Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: xmQnbQU/gaErhkbq1EYk1O5UiK6W02kZIRUFNOtNpjY=
Subject key identifier: CF:E9:8C:FF:7D:1F:6E:5C:92:35:74:6E:16:69:D6:A2:84:C4:26:94
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019D3909987C09ADE0179543EE5661953428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 139B
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: i2dEle/JUEtKTsSGiWbk0BTml4rcSL2h+xSrW1rY4Cw=)
2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:98:7c:09:ad:e0:17:95:43:ee:56:61:95:34:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=cfe98cff7d1f6e5c9235746e1669d6a284c42694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:43:42:ad:f0:78:83:b2:6c:0a:bb:2d:e5:
59:ca:48:57:c6:5a:c2:f8:44:97:45:d4:e6:0c:a9:
ff:0a:7a:6d:fe:55:0d:6f:7a:71:66:48:34:e0:cd:
4b:af:4b:5a:b6:46:86:66:bd:02:10:24:ce:40:25:
73:bf:91:3f:5d:94:1e:8a:86:c8:4a:bd:ef:b6:e3:
10:01:64:94:06:36:5f:4a:63:ce:ad:0b:bc:59:a4:
76:b7:83:ef:b4:99:6a:95:16:60:e2:ac:ee:3f:96:
16:49:7e:30:a7:77:d3:28:84:59:dc:de:04:2a:8f:
5a:c7:c5:fa:03:9e:6d:a8:fd:9b:cb:17:3a:03:6a:
3a:01:07:d2:32:3d:d7:b9:f6:06:62:46:3c:a5:c1:
6d:d4:19:53:85:34:6f:82:3a:e7:09:ff:bb:98:19:
ac:ed:8b:95:7a:ba:51:ea:86:fb:62:33:31:c0:6c:
99:91:c6:bd:0f:4c:41:dc:3c:8b:05:44:a3:7e:89:
b0:93:1a:62:be:a8:6a:2a:3d:f7:49:1a:27:ea:48:
52:41:4a:6c:f6:6b:ea:2f:a8:19:09:ad:ea:49:53:
b0:c4:93:10:f9:d9:b2:39:03:2d:73:4c:dc:47:c5:
b0:5d:3b:6c:07:01:e9:a0:ac:9a:5f:cb:da:9e:bf:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:8C:FF:7D:1F:6E:5C:92:35:74:6E:16:69:D6:A2:84:C4:26:94
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:07:00:1e:34:e1:3a:1d:bc:11:77:14:01:99:17:cd:25:ec:
74:68:32:dc:42:ce:63:5b:d8:d7:31:9d:34:9d:b4:50:65:4e:
d0:93:a2:6d:bb:33:f6:13:14:93:0a:2a:b5:58:7f:57:8e:f4:
d3:db:9f:0f:12:24:1d:68:af:48:ab:b3:2f:1a:f5:b3:8e:20:
97:f2:14:5c:17:91:66:60:9d:81:1b:b2:f4:14:a7:28:b7:1f:
2c:fc:05:fd:61:af:d1:b0:34:2f:e1:4f:06:5c:07:20:51:1d:
ee:49:f5:ef:06:a9:c2:ad:78:fe:3c:5c:af:c1:fc:82:fc:d2:
62:dc:c6:a7:61:61:3f:10:6f:ac:76:d7:76:45:0b:d2:a9:5d:
17:a2:ac:6e:12:d7:1a:7d:5c:41:49:a2:8c:2f:de:14:82:21:
87:2c:d7:1f:4f:c5:a5:8d:17:37:28:21:01:e5:b9:05:8f:92:
3c:44:84:0f:2a:ce:5c:74:1b:d9:11:41:e9:7a:1b:c7:a0:a3:
4a:29:51:fd:cc:2a:ba:58:8c:b9:1c:6d:49:e8:d2:a7:1a:a6:
59:93:1c:33:7e:ea:b1:f0:83:33:9e:ac:f7:75:f7:10:96:12:
8e:9d:dd:73:0a:40:68:2a:79:c8:4e:59:f1:2c:59:5d:a8:a6:
41:30:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:13 2026 by rpki-client