Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: PkZzbQQqD6xrCW3/PoZ7sIvOfvY2MZZegJQy76TY6RE=
Subject key identifier: 5C:DE:44:86:FC:F6:D8:13:D2:3E:D1:FE:C0:46:0F:19:63:8F:76:20
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 019D382E62A801138B6389A37BAE16176901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 17EA
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: 3VLDvoZCO7skcLMmoqmsMLtkmQU.roa (hash: 54REseVbtlx9mAKpYatYkVRIZlL/47Cw+aylSFwZYDg=)
2: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: /FOH/2TEhuRHWvq4Zr8MrZfxrWoUGHYvwnW6SQAq2kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:a8:01:13:8b:63:89:a3:7b:ae:16:17:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=5cde4486fcf6d813d23ed1fec0460f19638f7620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:88:2b:f0:d5:4b:8a:94:11:a2:cf:54:f5:
cd:ae:a8:f2:85:3c:34:cb:50:8b:02:a4:45:a3:be:
9f:41:d3:8c:03:76:c0:50:31:3a:ff:48:f2:8d:e4:
07:a2:45:f5:c4:6e:a1:ba:e9:5a:32:12:94:71:84:
71:e5:ff:8a:17:d0:09:69:75:08:52:e4:4a:6f:72:
6d:3d:6d:4d:71:e8:fc:60:32:a1:c8:ed:db:cf:00:
5d:b2:76:f8:fd:0a:26:3c:4b:65:34:cb:e5:78:09:
3a:fd:a9:97:10:66:84:9a:cb:e0:13:80:6d:7f:3e:
03:4a:83:84:17:f5:36:a5:25:3b:19:13:8d:15:bd:
d9:09:c7:0f:46:99:c6:50:62:01:bf:a5:27:00:39:
ac:59:a1:5b:84:7a:0a:9e:1a:2d:32:52:ec:81:99:
e2:a3:af:2a:1d:65:29:73:20:61:88:40:51:24:af:
21:73:d9:00:54:76:e0:47:44:55:1d:20:57:74:b0:
b7:b7:46:97:d8:a0:79:77:9b:62:b8:c8:7f:27:b4:
e4:4f:f4:78:35:29:12:eb:68:8e:7e:1e:58:ce:8a:
de:e1:20:4a:5f:8e:74:e7:62:45:1a:ff:bb:f3:a0:
0d:47:fa:ce:9b:fb:d7:bf:51:3c:03:01:57:cf:c4:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DE:44:86:FC:F6:D8:13:D2:3E:D1:FE:C0:46:0F:19:63:8F:76:20
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:55:87:e2:98:87:72:ad:45:71:fd:ec:a7:58:c9:2d:9b:
ee:3b:30:c8:c1:da:bc:20:72:fb:06:df:bc:34:e1:79:c2:d6:
ea:a0:61:6b:10:ab:9c:86:d1:0f:f3:ba:d5:fa:5b:b5:b8:80:
c3:51:e8:36:04:a8:eb:00:e1:32:cb:c4:99:82:75:88:eb:65:
1e:ce:86:49:ac:be:a0:a4:90:8c:29:c8:08:92:fd:dd:c0:19:
26:df:eb:e8:16:d3:74:d1:40:15:e7:77:5b:e6:5b:22:5a:77:
7c:0d:3d:8d:d6:56:46:a1:1b:2a:18:35:89:f6:5e:54:fa:7b:
37:3e:4d:c2:2b:11:ac:94:b1:96:6a:4f:36:36:a2:e3:eb:90:
44:09:da:51:f3:de:13:8a:85:a2:8a:64:5f:74:df:c9:4d:92:
77:58:c4:52:b9:c5:ba:84:50:d4:57:d3:61:1c:e9:c4:3a:39:
d2:7d:df:c9:b1:c8:35:9f:05:7b:61:a6:ce:c9:e3:ad:b1:8a:
f2:4a:27:0a:16:4b:dc:0d:ab:56:81:f2:8b:e7:b6:e3:3b:1c:
1b:be:3d:1b:e6:f6:89:ca:11:d8:1d:13:2d:5e:ea:0a:20:85:
e3:53:63:9f:5c:2e:b7:38:60:17:55:73:6b:f4:ba:51:49:ac:
63:3f:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:24 2026 by rpki-client