Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: slxwGs2qR0OBxOI+ZGEdAz5EM3GR17+DnLn8aRigwBo=
Subject key identifier: A7:6E:5D:E5:34:52:1A:67:F5:53:21:3E:1D:4E:32:CA:D1:6A:13:99
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 019D382DEED6781D5DDDB1405E1C8B447729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: 0CwovqkpXwhvLEcFR+AsEpK3E9GBE626IniEvTPS/mw=)
2: tdQ-po1mf0fmrEdh4BYbzGed_z0.roa (hash: Bbx0eL21Kl5WXuJPJFJnrW0E5hgRPFpVxiADXt7nquo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ee:d6:78:1d:5d:dd:b1:40:5e:1c:8b:44:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=a76e5de534521a67f553213e1d4e32cad16a1399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:68:ab:d4:13:9f:df:26:27:b7:4e:0f:2a:
f6:16:1d:5b:ff:f3:18:ea:92:02:e4:b1:5b:01:8e:
92:e1:65:06:e1:48:c0:61:e4:51:54:c7:7f:49:6e:
fd:38:5e:c0:f1:4e:15:42:cf:1b:7b:f9:4a:2d:b8:
5c:c0:d3:f0:b4:b3:e2:5d:7c:5c:22:fb:54:bf:4a:
5f:37:eb:ea:2d:6e:7f:3e:c7:7d:40:5f:ce:0f:62:
1d:f9:bb:7b:3f:7e:2c:2e:1b:e2:c2:b0:9e:77:d9:
fe:d4:82:23:48:30:47:b8:9b:b9:b7:00:72:85:a8:
81:ab:a4:f3:21:14:40:e1:d9:f7:63:b1:f9:c3:6f:
45:bb:6a:74:85:cf:3f:72:b8:e6:4b:87:08:c7:fc:
ab:fa:72:80:6f:44:ad:9a:dd:e2:dd:c8:9e:cb:b2:
2d:18:25:d9:ec:c1:dc:a6:d1:49:4a:5b:d6:d8:62:
bf:77:88:11:dc:7b:24:7c:d0:67:a6:c3:98:30:96:
13:05:bd:ec:66:35:5d:c3:00:91:4b:78:21:77:a1:
2a:2d:47:08:bf:8a:f9:35:49:e5:33:83:08:4f:1f:
91:a3:a5:45:71:3f:2b:61:a4:eb:76:5f:92:f0:53:
a8:21:b7:dc:1f:1b:9f:f4:1a:13:56:ff:73:e7:1d:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:5D:E5:34:52:1A:67:F5:53:21:3E:1D:4E:32:CA:D1:6A:13:99
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b9:89:50:f7:3e:dd:fe:1e:3a:d9:70:cb:d3:3e:94:83:c5:
1d:8a:9e:ba:4a:8c:81:e4:9f:26:04:d5:29:c8:85:04:1a:20:
aa:0a:04:11:4a:cc:fa:1c:b1:85:8a:33:19:9a:92:68:aa:97:
86:d3:c6:f5:99:eb:c8:ad:30:00:fd:ee:c2:af:22:0f:70:c5:
29:5c:a4:73:ab:2a:7d:40:b9:ce:af:c5:82:9b:cc:c7:0e:a1:
a5:bc:9d:58:c9:c2:5a:36:34:e7:30:0a:23:fd:69:0c:78:ec:
09:89:ad:5f:9d:0c:fa:08:b5:b3:f7:63:cf:1f:61:70:b7:9f:
66:5d:83:d8:84:0f:7c:ee:5b:9b:1a:c1:f2:75:3d:e2:12:24:
dc:bb:fd:e3:3b:fa:f8:61:9b:10:10:ff:61:8e:c9:81:07:1e:
a9:f9:ec:f0:cd:fd:36:bf:5c:d6:5f:9e:f0:05:73:72:12:5a:
ac:53:5c:09:d2:67:8b:ec:01:cb:70:13:d8:44:5c:57:f1:51:
4e:92:91:18:62:75:4a:d4:6f:69:d2:f7:de:96:6a:b8:80:cb:
1d:b9:e7:2d:76:ae:ec:79:49:8a:d6:53:ea:ca:ab:f5:7e:0c:
2e:c6:ab:32:a5:23:ac:6d:78:f8:45:52:bc:1e:fa:ec:fa:bf:
de:a2:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:29 2026 by rpki-client