Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: iOIQ20jAMfGALwV4ZbQK5v5vtJpXXV4DnbbmT1Mi3as=
Subject key identifier: 7A:85:79:4F:76:E0:F3:76:FB:AE:A3:71:26:BA:C0:3A:D0:27:63:9E
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 019D984FFBF307113826C0B2B2EAB43DE69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 1070
Signing time: Thu 16 Apr 2026 22:01:11 +0000
Manifest this update: Thu 16 Apr 2026 22:01:11 +0000
Manifest next update: Fri 17 Apr 2026 22:01:11 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: hLnjKXRCyNfL/KmPVkIIN98eXWVubFcJTuySdnEcGWc=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:fb:f3:07:11:38:26:c0:b2:b2:ea:b4:3d:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Apr 16 22:01:11 2026 GMT
Not After : Apr 17 22:01:11 2026 GMT
Subject: CN=7a85794f76e0f376fbaea37126bac03ad027639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:74:8b:3f:6c:f1:a6:0b:4a:ea:98:31:c7:
13:f0:03:92:c1:e8:08:a6:26:4e:5f:d9:64:5a:8d:
fd:07:f7:b4:ab:59:09:62:16:66:41:86:6f:37:36:
4a:a2:a7:73:a7:ee:e6:7c:a4:fd:63:fe:b1:5c:fd:
a1:77:e2:0e:a6:3b:33:bc:1c:9e:9c:ce:73:23:61:
06:b4:29:f6:99:19:27:d2:7d:79:84:63:ed:56:af:
cb:2a:27:64:ed:83:e0:16:4b:c2:1f:fd:83:b0:32:
b4:eb:65:90:ef:69:1a:8d:73:52:ec:ae:c0:cc:70:
f7:77:c8:97:d7:3e:49:54:13:a0:1d:c5:a9:30:27:
a2:22:16:90:bc:83:86:1a:e1:16:81:cd:d7:cf:ea:
33:1f:c4:c9:69:98:2d:92:90:4d:78:4a:dd:f3:14:
54:ee:d4:58:27:c1:29:44:6a:a3:64:8c:5f:a2:cf:
6c:9d:90:69:51:bc:d0:b1:83:97:63:0b:23:3d:43:
b7:ab:e5:39:6e:78:24:d8:bb:2a:e3:92:a7:fd:23:
1f:f6:69:7c:cf:6f:21:e3:94:3e:99:5c:8e:e1:62:
95:82:2c:58:38:9b:72:89:9f:7b:eb:22:8c:6b:c7:
4a:7c:8e:5f:92:c4:f9:6f:a0:24:f5:00:90:50:27:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:79:4F:76:E0:F3:76:FB:AE:A3:71:26:BA:C0:3A:D0:27:63:9E
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:29:cd:7b:56:ed:21:ae:96:88:5c:2d:39:80:03:40:8e:
f1:f0:6f:b6:a5:0e:c5:fc:0a:83:06:43:91:c2:f6:49:cc:2c:
50:6c:bb:28:11:ff:f6:5f:6c:3e:8c:03:fa:c3:44:45:35:6c:
1a:c8:2d:95:f5:1f:37:fc:32:bf:2d:81:33:e9:9a:00:08:bd:
93:d6:11:63:aa:12:60:11:5f:13:78:19:dd:eb:d0:47:32:b5:
13:25:01:48:b4:77:a1:d2:8e:9e:34:5a:c5:a1:fe:9c:9f:6f:
c3:72:9a:27:c7:d6:e6:82:65:aa:55:14:19:fe:ab:ab:55:84:
52:cf:12:49:f1:2e:1e:aa:f4:2c:20:eb:10:a7:13:88:f7:09:
a9:d3:94:60:a0:dc:b9:cd:11:12:e8:85:1a:6d:1b:4c:18:8b:
eb:ec:d2:2b:8b:3d:bb:55:e7:36:9f:93:20:fa:92:85:0e:d2:
e9:14:6e:d0:fa:7f:b3:05:fd:aa:38:d2:e9:da:83:e1:34:44:
5b:34:b4:a8:71:9c:8f:ef:d9:6e:72:a7:f7:8a:e0:d7:40:b8:
59:05:ff:ae:76:bc:a6:5d:b4:ca:e3:e5:d5:20:98:98:59:d8:
85:6b:97:b3:06:d4:2b:5f:ab:95:38:5c:da:5d:a2:ae:17:62:
0a:fe:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:00 2026 by rpki-client