Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: NBNinxO39+rXa21ZCEOjpeHH+tzJv701wFaro9h8rDw=
Subject key identifier: E5:01:9C:48:26:2E:9F:C1:28:97:36:0A:41:BD:B5:53:F7:A0:10:EB
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 019D382DFE73D529ACE6F20FED83DB6DADDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: sEb1S5OEssI5Geja7M8avEGQ7Yk.roa (hash: HdelCjXlPsz9p5LSr6jXVUfKElztHFn7Opv8rvurgY8=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: wNVlKZOQIYwFpTcUWaPcppznapa97PiSkQD1Z1OOb1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fe:73:d5:29:ac:e6:f2:0f:ed:83:db:6d:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=e5019c48262e9fc12897360a41bdb553f7a010eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:86:42:25:4f:54:74:bb:23:21:e9:53:61:
26:59:e7:fc:a0:0d:5b:08:0b:c6:b4:a4:47:8b:1e:
de:b8:4e:02:27:17:25:fa:d5:60:68:68:fe:1b:d1:
94:c4:a4:04:44:24:5d:18:ce:ce:b6:ef:93:11:cf:
74:16:b9:4a:45:39:61:63:c2:17:f3:15:09:36:85:
42:65:9f:a1:28:7d:cc:f9:1c:b3:6b:1e:59:7f:7e:
70:6b:1f:13:2f:f5:f3:c4:32:81:9c:4d:5b:6b:a9:
f0:b7:58:0e:b8:8c:d1:24:c6:0f:f8:67:bd:68:20:
82:b2:18:d8:46:82:d7:b6:9d:cb:87:ba:1c:81:3f:
c5:0a:cd:bf:62:64:07:d9:46:22:80:27:66:17:1c:
72:b8:34:df:0e:8e:2a:a8:32:92:8c:6b:58:13:6d:
e6:1b:9e:57:6d:85:dc:27:e7:4c:1a:50:d6:fa:7a:
70:7e:44:f4:e2:3e:32:50:b1:44:7e:4f:a0:c4:65:
c5:97:35:0b:d4:4a:25:05:88:dd:11:57:24:c4:a3:
63:62:fc:30:89:6b:a3:e7:b0:ea:c1:c4:6d:0c:01:
c6:93:2c:56:ff:7d:d0:07:c4:ce:eb:f0:d4:c6:72:
0c:1c:f5:9d:a5:db:de:ce:59:bf:4f:ff:b6:59:78:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:9C:48:26:2E:9F:C1:28:97:36:0A:41:BD:B5:53:F7:A0:10:EB
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f1:b6:11:f2:36:78:8d:82:ff:f5:1d:66:ca:bf:cd:3f:b0:
be:9a:d2:39:39:6f:49:a1:0e:54:20:ee:43:16:ff:4b:90:60:
40:11:5b:af:a2:c8:de:06:f2:78:8b:25:5e:fd:81:3a:ad:81:
65:97:9f:91:cb:66:27:c2:e3:90:69:ac:6b:0f:3d:d6:7d:dc:
b5:14:b7:69:d7:2c:f1:39:57:17:7c:6c:60:7e:1d:a0:b4:7b:
52:90:cc:f4:19:8e:87:31:93:e1:5c:7f:52:8b:cb:80:b6:e5:
9f:78:4e:f7:01:34:eb:29:9c:cb:82:04:1a:34:ab:69:c6:e0:
88:ff:c7:7f:82:af:1a:a1:32:f3:5c:11:9c:69:2b:d5:72:09:
dc:b4:fe:37:9a:85:f9:11:ba:34:82:b6:76:54:d3:43:05:3f:
ae:e9:04:02:c2:6a:79:70:88:71:7b:44:41:79:a0:72:2b:4e:
2d:01:81:7e:52:23:9e:bf:7c:11:d1:06:57:16:d7:5a:f6:b2:
7e:22:a0:28:38:44:de:5d:ee:e2:23:2b:4f:bd:fc:0e:ea:dc:
ee:4f:75:9f:62:6d:eb:70:bc:70:ec:8d:18:74:cf:41:46:e3:
ba:cb:4d:79:a2:ba:58:2b:d8:dd:2b:77:df:77:bc:a2:6f:f7:
27:cf:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:31 2026 by rpki-client