Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: TKfzEHPbrtwmEL8tmTjGgjPS23ElUQCMyRsEZEgXLKI=
Subject key identifier: 40:73:F4:10:60:5C:CC:AF:E1:ED:DC:AB:EA:66:DE:F4:2B:F2:B2:58
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 019D371B89B9EBFE063E7F91306DAD12F89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0F75
Signing time: Sun 29 Mar 2026 01:00:44 +0000
Manifest this update: Sun 29 Mar 2026 01:00:44 +0000
Manifest next update: Mon 30 Mar 2026 01:00:44 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: 0Kbe0Gs088naHAqMlVx1ffcUtZGw2s2o04FOX84i/us=)
2: jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa (hash: ASLwprhv9CqnRanTW6K8l0OBhjWckJJYB7wKNCuJgis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:89:b9:eb:fe:06:3e:7f:91:30:6d:ad:12:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Mar 29 01:00:44 2026 GMT
Not After : Mar 30 01:00:44 2026 GMT
Subject: CN=4073f410605cccafe1eddcabea66def42bf2b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:f1:e1:9a:12:64:ab:5c:ad:7b:94:33:20:
0d:92:e9:55:47:1a:ae:65:32:bd:2f:57:87:3b:28:
c1:cf:a3:62:45:b8:61:dc:76:b3:a4:48:7c:f3:7e:
33:04:2d:67:39:70:31:17:ea:dd:70:71:16:44:51:
67:d3:6d:bb:39:55:3f:d1:1f:19:a0:b2:63:51:c6:
e0:3d:ed:61:06:c6:3b:52:b2:f9:6f:75:99:20:92:
ac:a4:9f:50:a3:90:2a:db:23:f7:6a:1c:78:b0:9e:
62:ad:20:eb:75:9d:47:0b:35:49:5d:3b:08:67:62:
01:c5:33:6c:17:3c:13:89:be:e9:e0:82:6e:9e:be:
d4:3b:cc:b1:6a:17:a4:d3:87:22:25:7d:5e:ef:3d:
6b:e3:45:e4:6f:9c:e2:76:10:f2:e5:44:1d:93:89:
c7:6f:05:f5:6e:3d:8e:ae:15:6a:5f:29:07:ff:e1:
0b:2a:c8:0c:87:6c:6f:cb:d9:00:90:26:85:da:92:
fe:26:40:91:92:a0:c9:d3:47:c1:3c:11:12:5a:bb:
42:57:c9:0b:1a:71:37:38:b9:ce:43:93:bd:52:7f:
0f:2a:d8:59:bd:1e:b2:34:d1:ea:e3:57:8e:e9:e6:
6e:68:5c:a3:a4:13:40:b0:8d:76:d7:1b:0a:a5:6c:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:F4:10:60:5C:CC:AF:E1:ED:DC:AB:EA:66:DE:F4:2B:F2:B2:58
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4c:41:39:d0:9d:4f:5a:09:a8:44:f9:c2:44:39:83:20:20:
d4:89:61:81:5e:06:56:28:dc:4b:e3:00:94:a1:7f:55:57:ef:
fb:0d:42:c2:26:44:6d:4a:c6:13:61:00:ad:ea:b1:96:77:45:
f4:a3:e5:b0:2e:d7:9c:72:04:90:6f:f4:55:27:7e:8b:e1:da:
eb:aa:ee:e8:5a:cd:f5:59:27:31:0e:ab:90:4a:a8:4b:04:ad:
18:87:2f:a6:39:8f:21:7e:5b:ff:be:66:b1:63:03:91:9e:ce:
45:c8:aa:9f:88:f9:61:28:d2:28:ad:e7:f2:44:69:49:59:bd:
28:f1:15:7c:b8:9c:ae:ed:e2:2c:c8:08:2a:d4:58:76:61:46:
6f:ba:03:1f:35:7f:91:32:a7:a8:e2:31:ef:42:c3:2d:03:32:
25:32:6f:27:a1:4c:fa:56:0b:0b:ff:17:7b:b0:6b:db:64:62:
2f:42:a7:13:2f:a6:4a:ff:db:0d:4b:42:69:5c:08:a1:22:da:
70:c1:ae:f9:02:57:f8:fb:b9:5e:e7:a3:e7:21:73:f8:8b:8b:
50:07:e5:d8:d5:75:a3:11:59:3c:7b:b1:45:59:da:2b:7d:77:
68:68:70:08:7d:62:2a:f8:f4:63:31:a7:d0:6d:b8:b9:08:4f:
a4:62:dd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4m56/4GPn+RMG2tEvifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1
ZDNmNTAwHhcNMjYwMzI5MDEwMDQ0WhcNMjYwMzMwMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg0MDczZjQxMDYwNWNjY2FmZTFlZGRjYWJlYTY2ZGVmNDJiZjJiMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcTx4ZoSZKtcrXuUMyANkulVRxqu
ZTK9L1eHOyjBz6NiRbhh3HazpEh8834zBC1nOXAxF+rdcHEWRFFn0227OVU/0R8Z
oLJjUcbgPe1hBsY7UrL5b3WZIJKspJ9Qo5Aq2yP3ahx4sJ5irSDrdZ1HCzVJXTsI
Z2IBxTNsFzwTib7p4IJunr7UO8yxahek04ciJX1e7z1r40Xkb5zidhDy5UQdk4nH
bwX1bj2OrhVqXykH/+ELKsgMh2xvy9kAkCaF2pL+JkCRkqDJ00fBPBESWrtCV8kL
GnE3OLnOQ5O9Un8PKthZvR6yNNHq41eO6eZuaFyjpBNAsI121xsKpWzTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBz9BBgXMyv4e3cq+pm3vQr8rJYMB8GA1UdIwQY
MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt
ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh
LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUxBOdCd
T1oJqET5wkQ5gyAg1IlhgV4GVijcS+MAlKF/VVfv+w1CwiZEbUrGE2EAreqxlndF
9KPlsC7XnHIEkG/0VSd+i+Ha66ru6FrN9VknMQ6rkEqoSwStGIcvpjmPIX5b/75m
sWMDkZ7ORciqn4j5YSjSKK3n8kRpSVm9KPEVfLicru3iLMgIKtRYdmFGb7oDHzV/
kTKnqOIx70LDLQMyJTJvJ6FM+lYLC/8Xe7Br22RiL0KnEy+mSv/bDUtCaVwIoSLa
cMGu+QJX+Pu5Xuej5yFz+IuLUAfl2NV1oxFZPHuxRVnaK313aGhwCH1iKvj0YzGn
0G24uQhPpGLdbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client