Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: UcKlNM0Eik/5sdu1BZXgdwj85McLs8NwYzTPYO0jCHw=
Subject key identifier: 17:8B:05:73:D0:8A:16:68:F7:5B:03:69:1A:74:61:15:B8:C2:AD:E7
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019D389BEEE83171942084E7E508CFE43BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: FD-L71vOa8KLs_76ysrN9aQ0pzM.roa (hash: noRO8/x+O1Zr80AJy00hkuf+fSAmumdFD5w61Of+JBo=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: nApjPJcwaE7KS4ew1g6IVS7PjUqaN1CRANwelLNnGho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ee:e8:31:71:94:20:84:e7:e5:08:cf:e4:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=178b0573d08a1668f75b03691a746115b8c2ade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:87:a4:1c:f3:fa:f3:d4:63:a6:38:4a:06:
c7:73:f5:22:cd:90:de:32:15:3c:7f:d4:0b:15:ea:
87:d2:b9:bc:5b:bb:04:6b:c9:56:44:e0:db:5e:b9:
b2:83:58:42:d3:07:12:6f:6b:29:4a:28:cd:bd:71:
c8:c5:8c:69:b8:bd:21:d1:93:a9:10:0b:44:49:14:
80:8d:2a:c6:17:94:2d:50:a4:0e:fb:a0:8e:34:bc:
71:b0:15:b3:7f:65:3f:48:ea:31:7e:12:40:4c:ad:
6b:2c:65:b5:82:7f:be:a0:70:72:10:09:fd:77:93:
72:2e:16:bf:70:df:27:47:43:34:16:04:cc:8c:e7:
00:de:08:80:23:28:bd:16:da:f0:88:55:83:c0:5b:
c9:09:45:2a:1f:bc:ce:34:f7:51:08:69:74:76:49:
cd:fa:73:e1:9e:e5:8e:de:92:3b:d3:8c:35:fb:10:
ac:86:69:50:6c:a9:41:4c:66:b7:70:39:87:cd:d4:
72:d1:d4:68:40:eb:a9:6c:0c:05:81:94:48:b7:2b:
af:dc:a7:38:03:6e:43:f0:d5:20:b3:77:58:05:69:
b7:e8:96:68:a9:7c:ae:89:95:12:b0:34:5d:28:ac:
d3:ed:07:ac:7a:16:f8:85:75:3d:2a:88:73:82:8b:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:05:73:D0:8A:16:68:F7:5B:03:69:1A:74:61:15:B8:C2:AD:E7
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:97:2f:4a:f0:39:4d:df:dd:7c:c0:b8:92:eb:db:6d:02:
98:81:bc:7a:78:41:a7:1c:12:48:e8:91:db:45:c3:a0:c0:85:
31:69:ab:1d:aa:c2:38:8b:32:91:e2:0e:e3:3b:23:b8:4f:6a:
55:14:f0:8f:36:38:55:b0:e8:f4:2c:b5:42:40:f4:ce:ff:4a:
b0:89:18:4e:0f:4f:2b:1e:39:02:1e:bd:68:d6:55:c0:87:bf:
c4:0f:7f:24:0b:d5:74:72:10:5e:07:35:53:76:42:75:60:ff:
9e:18:04:12:e2:57:9b:ba:f9:da:0b:b1:1d:07:aa:63:06:7d:
ca:75:2a:c4:c0:a1:eb:df:25:94:07:a9:90:00:ef:e5:65:2e:
0c:bc:f6:e8:65:ef:f0:e5:c0:b1:59:d8:4f:c8:eb:e7:bd:c1:
11:4e:0d:7e:ae:16:36:a8:0f:f2:11:b7:3d:59:0e:99:f1:dd:
96:0c:6b:ec:2c:f9:d7:fc:0d:cc:fa:33:4b:96:f7:4e:3e:f4:
01:2d:18:ce:59:d5:7a:cb:1d:7a:95:42:17:1a:a5:1c:99:72:
7c:07:9a:e3:8c:95:9d:df:00:8f:43:f5:75:44:c2:87:6a:f0:
f9:69:e1:9c:be:10:94:2c:32:1d:f6:40:85:39:cc:2d:3f:51:
1a:a1:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:45 2026 by rpki-client