Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
File: Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft (raw, json)
Hash identifier: c3OZJALao/18UydXkEYi8SS4NYOgoWbXfLy1CjPkT1U=
Subject key identifier: 14:DF:4C:3D:6F:EE:06:55:BF:20:D2:B2:4B:5C:B0:2F:FB:C0:48:38
Authority key identifier: 67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
Certificate issuer: /CN=67d01ffa61edff50cb38f7f25f3cd01bc7112f06
Certificate serial: 019D37894036BA044C9CF9826844B3C1DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
Manifest number: 30
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl (hash: p/E3uItR6/4HoqUUb3Wh68tkmyt3/jSTIUB6lM6V24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:40:36:ba:04:4c:9c:f9:82:68:44:b3:c1:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d01ffa61edff50cb38f7f25f3cd01bc7112f06
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=14df4c3d6fee0655bf20d2b24b5cb02ffbc04838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:9f:6f:f5:74:68:43:71:2f:5e:63:47:ff:
c4:9c:57:b8:12:1b:37:c6:70:e4:e5:84:7f:45:a9:
58:52:91:ba:c8:88:88:c5:13:e8:6f:f5:c2:6a:fa:
43:4d:9d:0f:35:26:3a:32:ba:3f:d6:71:a1:de:47:
06:f6:42:bc:9b:72:df:68:eb:c2:c0:5c:d8:a5:3a:
13:99:8c:75:3e:be:0a:ea:ae:59:04:a1:1c:98:65:
7b:d6:7c:ac:a2:55:d5:9d:5b:a6:08:09:20:f7:38:
91:4f:85:39:33:24:d8:c1:a4:43:f9:12:35:52:d8:
5e:46:92:ac:58:87:2d:4a:f1:a5:9a:d0:eb:d3:cf:
c9:ce:0e:7a:78:06:2b:a8:16:fd:6b:6f:78:a7:99:
dc:9f:4a:dd:6c:d5:6c:b2:72:81:e9:ff:64:35:25:
89:65:75:ef:85:d7:ef:0e:6d:cd:0d:9a:4d:ff:3e:
2b:88:dd:42:6a:34:c2:73:22:68:cf:aa:b7:84:24:
f8:a3:11:99:66:c4:73:40:09:fa:85:34:98:4e:93:
d7:9a:53:da:fa:2e:86:d9:49:f5:7e:97:d5:c8:62:
5f:9f:ab:1c:f4:2a:fa:40:f0:69:99:16:21:12:8a:
34:7d:bc:bd:cf:b8:93:03:1e:cb:64:e4:9e:a5:a1:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:4C:3D:6F:EE:06:55:BF:20:D2:B2:4B:5C:B0:2F:FB:C0:48:38
X509v3 Authority Key Identifier:
keyid:67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:34:7d:bd:5b:a0:9a:b5:08:77:93:95:58:52:f1:50:ba:32:
ea:e2:60:34:a9:93:ee:7f:04:02:73:2c:bd:2e:50:fc:90:38:
fe:44:b5:77:c4:7d:1b:44:cb:06:71:6c:90:b6:14:4d:db:64:
71:5e:1b:56:88:83:69:ea:ef:98:9a:76:92:be:30:ee:72:51:
b7:a6:b1:d3:20:b2:1b:09:c4:a6:86:1c:1e:8b:ec:3f:d6:cb:
82:38:a1:24:0e:63:b8:7c:aa:28:e9:b1:87:86:ea:24:06:ef:
0d:f1:45:35:1b:ae:86:d2:66:4a:29:24:c6:70:f8:e8:94:e1:
ea:c9:97:bf:7f:53:24:b1:43:0d:26:15:af:22:00:79:00:65:
13:19:c6:08:b1:cc:03:e5:3c:d0:0c:e8:44:17:63:f6:cf:b5:
8d:95:98:3b:e4:de:55:9c:2f:b5:80:43:2e:f5:0c:a7:6a:5e:
86:e3:d1:45:2c:a6:86:ac:3e:64:5f:af:3d:91:49:01:f2:9a:
9a:ba:36:b9:44:4c:5d:04:bf:ea:7e:fd:8e:97:47:71:93:4f:
18:09:96:dc:80:6d:fe:63:1d:e6:53:3b:95:35:39:19:be:a1:
a7:58:c4:6a:dc:af:4e:c6:b1:38:3b:54:e6:4c:7f:88:53:dd:
d4:76:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:45 2026 by rpki-client