Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: w9gVx5mcr/BjRgyRfhef5vXVkkdWpFwaq+5enXsJRG8=
Subject key identifier: 27:21:CA:41:70:CF:BE:F5:70:FE:A0:5B:BE:40:CE:BD:7E:5E:10:5E
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019D39AF20646F4327990085E66AA78EE543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 0766
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: DMqIF0Bu7nUrctLyMMUToA53/mPEyv3WaZOTr3lvPBs=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:20:64:6f:43:27:99:00:85:e6:6a:a7:8e:e5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=2721ca4170cfbef570fea05bbe40cebd7e5e105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:c4:0d:39:c9:24:c4:29:62:12:ab:cd:ca:
b3:3b:f4:b2:6f:64:5c:64:66:a5:ae:90:cc:4e:da:
62:1e:24:c5:28:ec:e4:ae:2a:ce:b7:cc:9a:36:7d:
0f:25:5e:86:a0:2e:53:a5:c4:25:a6:cf:81:2d:76:
ea:87:d3:34:e6:d2:68:5b:92:88:d2:c6:b4:84:fa:
87:57:cf:aa:ac:86:ed:0f:f6:ca:1f:72:d8:b1:85:
a1:e3:01:ae:fa:12:1c:44:73:e0:98:4e:89:af:97:
bd:34:90:48:96:f4:c9:fc:6a:f6:84:8e:11:cc:0a:
ef:28:32:27:df:4e:b2:73:8a:21:9e:f9:c6:f1:84:
f5:16:31:91:66:48:9b:e7:c0:65:9e:ec:a5:c9:f0:
b1:62:f1:bc:04:51:e4:30:90:88:82:fa:66:20:e4:
e7:a9:0b:82:29:44:c5:1f:fb:83:0d:48:72:d5:3a:
42:25:e9:a4:1f:cf:bc:12:a1:2e:ea:e5:31:64:82:
23:e8:c9:7f:c0:16:d8:2f:a3:f8:24:3a:f3:a3:cf:
9a:68:1c:31:df:d0:9b:b7:55:a5:bc:83:48:53:0c:
44:2b:15:d1:ae:74:4a:9a:8c:c9:a3:ba:b0:b6:d8:
cf:3b:56:90:bc:ea:94:da:37:92:64:7a:f7:8b:7a:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:CA:41:70:CF:BE:F5:70:FE:A0:5B:BE:40:CE:BD:7E:5E:10:5E
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:77:c6:5f:69:a3:32:ca:9f:de:c4:27:f4:8a:5e:af:d2:
49:94:68:c2:be:a0:1c:da:43:97:3e:52:cb:0d:97:87:04:22:
2f:e7:1e:28:36:50:50:be:85:bb:a0:33:5c:80:2e:d1:10:15:
1e:93:b9:74:96:b6:2c:97:d4:ef:05:4c:c2:1d:e1:b0:fa:e8:
cb:e0:93:ca:ab:37:34:dc:c1:8a:64:7b:fd:69:36:e1:f3:23:
8e:a1:07:b8:5a:43:c4:4e:cc:bf:f2:1d:66:03:2f:e0:a4:8d:
09:0f:0d:5a:8f:34:64:63:f0:38:91:a7:74:1b:6b:9d:26:76:
42:b6:43:58:3d:1a:46:a0:86:5f:2d:31:0c:ea:19:17:0b:9a:
a5:69:3e:05:c4:f0:02:a3:0c:e6:5e:44:c5:23:15:b2:72:2e:
9e:0a:6a:8c:09:4f:17:b2:6c:12:12:fb:a2:03:91:bf:9a:83:
dc:32:e6:30:68:29:c0:7a:60:14:bb:d1:f4:9a:7c:48:6a:a2:
b5:89:6a:67:1f:8a:3d:ba:f2:72:46:58:20:ee:69:a9:e2:c1:
9f:f3:a7:bb:2d:d7:cc:30:76:f0:04:6e:14:43:10:1f:01:0e:
8d:a5:02:3c:12:90:4d:b1:2c:61:b2:a8:01:51:68:33:c4:e7:
0c:08:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:31 2026 by rpki-client