Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: bPZvoMXbHhQ/GgH7geIL+8/CbK8bE4qRCLwyw9uDm/k=
Subject key identifier: C6:00:F6:F9:77:EE:24:F3:2D:7D:C6:2A:54:C8:68:98:AC:9B:2C:CE
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019D389BE39C74CD212657375B5F20F27E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 03D1
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: pwqEACGL0eb5npb1SrF3NLpJnTffj/Py7gAJqxmL7XI=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e3:9c:74:cd:21:26:57:37:5b:5f:20:f2:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=c600f6f977ee24f32d7dc62a54c86898ac9b2cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:26:f5:47:a0:83:c1:8c:e1:c0:d8:06:ce:
1e:c9:f2:25:f1:ed:60:97:cd:36:a2:ff:fb:c1:a5:
9f:8d:b2:2c:b7:34:9b:db:d4:8a:4b:72:21:22:45:
fa:d8:f9:90:af:18:6a:e2:2f:34:44:13:82:f3:06:
8e:58:0d:d4:96:ac:73:6c:d5:64:51:ea:49:61:85:
6b:fa:7a:2d:a6:c6:a5:7c:d3:5a:7f:d6:46:f3:91:
ec:29:43:5c:ba:71:b0:65:33:bd:23:16:03:70:dd:
86:ae:9c:4d:2e:eb:96:5a:68:03:6c:11:e1:f7:16:
8c:97:e1:68:96:fe:75:a1:96:8b:32:51:41:ae:1b:
68:5f:4c:67:96:04:0f:a7:ce:b6:9e:d4:9a:84:d5:
12:4e:f7:42:e7:93:1a:07:9c:70:ac:84:50:8d:ef:
d6:11:6a:ef:26:b0:85:b9:52:6d:02:e4:da:ce:db:
b5:59:0f:aa:f7:da:73:44:b7:76:a7:cb:ec:e4:21:
92:60:e9:16:4b:90:bc:e8:5f:6a:9d:67:45:6b:e1:
9f:4c:1c:c0:52:8a:52:65:8f:0a:91:1f:84:b2:5d:
15:78:2f:79:c5:8a:50:23:58:00:4d:da:1b:70:e8:
4b:eb:a5:3f:99:36:79:05:2a:44:16:2e:30:8f:99:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:F6:F9:77:EE:24:F3:2D:7D:C6:2A:54:C8:68:98:AC:9B:2C:CE
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:29:b1:3a:a8:ed:c2:89:e1:2e:82:7e:0f:b7:26:36:f0:
06:05:85:bf:72:cb:a6:4d:d4:89:f6:45:e8:76:e5:dd:48:1b:
9b:36:eb:ba:69:02:bf:94:e1:e3:fe:74:37:b6:33:ed:bc:24:
41:23:35:f0:70:82:83:31:66:95:83:1c:01:e9:b8:fa:ab:93:
3a:54:5d:db:91:b9:3d:19:76:08:f5:31:4b:77:bb:3a:c9:8a:
08:f4:71:54:17:ec:8c:51:59:a6:5a:3a:5a:8b:5c:cf:ff:ed:
e6:ab:7d:4e:29:eb:38:38:d4:bf:68:83:25:f3:7d:41:fd:f0:
12:02:47:73:88:da:dc:41:51:bf:d2:d1:91:99:59:12:be:a1:
90:67:ba:c7:5d:e3:e0:61:6e:f7:12:23:b9:fc:99:89:3c:c8:
05:79:5e:f2:ce:ad:89:86:83:9d:c3:bb:01:e4:3c:7e:9f:a5:
83:a8:be:f4:8e:9b:59:27:74:b5:7d:7e:61:ec:e7:b7:9c:71:
f4:12:04:63:54:80:a8:80:7d:a8:02:02:a5:56:0f:80:ce:74:
a6:3d:e8:e1:09:7d:0d:34:5a:4c:72:8d:cc:e9:26:8b:9a:c6:
be:3f:6c:91:0c:16:4a:1e:c4:c7:d1:bb:f0:19:2d:df:a3:3b:
a5:4c:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:13 2026 by rpki-client