Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: a+NRMgUbYc40UBPLLSuQfNDRMDuiKYhNt/ZzD9mC2rg=
Subject key identifier: E5:CC:FC:D0:6E:6E:14:6F:DB:14:7C:08:D0:31:F5:D3:29:87:A2:20
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019D3865D331ADA8B8E805A45AE941A89B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa (hash: a0wsPiri9N8v0Qf4OIW+s20J9vgPW/O4uUqTrgadEUg=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: i87UZ4VEuupMjWRibG3NZaS5mcOpGP6pM7pcunbY7cQ=)
3: huyceIHVnvQkvqjpwCiPSV0-omg.roa (hash: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:31:ad:a8:b8:e8:05:a4:5a:e9:41:a8:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=e5ccfcd06e6e146fdb147c08d031f5d32987a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:3d:a3:a3:bb:1a:e9:b7:48:79:f5:3d:0b:
b5:c6:a0:14:93:34:e1:d4:61:e0:bf:b6:cc:43:92:
d6:48:01:7e:7c:c5:81:be:09:7f:e6:dc:59:00:31:
0d:99:6a:61:ec:3d:14:0e:9f:e5:4d:11:ea:77:14:
6c:13:57:b2:69:02:89:f8:34:f5:d4:c1:cb:49:0f:
3f:cc:b0:28:aa:55:46:9f:66:95:81:0a:d7:81:6a:
de:dd:08:21:87:5e:29:60:ae:04:c8:3b:0c:72:d7:
ab:f3:ba:9b:6d:88:3b:b9:cf:2b:52:0e:25:29:89:
d3:6a:38:49:b0:a5:97:45:88:52:79:e2:e2:cd:4b:
b6:6b:89:c1:32:27:2f:ee:c7:94:fb:8b:4c:1b:f3:
85:3d:53:e0:af:8c:c2:69:20:28:a6:e8:96:54:6c:
b2:1c:0b:06:50:9f:18:6e:01:b7:39:99:01:1b:0a:
6a:41:4c:66:5e:d2:8e:5b:6c:73:8e:bb:92:a6:c6:
8b:d2:73:c5:02:72:40:94:bf:b4:c5:82:cd:e8:83:
42:03:fe:29:b9:a6:fd:e0:6c:e6:b8:cb:ba:9b:1a:
53:80:67:d6:bd:2d:37:58:2b:df:e6:08:b3:c7:e6:
70:56:e7:29:8c:a7:d7:6b:2e:42:e2:94:b5:fb:38:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:FC:D0:6E:6E:14:6F:DB:14:7C:08:D0:31:F5:D3:29:87:A2:20
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4f:b7:d7:c1:37:d9:5c:e0:d4:83:71:40:3e:b4:8e:37:87:
1c:20:b7:c1:a9:a7:15:44:c6:57:7a:a0:b3:8c:3e:66:d7:18:
fa:fa:65:25:66:59:60:46:5b:d1:bc:dc:62:e6:9f:b1:91:13:
7e:d8:9a:93:28:f2:8f:a3:a5:d1:ae:6b:7c:33:47:6d:07:54:
be:b5:e0:41:0c:0b:d2:3c:66:5f:e4:1d:56:eb:74:f2:71:83:
e1:e2:46:61:1a:85:00:47:e9:96:47:61:a5:54:69:b4:b9:5f:
11:75:a8:d3:e9:ee:a0:7a:bc:55:c5:04:2a:0a:92:16:f9:97:
11:ec:72:8b:4d:e8:70:79:0c:c9:5d:7b:7e:c1:ca:bc:4a:12:
c7:49:3e:15:c8:40:56:89:c8:19:e3:94:02:d9:4a:3f:a1:b8:
3f:fa:5a:16:92:b4:a7:c5:23:39:ed:d5:a7:6b:26:eb:0a:16:
09:a8:e5:72:08:5d:14:4e:6a:d8:45:61:ab:99:b1:51:14:98:
9f:ee:48:66:aa:10:8f:f3:20:03:42:4c:85:f2:0e:65:40:9d:
67:2b:8b:c9:27:b8:d6:5d:9a:d3:c5:92:5a:02:f2:36:f7:6e:
bf:84:57:41:01:38:52:a3:74:eb:29:2c:0f:37:5a:10:1f:98:
71:5d:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:45 2026 by rpki-client