Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 0FrV/9r367/5PBnVGpeDrJk4uACjkMCFEzMJiatpQak=
Subject key identifier: 07:7D:5B:16:50:6E:CE:00:13:C0:2A:3F:18:9F:5E:ED:DB:C6:75:F8
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019CE44861C9B0FF511A36E589C0325E7BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 23:01:14 +0000
Manifest this update: Thu 12 Mar 2026 23:01:14 +0000
Manifest next update: Fri 13 Mar 2026 23:01:14 +0000
Files and hashes: 1: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: Sh3GD6GXzDi1uwG40E2grVHHxPPa1nDqx/++lAs/1M0=)
2: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (hash: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:61:c9:b0:ff:51:1a:36:e5:89:c0:32:5e:7b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Mar 12 23:01:14 2026 GMT
Not After : Mar 13 23:01:14 2026 GMT
Subject: CN=077d5b16506ece0013c02a3f189f5eeddbc675f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:50:dd:07:ef:75:4d:9b:88:7f:9e:92:c6:
b0:75:2f:11:ae:55:75:37:30:e1:d9:7e:85:75:90:
b7:b7:dc:8e:e6:06:1a:2c:e4:ee:87:61:78:30:77:
08:bc:79:81:5e:86:92:d2:62:5c:1d:3b:b9:d9:d3:
24:d7:dc:77:06:de:fc:ad:f5:fa:9c:9a:ed:85:c5:
ee:c3:f7:da:e5:8d:0f:35:16:bb:92:58:4f:46:42:
15:c1:20:c1:49:50:29:50:29:ad:c5:24:79:7d:ad:
b3:09:c5:50:79:2b:53:7c:26:fc:9d:f1:94:bf:a3:
32:37:b9:11:bf:c3:d2:e5:e4:41:83:7d:33:54:ad:
9a:00:e8:64:20:dd:ee:97:0f:d3:0b:8f:57:d8:78:
cc:32:81:33:84:b8:b1:e9:c5:c9:e7:83:8d:65:e8:
7c:2a:b8:33:f9:13:21:8a:87:05:68:b0:a8:b0:e5:
97:fe:e5:c5:2d:be:c3:14:f3:b8:8d:5a:bb:dd:f1:
83:2a:14:e1:2f:df:5b:91:39:7b:82:77:dd:97:c2:
37:f5:3a:93:1c:c0:0c:dc:6a:2d:20:f8:10:da:78:
ad:1c:f4:77:fc:9a:ad:24:50:4d:32:81:ec:f8:c7:
1f:26:52:5f:b1:d5:8e:a1:97:2e:28:f3:ec:9d:be:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:5B:16:50:6E:CE:00:13:C0:2A:3F:18:9F:5E:ED:DB:C6:75:F8
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:c7:13:a8:1d:02:27:7e:71:c5:66:c4:32:2a:74:2c:ea:
72:e3:ef:b8:41:55:54:70:22:09:19:db:68:6d:e5:ff:b9:34:
32:65:70:8d:a5:c8:24:05:bf:32:79:01:8d:f2:88:a4:11:37:
c1:79:9d:f9:cf:54:6d:ef:4b:e8:55:6b:b9:e3:c2:45:e6:fa:
34:b0:a7:18:a2:19:29:dd:8e:e9:56:26:25:13:0e:18:66:96:
ee:7b:65:86:4a:68:ae:aa:c8:6c:10:2a:76:a0:dd:5e:ac:76:
b7:ff:cb:ad:8f:c6:4b:bd:15:0e:3f:b8:3d:3b:8e:54:6c:5d:
00:28:5d:59:f2:7f:bf:99:1b:75:b2:58:a3:15:9c:ca:f9:15:
63:fc:42:5e:46:ea:fd:b4:a2:64:c6:70:0f:3b:4b:7e:99:39:
de:f8:1f:d4:82:21:c3:2a:5e:ce:81:78:ee:56:a0:cb:94:0f:
00:e0:0b:5d:91:dc:63:f5:03:ac:ea:34:39:46:d0:68:fa:04:
32:56:dc:04:59:9c:b3:39:de:f5:25:79:bd:e0:01:a3:f9:9a:
3b:28:3f:42:24:5f:54:f1:17:60:49:87:0e:5c:8e:ff:82:f1:
b2:f8:31:23:a9:46:11:fc:da:e0:c3:b8:f4:6b:67:5e:81:db:
1e:5d:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:51 2026 by rpki-client