Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: nDJg+v/MyRZoHAn0KX8vORRNqTz9s6RAN/HQPTN7MYg=
Subject key identifier: 1F:B2:EF:34:E0:82:F7:86:1F:67:78:59:5B:22:0B:4E:75:21:67:D4
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 019CAAC68211FC8408850503156608572380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 0FF5
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: +k6w441dcIRzAUKatVq/FXqga6Bk59+R6TBYj0IEzjs=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:82:11:fc:84:08:85:05:03:15:66:08:57:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=1fb2ef34e082f7861f6778595b220b4e752167d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:cc:7f:4f:76:ed:8c:d0:aa:11:07:82:dc:
55:03:0b:76:e6:8b:00:7e:83:b4:45:35:ad:de:51:
03:30:7f:37:f3:e0:bd:63:7d:64:34:06:b7:2d:77:
ca:38:47:03:ef:38:a7:8d:75:53:cb:cc:d7:dd:60:
76:89:47:90:af:ee:41:8b:fd:01:f9:44:93:31:5a:
99:a5:f5:b8:4c:ac:3e:51:33:b8:1f:6d:2d:bf:be:
86:16:3d:4f:b0:38:b1:fe:4e:76:a2:99:e4:cd:75:
01:8f:7a:a8:43:06:87:ba:a2:f5:b2:48:86:5f:1a:
9a:a3:2e:f7:95:16:ba:69:7f:dc:1e:8d:37:c9:06:
7a:c1:bb:a1:c5:67:53:59:a0:6f:67:69:bd:68:f1:
7c:12:b9:c4:c5:23:c6:ea:ce:81:87:c2:b1:80:72:
2d:aa:28:67:83:dd:34:c9:43:06:2f:5b:e6:f0:3e:
c7:5e:c6:1c:66:63:4b:10:44:7d:7c:9f:0e:0d:dc:
02:3e:00:74:64:24:d9:9a:c9:5e:87:25:36:fb:b6:
f5:b3:05:cb:4a:22:39:fe:80:ea:3e:4c:51:ee:00:
ce:75:90:1a:4f:d6:8d:1f:e8:b4:05:a6:71:cb:06:
f6:9f:8e:57:8f:72:f1:7e:41:ee:eb:4b:e2:4e:44:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:EF:34:E0:82:F7:86:1F:67:78:59:5B:22:0B:4E:75:21:67:D4
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:7a:1a:7e:55:00:e9:f3:8d:e7:cd:74:34:d3:11:41:d7:
7b:fa:d7:f6:c1:7b:4a:b7:83:81:0f:66:ef:11:4b:61:ba:c7:
10:ee:f2:38:6b:18:c2:69:dc:62:2e:cb:ff:22:6f:69:2a:cf:
02:c6:07:04:2d:4c:31:b3:57:86:86:ed:29:a4:4f:4d:d5:ef:
e3:38:f4:49:75:97:7e:f1:e6:f6:8b:ed:28:85:4b:cc:8a:8d:
e6:5a:01:56:30:1b:ae:cf:23:82:fb:15:08:49:0e:2b:e4:0c:
fe:69:99:cf:77:a1:af:13:29:bd:9b:9b:2a:13:2b:5f:f1:05:
f3:64:37:b0:86:02:d9:b6:25:e7:a3:47:90:4d:48:f5:a9:08:
fa:1d:19:a1:93:16:53:ea:b6:63:be:6d:06:d9:e9:3b:17:27:
57:aa:90:92:d4:20:13:51:81:51:65:27:7a:57:49:ac:23:56:
1a:5f:83:bc:13:d7:37:41:df:1b:9b:bc:05:46:ce:de:a2:8b:
5c:07:f0:61:79:6a:10:81:95:eb:7b:b7:c7:27:68:cc:a1:d7:
85:9a:ee:13:ed:4f:ab:ac:fb:28:24:d8:83:c1:d2:10:b7:f9:
2b:6c:b0:cf:f1:a8:bc:1f:f0:f2:25:b1:ee:bb:0b:25:36:f9:
07:8f:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:06 2026 by rpki-client