Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
File: Z8-tqx1DTEwmEYyaYp50-p83xGE.mft (raw, json)
Hash identifier: qL130cvDFf8fgOpUf83PIChUSLNLZHgqyCbzPNBXhTk=
Subject key identifier: 6D:F5:95:9B:FB:34:EB:EA:2C:99:89:37:46:F3:CA:D2:9B:9E:4C:BB
Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
Certificate issuer: /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Certificate serial: 019CAB346288F2CBA32487064A63D3E4B865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
Manifest number: 0112
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa (hash: LerB+EHbGtYIBcGnSEDKbVb334OwXWnKx/1mjIc2mvE=)
2: Z8-tqx1DTEwmEYyaYp50-p83xGE.crl (hash: xdkOlj7R/e7d+pS7wKH2QQiDZ9c+NYFpV/D4dBgeSZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:62:88:f2:cb:a3:24:87:06:4a:63:d3:e4:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=6df5959bfb34ebea2c99893746f3cad29b9e4cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:64:d1:48:38:e3:1c:ea:0b:2e:d4:6a:27:
3d:ff:74:e7:52:8b:b5:59:dc:a7:c4:8e:bb:f3:cd:
da:1d:43:c1:1d:77:07:2f:ad:80:7c:48:6c:36:df:
60:72:a5:44:63:11:3d:83:59:de:a9:0e:60:9c:1b:
65:45:3c:cb:d1:3e:9a:c3:56:96:46:12:b7:c7:59:
51:7e:76:53:f0:73:29:02:ac:e3:d7:03:eb:e3:07:
cc:0b:5b:88:bd:69:93:70:9d:7e:f8:27:48:3e:8f:
61:3c:52:6e:87:98:5c:21:5f:79:aa:f3:9b:bf:5f:
fa:4e:bb:d3:fc:a4:47:98:eb:5e:a7:50:17:92:33:
67:25:b2:40:c6:b8:1f:50:d8:8b:0a:d0:14:10:e0:
36:5f:dc:ff:f2:5e:dc:50:d1:1c:ff:7a:75:7d:1a:
10:c5:95:35:6e:7d:59:00:ad:93:9d:08:ce:71:b3:
96:3f:91:ec:47:c9:04:f4:4a:48:3f:58:ee:27:0d:
3c:b7:b8:ed:0b:88:e4:83:5d:f3:87:68:02:0c:91:
a7:15:15:ae:ad:6a:ba:f5:20:2b:fc:67:ce:6b:2a:
f2:97:54:6d:a0:4b:be:d8:8a:0f:c7:8a:80:68:b1:
e3:ea:52:28:fe:7b:15:db:e0:ae:dd:99:fb:85:9c:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:95:9B:FB:34:EB:EA:2C:99:89:37:46:F3:CA:D2:9B:9E:4C:BB
X509v3 Authority Key Identifier:
keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:b8:89:f7:a3:b1:15:0f:6f:64:86:c9:e1:40:7d:2c:59:
5b:b8:d0:43:84:0f:b2:4d:1d:09:b9:7e:dc:71:ea:7a:87:42:
89:f7:cf:e8:12:1a:05:7a:82:8a:cd:49:08:4c:8a:09:eb:0b:
b3:e3:34:8a:e1:5a:14:ff:e0:03:25:2b:69:d1:5c:68:20:e3:
a9:de:ec:d2:87:73:b2:86:fa:55:a9:82:44:76:ef:1b:23:d2:
25:23:aa:44:55:41:e5:02:09:d3:6d:1f:4b:00:21:a1:6a:c0:
d8:11:99:d4:4a:dc:df:0e:47:15:76:e3:20:1f:0e:00:3d:64:
cf:5f:da:43:38:eb:59:4b:4d:2f:46:3a:00:31:22:33:0e:99:
b0:36:38:00:89:be:69:fa:63:4e:0d:7c:41:72:87:df:6c:ff:
55:82:36:5d:5f:50:14:a6:3e:94:a3:7a:0a:58:b3:15:db:fe:
d3:94:a2:16:00:2d:25:94:62:bb:4c:ae:9c:53:4b:66:c7:84:
2d:3c:bb:41:d0:51:0c:d0:89:c0:90:f3:ac:3f:3b:cc:17:af:
41:f7:66:5f:41:43:47:05:ba:d0:8e:f5:e2:77:18:ad:e3:02:
7b:d6:31:eb:e3:7e:b0:2e:d9:59:66:bf:67:b7:bc:a1:21:3e:
b3:58:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:26:26 2026 by rpki-client