Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: vAchBX9otzzppUagj4ZR14R2YfRS29wiqOI1BBzYnlk=
Subject key identifier: 86:94:80:7C:36:48:C1:76:A8:41:D6:89:9A:7E:23:22:25:9A:88:E3
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019CE636AE2E77A84A03AE12FFD86D1BE01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 1775
Signing time: Fri 13 Mar 2026 08:01:08 +0000
Manifest this update: Fri 13 Mar 2026 08:01:08 +0000
Manifest next update: Sat 14 Mar 2026 08:01:08 +0000
Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: 7ZP24F+s6XJCJkQGeLuq2YRk0ozX9KcE0TNsNkaEtMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:ae:2e:77:a8:4a:03:ae:12:ff:d8:6d:1b:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Mar 13 08:01:08 2026 GMT
Not After : Mar 14 08:01:08 2026 GMT
Subject: CN=8694807c3648c176a841d6899a7e2322259a88e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:34:57:6a:ef:5b:a8:b4:c9:8c:10:0a:75:
fe:9d:2f:e9:c5:27:60:fe:16:26:e9:93:1d:ab:7b:
a0:c4:b0:f7:8d:38:6c:cf:18:71:da:e9:1d:3e:fb:
8e:c5:39:c4:7d:91:8b:a9:9e:a9:00:2f:23:78:4a:
f5:57:07:f2:17:77:7e:6d:6d:f5:58:0d:9f:31:7f:
53:45:81:0b:4d:5d:51:a1:37:cc:4e:bc:60:15:77:
06:58:a5:7c:87:e4:6f:e1:2e:92:f9:f3:1b:08:ac:
90:91:b3:62:35:8e:93:d7:b7:23:ad:d4:b8:82:41:
b6:d8:13:46:9c:38:c4:e4:9c:52:75:e8:5d:a3:04:
77:09:8c:0d:0b:b7:bb:c0:8f:01:a2:3b:dd:5b:a5:
dd:24:8c:98:29:f6:3c:de:fb:ec:a1:b1:d7:46:da:
e2:a0:04:fa:aa:71:8e:cd:41:3f:3d:df:fa:10:27:
98:d6:53:e8:00:bd:9c:63:61:0c:62:89:22:1a:55:
bf:60:8e:cf:dd:89:c1:e7:2d:8b:c4:b4:f0:35:d3:
8c:89:79:b2:13:dc:52:ca:a3:d5:07:a6:64:d4:2f:
80:84:69:c7:4c:48:ab:c0:94:cf:a0:74:36:35:7a:
27:88:79:6c:69:f1:e1:d1:01:da:b9:df:74:68:e6:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:80:7C:36:48:C1:76:A8:41:D6:89:9A:7E:23:22:25:9A:88:E3
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:2f:21:ca:74:ea:59:28:af:e9:15:ca:71:f8:87:a9:29:
ef:8a:78:43:85:47:20:c8:8c:42:f0:5a:70:43:df:43:12:c7:
bf:91:88:d1:04:32:8b:3a:41:e3:c0:af:11:0d:b6:96:79:c2:
5e:3d:70:99:4a:ca:29:92:10:ea:5a:25:74:4d:a3:27:79:bf:
9d:35:f9:6f:6e:e3:13:3b:57:18:95:95:ce:d4:1e:cd:bb:63:
dd:01:c5:4d:59:cf:84:c1:a0:a9:e5:94:4f:21:5a:d3:95:85:
c8:4b:e5:3d:95:ef:02:79:22:94:38:ea:02:81:59:96:90:0f:
81:dd:f0:ec:57:f2:51:2b:ee:b1:43:4e:bb:37:25:49:81:0f:
de:c8:24:1a:c1:33:c8:2d:57:2f:ed:28:57:82:96:91:43:5a:
70:48:22:33:e0:62:22:4f:a3:43:45:99:30:7c:4d:36:5d:16:
ca:f8:8b:52:e6:6b:fa:58:e7:31:21:b2:9e:b7:2a:d8:d3:75:
d5:8d:4b:95:52:77:4a:7a:86:a5:d0:27:09:8a:a3:00:7f:4b:
2d:32:7e:da:58:17:a4:da:8f:01:eb:01:25:50:cb:cf:59:b8:
eb:c0:a2:fe:c8:5a:9f:97:af:3d:4f:ba:14:69:1c:a8:da:d9:
79:2b:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:56 2026 by rpki-client