Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: 9o9rhd1h3Zpv4oe0IiuWLM1Wx4txwdcSdPbsyCPqqtg=
Subject key identifier: 4F:58:29:EF:9B:B0:15:30:2E:EA:D8:74:F9:DE:C2:21:9E:EA:CE:BF
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019D38D2C3BEBBA4FD0BD310AB938407E407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 0wzRHJf/vvqTmV2kGxSmUw7C1KzeznTWDGRcyVRkydo=)
2: avC4TDy0YNmu43wu3PPZQnyz3tY.roa (hash: SjlTG6q/Qs6sxucjwFRvD4MugPMGQX1MddPjbQLIX8o=)
3: pqWAwtSrVWHhYeLyoOZYwb_89MY.roa (hash: UtepypB/1E+cJ1/s4IJjEbaQqJ0MlYB18cpRtSY7yhY=)
4: u0N0v0cqXVFGT5AQTDctFWn93WM.roa (hash: IuAcsweM8Zm44/Mf/txoK9/5Poy7ZOdXCqud2LmxB9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c3:be:bb:a4:fd:0b:d3:10:ab:93:84:07:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=4f5829ef9bb015302eead874f9dec2219eeacebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:c7:05:5e:d9:08:07:ee:26:a1:88:77:83:
13:73:1b:ab:b5:bd:b7:84:6d:cb:72:4f:bb:84:87:
04:9e:d6:96:dd:39:c6:f5:f5:a7:df:8a:e2:cc:f8:
38:5b:c1:10:37:b6:11:59:2f:28:4e:c4:63:73:1b:
68:30:f8:35:c1:d9:ed:93:7c:12:7d:0f:ea:69:c5:
61:30:4a:0d:37:90:70:1f:f8:bb:cf:fe:97:09:fd:
31:b3:b6:0b:e1:30:8f:c8:d8:5a:0c:9d:55:05:0c:
6e:21:53:12:6e:b9:87:15:bd:57:ae:1a:5a:a0:94:
d3:c7:2f:36:23:cc:8e:9b:fd:39:e5:97:1d:6d:bf:
0c:78:bd:17:27:c2:25:6b:74:09:a1:65:19:c6:b8:
0a:5b:a7:a1:78:de:25:70:d4:80:d4:dd:1b:a7:7c:
94:0e:48:22:9e:6c:b4:d2:2c:4d:db:2c:44:20:95:
4c:b8:7a:d6:55:5d:93:fd:49:72:1f:95:86:a2:f0:
bd:52:cc:86:dd:2a:d7:d4:57:3e:7b:98:d7:73:d9:
da:0d:9a:72:2f:fd:aa:44:0d:47:fc:2e:89:ff:6e:
7f:25:68:97:fa:a2:3f:84:0b:7f:5b:6b:6c:fa:0b:
9d:5a:71:37:75:12:f3:a4:15:9d:20:c6:6f:b2:39:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:29:EF:9B:B0:15:30:2E:EA:D8:74:F9:DE:C2:21:9E:EA:CE:BF
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bc:95:4a:66:e2:fb:b0:5f:3c:b8:b2:96:53:fa:64:33:24:
34:7d:fc:9f:14:e4:67:dd:cf:bb:fc:49:46:59:f5:41:99:ef:
e2:84:71:3b:03:4f:db:33:54:f3:6a:ce:96:42:06:16:68:c4:
69:81:84:5f:f4:52:5c:bc:3d:03:2b:7a:53:21:e0:6d:c6:c0:
a2:61:10:a2:62:3d:26:d9:01:b5:38:66:c4:3f:d9:29:46:c4:
5d:c9:3b:88:6e:e8:16:5b:bf:c2:a5:b1:37:b9:e2:83:0c:24:
c4:e2:d4:b6:7a:39:11:bb:6c:8c:64:ca:1a:ec:1b:5d:11:4e:
4c:5e:47:e6:92:2d:55:77:e5:0c:a3:a4:79:54:ce:c0:c1:07:
14:ee:2e:90:cf:98:e7:cc:b1:c3:99:f6:6d:44:1a:9c:4d:1e:
e3:3f:28:3f:45:66:29:c9:e9:85:66:fe:2d:d5:c1:9f:16:1b:
2c:a1:f1:db:48:25:16:f1:c7:e8:10:77:11:f5:fe:1f:8e:ff:
9d:82:5f:82:1d:fb:ad:1b:74:ee:19:9d:7b:b6:3a:b6:79:d6:
ba:1e:43:77:e5:b5:d5:dc:a0:68:86:17:38:d2:b7:43:41:17:
9c:aa:43:ae:25:f1:2f:6b:2d:97:2a:af:a0:ce:55:88:9c:e2:
8c:58:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:19 2026 by rpki-client