Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: GHNstPC6Q5cyjP2RIRrZuS37QcBRTCcPvqCoZIRN7BE=
Subject key identifier: 0D:BF:88:FE:F3:C0:0E:63:90:E7:9C:A1:8C:BA:99:25:B1:39:98:4A
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019CAB6B1CB7A8266691DD5FCFBD73661E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 1142
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: RoTWU96E9A3ZvN0NbQWxySmzVcUPw3nYYI0kGLDM5zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1c:b7:a8:26:66:91:dd:5f:cf:bd:73:66:1e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=0dbf88fef3c00e6390e79ca18cba9925b139984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:1a:7b:a6:da:93:53:75:51:69:f3:75:9e:
a2:bf:2e:c9:cb:45:54:91:15:5d:60:53:b5:3c:1c:
7f:1a:7a:9f:d8:e0:32:eb:2e:3c:98:38:61:74:81:
a0:17:6e:10:e6:69:c7:0c:e1:be:0a:3a:96:12:3b:
ef:bd:c7:18:e1:78:1e:30:ef:cc:ff:4d:04:ab:73:
dc:de:57:6a:d7:6d:4e:44:3e:62:e1:4f:4b:e9:c1:
17:d6:1f:47:bd:6e:7b:e8:0b:bb:0e:33:2b:53:cf:
d5:e0:c9:26:71:12:5b:9d:49:bc:8d:50:43:44:5d:
57:d9:c9:0c:1e:d6:f5:70:56:0f:5a:31:cd:e6:25:
bf:a3:4e:31:1b:7b:49:90:3e:03:9f:55:31:42:c0:
48:ea:11:49:97:9e:03:a1:15:b8:1d:8c:65:26:2a:
3d:91:4e:b4:6a:21:ef:f5:4f:3b:6a:be:c2:cc:d6:
c7:8d:65:5c:8e:23:67:0f:ca:3c:73:af:3c:41:cc:
de:ac:9c:e8:b8:d5:1e:9f:bb:97:df:82:f9:47:13:
2b:93:00:c6:c6:5f:8a:ae:21:c4:3a:15:2e:30:15:
1b:a0:fa:a2:84:22:ec:a8:84:d3:27:85:4e:92:1e:
7f:70:90:6f:45:41:91:53:c3:54:d5:7e:5f:85:00:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BF:88:FE:F3:C0:0E:63:90:E7:9C:A1:8C:BA:99:25:B1:39:98:4A
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5c:2d:98:3b:6d:3a:7c:f3:2c:a2:e0:c3:87:64:9a:6f:19:
b7:7a:e8:68:ed:e7:3b:23:5a:53:a0:1a:db:0b:79:91:13:77:
05:0f:7b:f5:59:84:ab:c4:a5:48:14:d2:2f:3d:1a:b6:44:6f:
6e:98:e7:73:4d:5a:ba:c6:ae:89:a3:fc:6b:09:fe:4a:90:7e:
94:30:5f:9f:0c:f0:75:ca:6e:c2:c1:81:9a:49:b8:ff:7c:db:
f5:9a:f3:16:7f:6d:de:07:54:7b:e0:b3:d5:36:61:f9:a0:6f:
3c:12:03:94:0b:02:81:f3:86:2d:54:5a:b8:90:ff:91:c8:79:
e5:0c:d9:1c:3b:e6:8d:20:f0:63:cf:34:93:7d:46:13:b5:44:
45:34:62:0c:13:4f:88:2c:b5:ae:e7:24:4f:d1:3b:5e:dc:20:
82:06:70:da:92:d1:38:21:19:9b:e7:3e:41:c7:d3:49:26:f2:
8e:dd:ff:b9:a9:37:c8:f6:9c:84:44:ad:0b:11:10:5c:9b:e7:
81:ec:c7:99:20:6e:cb:18:dd:48:28:8e:cf:ce:84:6f:44:08:
f7:9a:89:59:ca:86:bb:33:a5:ee:47:ad:68:56:98:47:55:f4:
ce:85:14:5c:d9:0d:01:54:cc:a1:f4:b9:08:77:13:0f:26:9e:
db:27:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:14 2026 by rpki-client