d:02:c8:c9:77:bb:59:f4:9d:
79:e4:f3:3b:ad:d9:2c:d4:26:de:a6:4b:04:ce:72:
7d:31:f7:0a:90:e3:3f:9b:63:e0:40:1c:2a:dd:5c:
7f:e7:f3:3a:0e:64:b1:67:21:88:1b:4d:a9:ae:e0:
cb:e2:71:08:35:c1:a4:67:25:ff:9a:eb:dd:36:eb:
da:19:ac:f6:b5:4f:f7:90:9e:cf:de:6a:17:b9:11:
8d:6e:82:db:7f:e0:ee:3d:86:31:d4:a2:cb:ef:3b:
8e:f5:a1:3d:f9:b3:89:55:7f:98:df:99:75:a5:85:
75:90:e4:57:11:8e:90:14:5a:cf:d9:20:21:63:ab:
ae:6f:ef:4e:b3:b8:53:b0:b3:3c:fe:41:32:75:99:
4a:62:cb:18:44:15:a9:5a:ed:b0:4e:fe:03:9e:4f:
cb:4d:5b:3c:86:1a:e2:23:7a:96:92:39:13:93:32:
2c:ca:45:7d:23:81:4d:ed:03:fd:05:f6:72:c9:6e:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D8:1A:B5:88:CC:1E:0C:C2:13:EF:BB:C7:94:0D:4C:F7:10:A8:BA
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:01:20:f5:ff:ea:6b:18:7f:0d:e0:cb:d1:da:9c:e3:f3:6e:
25:fd:48:48:00:e2:91:2e:31:8f:06:4f:bc:70:66:75:43:91:
32:8d:c3:02:c2:fc:24:83:c1:80:ee:94:52:f5:91:86:ed:de:
69:f1:2c:c4:bf:e1:16:eb:35:72:a0:2b:93:0b:bd:f8:45:8b:
1b:df:21:7d:37:2e:9d:6c:fa:cf:9f:76:ba:42:5a:79:65:58:
34:15:16:96:48:76:b7:a4:95:14:43:a4:79:8b:16:b9:6b:af:
5b:de:2a:06:12:82:76:40:07:33:65:aa:df:c8:b2:0b:92:e9:
16:26:c9:2b:fa:3f:c2:56:6c:62:f7:45:3d:e9:51:20:57:25:
df:c1:7a:cf:78:02:16:41:be:02:84:71:93:87:ed:10:ab:06:
59:62:55:14:be:e2:81:3c:8d:5c:65:12:86:24:70:af:de:16:
92:17:77:ff:e9:08:fb:13:7d:c7:b2:40:cc:bf:66:bc:6d:49:
43:a2:35:71:27:0a:83:81:e6:2c:fd:49:62:80:d3:41:1b:72:
86:d1:f3:8e:cc:6c:fd:63:df:57:b4:51:9b:c5:8e:7b:fa:81:
53:be:7f:17:3f:e5:8b:7f:67:ad:c4:2d:68:3c:20:8e:81:39:
05:c7:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:13 2026 by rpki-client