Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: 0Mh/VBvmt89C26ZhQdxZ61ckKDxrI1Qk2oYQsew8B1w=
Subject key identifier: EB:13:69:58:8D:11:60:22:6E:18:93:56:0A:CB:3D:9E:C5:D3:7C:AB
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 019CAD5A7C4E99BBF51FE58CE8F4ACED1430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0742
Signing time: Mon 02 Mar 2026 07:01:54 +0000
Manifest this update: Mon 02 Mar 2026 07:01:54 +0000
Manifest next update: Tue 03 Mar 2026 07:01:54 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: cwXdO+hjcSMJvB0keO6lMf8vvdNIaetWtnt+SJjyWIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:7c:4e:99:bb:f5:1f:e5:8c:e8:f4:ac:ed:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Mar 2 07:01:54 2026 GMT
Not After : Mar 3 07:01:54 2026 GMT
Subject: CN=eb1369588d1160226e1893560acb3d9ec5d37cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:78:e7:ee:7c:30:9b:cc:3b:50:de:f4:9f:
f1:1a:c4:72:65:1b:89:5c:f8:94:9f:97:7c:42:d4:
a1:6b:6b:74:0c:98:7f:36:c6:5b:d3:15:39:3e:c6:
dd:7f:ac:c6:10:60:79:a3:fe:7a:ed:df:c4:08:e6:
e6:12:a5:f0:1e:fe:ae:82:63:a7:32:bc:02:68:6c:
21:18:d9:26:d8:c4:2e:a8:d2:0c:75:ea:28:53:5b:
68:e8:51:55:41:70:c0:2a:dc:ba:1e:ea:65:77:95:
e2:61:dc:25:e2:b7:06:e4:b3:9a:23:37:39:da:89:
78:aa:4f:de:fd:d6:df:76:5a:f2:e2:05:b2:e5:fa:
0b:17:b7:52:1d:33:94:f5:41:e2:59:e6:db:3f:23:
27:7f:e1:be:7f:0d:76:3b:8e:dc:48:37:97:22:5f:
b2:fc:6f:da:b3:59:e1:d8:62:25:95:67:b4:31:9c:
7c:36:d2:08:cb:92:ec:91:7f:cb:b9:5d:ca:2c:f4:
3c:39:e9:aa:1c:de:36:ee:63:58:f7:6c:6e:b5:57:
58:48:99:db:02:c5:0c:aa:4f:de:b4:af:5a:96:90:
99:20:79:53:80:f5:bc:86:f9:1f:17:71:51:be:3a:
91:0a:2b:55:de:5e:0b:b4:c3:94:7e:c2:85:a6:ce:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:69:58:8D:11:60:22:6E:18:93:56:0A:CB:3D:9E:C5:D3:7C:AB
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a6:67:e3:03:3d:20:35:a4:20:a9:ca:4f:22:24:1d:06:bb:
ea:60:f0:d9:07:c0:a0:3d:ed:d8:f7:95:65:d9:6f:9d:3b:0a:
bd:f8:b2:af:82:74:94:19:7a:d9:59:b0:1a:cf:eb:0a:4c:be:
30:a8:c4:e1:74:17:2f:1d:bf:40:b1:44:c5:4f:b2:a3:62:65:
91:8f:d6:74:36:d0:c2:07:3a:7e:83:48:1f:98:02:49:30:f0:
fb:bb:2e:a0:f1:a2:e1:2f:8a:44:b7:9f:cf:8e:e0:98:dc:1a:
63:78:1b:8f:e7:70:f9:e8:8b:8a:c8:52:b5:61:95:23:5e:0a:
92:57:73:77:3a:5d:17:0e:95:45:34:a7:6e:8b:d2:83:3a:6d:
91:41:de:2b:88:cf:04:86:50:b8:c3:65:50:00:9a:19:3b:5e:
a6:dd:40:86:3c:88:15:01:c9:c9:2d:77:d6:5a:74:7b:63:a7:
b1:27:c0:95:16:a4:df:26:16:e8:7d:df:e2:e5:da:da:10:70:
4b:5a:e4:d5:ac:9b:45:64:64:6c:b4:5a:cf:dc:3b:38:4c:e8:
cd:82:4e:84:e6:dd:01:30:40:22:55:2f:f8:1b:82:49:82:d7:
d0:88:52:8d:b6:44:be:cb:f1:34:9e:14:5b:82:de:28:30:b1:
53:c0:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:15 2026 by rpki-client