Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: Dfj5j+Rt1ZCbzIpc3GtgDM7PPBXHOXnEJSR0ZH2I4vg=
Subject key identifier: 1F:7A:71:4C:34:73:25:A9:58:68:07:2A:79:40:2F:94:5A:00:AF:79
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019D38663FE7D4E8F45082E49F32D947F571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: vud7MeOVRH7zduzYc9m9Ih0W6ODiBtaoF3Bs9c7sbWc=)
2: murlFmYx_3jII0U53z-9rIh7SG8.roa (hash: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:e7:d4:e8:f4:50:82:e4:9f:32:d9:47:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=1f7a714c347325a95868072a79402f945a00af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:fd:26:52:fe:87:10:b2:1d:ca:5a:40:ea:
9b:4f:73:8c:52:91:0d:ee:88:dc:e9:ac:91:d7:f4:
c2:41:63:51:ba:bb:f5:8e:e4:a3:ad:20:e7:18:fc:
12:22:c3:5f:c0:d7:77:46:3f:21:fd:08:09:62:29:
b8:8d:45:96:15:5b:31:f2:58:a6:89:9f:c5:f9:7c:
1d:18:75:0d:a4:03:e8:08:7e:ec:20:52:f7:8e:af:
e0:c1:51:d8:13:98:ad:3b:62:6a:06:13:96:da:5d:
5d:69:96:88:9a:6e:5a:18:f9:c8:27:76:8c:b2:58:
45:32:3d:d6:8d:67:9d:00:9a:34:e6:cf:49:3c:84:
3c:49:aa:2a:5c:1f:c0:e4:89:0e:b8:ee:84:c3:75:
e2:1e:bb:e1:01:78:8d:85:f1:25:f5:5d:25:d6:dc:
d5:6c:e2:e2:db:c4:3b:5e:88:93:17:9b:df:6e:0f:
f5:47:2e:d9:69:94:62:36:b0:aa:28:33:e4:4f:07:
eb:c5:d1:6e:66:9d:49:1d:fd:9e:02:de:1a:26:b3:
68:a5:62:a9:16:97:a3:de:b9:14:4f:fe:f3:de:06:
66:16:fa:d7:36:d6:0d:5e:bc:6c:6a:fc:a8:4f:b2:
c5:9f:95:2c:21:41:05:87:7e:b6:e7:19:08:3b:5f:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:71:4C:34:73:25:A9:58:68:07:2A:79:40:2F:94:5A:00:AF:79
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:4a:b6:82:a1:40:c6:96:a7:e1:4d:cd:77:7c:08:11:09:
58:f0:13:7f:24:fc:38:f5:35:ed:ed:85:73:3c:54:de:09:1a:
95:6a:ee:74:b7:9b:78:16:4d:c1:74:96:a5:5d:d8:ae:74:e5:
13:d2:c6:54:fe:f5:62:a8:e4:fe:1d:84:8f:aa:00:ea:c4:76:
5c:cc:2d:30:24:a4:99:8d:f9:3d:7a:48:21:a3:d6:1a:df:fb:
0d:49:50:d8:70:14:8b:28:d2:e9:12:cb:03:7e:ac:55:e4:ae:
f5:2a:8d:19:c1:0a:b6:63:1b:d1:cb:c9:bd:59:39:9b:27:81:
fb:ed:db:50:39:03:83:c2:32:89:38:cd:fe:d6:f8:c5:47:26:
ab:4b:d0:e8:5e:d3:28:a3:5b:02:4f:d2:d3:1d:74:86:ec:ee:
ae:49:b5:92:15:1b:9e:8e:53:67:8a:4a:48:67:1f:8d:11:ce:
5f:95:11:ca:26:50:e0:ba:af:2d:73:f5:8c:eb:49:20:44:e7:
e3:ae:36:c1:be:97:ec:89:62:c7:80:5f:13:84:c2:04:b2:31:
94:14:8a:7d:01:f5:dd:f8:7c:e3:ca:31:85:5a:e1:6c:1f:3b:
ca:32:0f:45:24:23:87:55:0e:07:55:e5:e8:60:0b:2f:32:ee:
e3:41:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client