Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: IThSVvnz4aOIBTwhsQE8+zHF9Vw6nEBY1JSseWbeHoM=
Subject key identifier: A7:E2:47:F6:9F:29:97:42:3F:EB:2F:14:9D:A9:F6:03:FB:3A:CF:05
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 019D38D2A8186A6D193AAEE3039D675548FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: Tw8DtqaVIEnsUJ/oihh+JmAOfrJ4QzyDi8L7/1eUDTE=)
2: vXSPj4U0XPgUCORzKqKn2pQ-_54.roa (hash: a+QqfJndzh+WZAcq/hkoF/C3W7oEsp7bn060vJhpI74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:18:6a:6d:19:3a:ae:e3:03:9d:67:55:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=a7e247f69f2997423feb2f149da9f603fb3acf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:ea:00:59:28:b0:ae:2a:39:81:d8:79:0f:
e2:c8:6e:a8:99:ca:99:3a:7d:8b:ec:da:35:60:95:
0f:07:8a:ad:b3:a6:91:ed:98:4c:23:c0:35:38:71:
e0:01:3d:e3:67:32:49:1e:6c:b6:b9:46:06:ac:4e:
40:6e:df:3f:3c:72:a4:f4:9e:be:7f:ad:20:10:3f:
91:9c:0b:7a:53:23:23:75:22:00:8c:2c:96:b3:73:
63:4b:1e:35:66:bf:e0:c2:f8:f7:65:c7:c2:95:95:
16:30:65:eb:66:59:85:cc:63:f4:2e:59:81:ae:34:
28:d4:88:4c:2b:b4:12:c4:c2:3c:9f:6d:64:07:2c:
eb:50:b4:c3:d0:36:2f:51:18:7c:d7:8f:94:c2:4e:
6f:f0:f3:88:72:38:9b:1b:cd:84:7f:56:f1:98:c1:
4a:09:f9:35:77:d5:be:a9:f8:e4:29:e2:13:c2:fe:
50:84:91:61:e6:66:55:60:12:72:9b:84:86:bf:36:
2d:83:89:cb:e9:12:12:74:f1:38:52:ca:29:21:6d:
a2:4a:90:bb:a1:58:be:bf:55:f8:4d:1d:d4:c6:60:
74:ac:ba:e8:cc:29:29:c5:83:8a:8a:d3:3a:fb:b1:
12:85:fe:89:41:99:a8:8f:ce:95:a6:01:60:9e:80:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:47:F6:9F:29:97:42:3F:EB:2F:14:9D:A9:F6:03:FB:3A:CF:05
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6d:aa:d9:fb:86:8a:1e:de:a0:a6:8b:d5:33:84:58:c5:47:
1e:46:e6:90:e9:1f:50:90:9a:56:e8:5a:da:be:79:4b:9a:d5:
ab:25:cd:ef:9c:56:00:50:92:e8:58:40:d2:3a:78:47:ac:d8:
b1:26:96:95:03:16:44:5e:84:dc:60:00:cd:28:73:29:42:71:
53:54:68:d9:f4:d8:7f:10:c4:1e:a7:33:7b:95:14:d3:92:39:
79:d7:18:70:88:c8:a7:03:f4:47:dd:09:04:b9:5e:54:9b:90:
30:a3:1b:3f:c5:d9:61:88:11:86:45:35:c1:fe:66:a2:84:f6:
2e:a5:23:0e:d0:0f:65:80:14:01:fc:2d:dd:c3:d9:38:68:70:
7d:08:00:74:f5:7d:bc:13:43:7f:46:f9:0b:69:5c:cc:1b:fd:
74:9d:90:15:6e:11:e5:d1:7d:1e:03:b3:29:6d:1f:16:5e:af:
69:60:a2:48:4d:b2:46:be:2a:2c:c3:21:22:59:20:6f:99:27:
d8:37:33:16:35:60:1f:9f:06:bc:77:cc:21:d2:6b:f4:37:74:
83:08:87:a3:45:78:6d:80:46:e1:50:f7:af:2e:a9:d6:69:cc:
be:b3:1b:af:18:01:13:44:59:88:76:c7:f6:42:51:59:77:bb:
c8:c9:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:57 2026 by rpki-client