Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: tQ5A8qE6HBgbvn94CDArCTN/U+H3cw0BR3aC5PQnlgg=
Subject key identifier: 56:C8:6B:B6:AC:24:B3:23:F3:AE:B2:44:3E:5F:7D:02:49:66:CB:D1
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019D389BD5418C8129C79CD82321981DD819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
2: Z2S57soliueMTVEyGovf75orajw.crl (hash: A0X2e8dcygTeh/g4loD14ehXZIPBUwlkPOSTXFdfb2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d5:41:8c:81:29:c7:9c:d8:23:21:98:1d:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=56c86bb6ac24b323f3aeb2443e5f7d024966cbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:b4:1a:dc:0e:68:c0:7e:74:c6:03:6c:aa:
99:f3:6d:4a:9d:5f:55:56:64:61:d1:c8:f3:12:c2:
31:15:66:2a:aa:ca:8a:fa:7d:56:c7:f7:b6:f6:0e:
aa:5b:99:4d:95:66:da:36:90:50:ca:c0:c6:a0:a0:
af:b2:ca:19:9d:3b:b9:c0:6c:81:93:09:7a:23:39:
17:16:d1:ec:fd:1f:87:c6:96:1a:3d:70:b6:b0:c6:
04:f8:d3:a7:07:2f:35:f1:a1:19:c3:1d:75:c7:89:
1c:b6:de:21:e4:08:d5:6b:9e:ad:71:49:c5:54:a9:
48:24:66:83:21:08:11:ab:b2:c6:3d:bd:05:95:85:
4e:70:95:1b:b4:ec:f9:9b:62:11:c2:b6:51:7d:1c:
30:6c:04:5f:28:08:3d:6c:8d:af:5e:7e:b0:48:59:
ad:b0:81:68:b0:85:de:48:3b:7f:d7:b3:07:62:c7:
71:ea:6d:4b:91:0a:9e:dc:57:3e:6a:f6:c1:4b:59:
5f:06:8c:69:5b:bd:93:3e:2d:b5:ee:47:77:6b:f7:
e7:19:0f:c8:5d:39:e4:69:25:a0:a3:43:52:71:e9:
13:64:24:87:46:2e:65:31:6b:43:98:a4:40:e0:07:
48:a3:38:56:79:6e:df:7a:3f:c2:b6:d5:b1:6f:c6:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:6B:B6:AC:24:B3:23:F3:AE:B2:44:3E:5F:7D:02:49:66:CB:D1
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3d:cf:1b:8f:e1:77:3c:85:a6:48:d8:92:8b:04:d1:de:ea:
96:79:2d:aa:27:2b:57:be:60:3f:16:81:6d:1a:17:00:85:21:
f8:5d:f8:b9:f5:05:b1:b4:aa:f3:53:e3:90:44:fb:ee:69:21:
99:5e:94:4d:f6:ab:14:31:2b:0b:49:a8:08:b6:38:d0:f0:44:
2c:f7:48:50:70:be:47:e2:cc:f7:b6:e1:d2:d4:43:9e:dc:eb:
5f:c6:1c:bb:48:bb:40:35:c5:9a:f0:ba:11:ad:73:ea:1e:57:
2f:69:28:af:bc:32:56:a2:6d:30:8f:09:b0:83:b3:6a:9e:73:
c0:3f:af:79:53:4d:d8:a5:11:30:69:03:07:87:a8:8c:b1:4d:
8d:a9:30:d2:33:04:22:73:ca:d1:9f:9d:66:18:d4:eb:cb:6e:
f2:76:ea:ee:79:b2:e1:62:6c:05:ce:df:9d:c3:88:d2:21:45:
11:35:d9:df:53:a8:03:40:f7:d8:ee:7c:c0:ff:da:5f:32:18:
f1:28:99:1c:8e:b3:b1:66:ac:a7:44:5d:89:5e:25:72:f2:a1:
03:d2:b9:2d:66:3a:62:0e:5a:da:1d:5f:8d:1c:38:86:0a:a8:
6b:e1:7a:a6:f0:54:45:91:f3:d4:5a:7b:3c:7d:83:58:ef:05:
cb:25:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:19 2026 by rpki-client