Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: 42xinmhioPC5cXFnzgaydbi/dUxSMtfsQUZ7hGyc+q8=
Subject key identifier: 42:C8:A2:B0:BC:40:E8:F4:D9:90:67:C1:CF:34:56:F3:4A:65:BC:1C
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019E322A2D44F5E7BA3B296499D9ADC617F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 141C
Signing time: Sat 16 May 2026 19:01:25 +0000
Manifest this update: Sat 16 May 2026 19:01:25 +0000
Manifest next update: Sun 17 May 2026 19:01:25 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: hfsB0NlJjSKQVuesPKIPOu2og5dbS4ZT/TgS3cx6p9Y=)
2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:2d:44:f5:e7:ba:3b:29:64:99:d9:ad:c6:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: May 16 19:01:25 2026 GMT
Not After : May 17 19:01:25 2026 GMT
Subject: CN=42c8a2b0bc40e8f4d99067c1cf3456f34a65bc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:a9:fa:4c:1a:f6:ae:5f:e9:cf:77:c9:95:
39:75:52:fe:26:d0:20:b1:b6:ed:5f:b9:a7:76:b1:
cb:f5:5b:70:fa:68:93:5d:37:db:8e:c9:60:aa:d1:
bc:1f:1f:1e:f6:ac:84:6b:0d:62:a3:f0:a5:99:d2:
27:cd:9f:f7:28:22:da:4c:55:62:86:dd:b3:e9:2a:
a1:73:d8:c6:0d:c8:cc:8e:0f:11:40:9b:09:39:4e:
2d:b1:27:1f:68:85:6a:d4:e0:28:75:5b:6b:49:23:
94:c5:8d:91:28:4b:d7:d9:ac:a1:1e:06:68:33:6e:
43:75:3d:57:5e:d1:8f:02:4e:ca:d2:cb:ca:ab:2c:
59:13:ea:d0:94:40:4b:df:8c:ce:0a:a0:d9:c6:6e:
66:d3:b5:2d:64:21:fa:13:d6:89:1d:49:31:66:17:
5a:5a:67:58:08:3e:73:14:5c:15:b7:52:f4:a8:dd:
c0:94:1e:82:be:97:9b:56:72:18:0e:ca:ea:93:df:
dc:00:f1:33:4b:b6:ab:b7:f8:da:42:ca:6c:84:17:
cb:c2:88:db:19:a7:3c:a0:ac:2d:14:0e:4e:06:97:
14:ff:32:14:1a:da:b1:08:93:82:24:25:60:46:03:
d4:e3:3f:8e:96:98:31:21:0d:2e:57:0f:65:7a:11:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:A2:B0:BC:40:E8:F4:D9:90:67:C1:CF:34:56:F3:4A:65:BC:1C
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:94:a8:3e:b8:43:7e:01:95:01:b2:0b:62:03:e8:c4:93:
23:f4:98:c3:ee:08:dc:5d:ef:2b:a2:4c:f1:b8:79:87:85:10:
47:28:86:a2:1e:48:27:3a:d3:1f:6c:1f:bd:35:4c:f2:da:cc:
33:0d:37:2a:1b:d0:1b:1a:ad:9d:c4:57:da:99:f1:b2:e1:bc:
0a:62:32:c8:8f:f7:99:ed:87:97:94:ea:07:31:ea:29:21:a2:
6a:43:3d:cf:32:2a:72:f1:6f:cb:bd:6d:6f:4f:cf:f9:97:ef:
74:f5:2d:c3:c8:01:25:96:2f:13:00:16:d2:c7:44:7e:a5:af:
78:49:51:ba:8e:14:71:33:86:36:40:26:ff:05:ae:a2:25:64:
32:e1:e4:18:a3:6c:6d:e5:34:e7:37:f1:ed:0b:58:52:ec:56:
98:d1:42:92:1f:e0:c4:61:b7:8d:ee:77:a8:b9:f6:7d:c8:75:
69:09:2e:11:b6:ba:f8:31:02:a8:cd:98:f6:db:97:e3:c1:e5:
d4:38:f4:4b:eb:dc:5a:c1:82:b8:16:eb:7d:25:af:e1:5e:44:
57:e1:9b:f2:c7:4a:fe:8b:1a:03:1d:97:7f:87:0f:6f:06:15:
03:33:8e:be:f7:cc:5c:7c:ef:67:b9:2e:7d:9d:3f:24:c7:7e:
16:40:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:12 2026 by rpki-client