Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: DbsybMxoQXL9Uq5t6ZHPe9LQKS4ZeX06EP9we34vGSk=
Subject key identifier: BD:1B:1B:56:2B:60:2C:2E:AE:67:96:81:C0:44:14:CC:1A:F1:F9:9E
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 019D37C0917B8F68D8C0EEF0D1062DE096EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 1506
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: JG-FpgO91koLXjHnrbLdw0m_DUc.roa (hash: fj1OTuklppVkirqmv0QJOcnEevrxbA10Hf/01NWY+bQ=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: qN6uDOV74AbiDwqd0Vi0grU+8WO292b+JoU9qmVf7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:91:7b:8f:68:d8:c0:ee:f0:d1:06:2d:e0:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=bd1b1b562b602c2eae679681c04414cc1af1f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:52:de:44:21:4f:71:b2:05:7c:d7:3d:74:
d9:d4:b8:75:87:ec:31:e4:ec:9e:69:0a:9c:55:b3:
71:ae:78:5a:13:66:9e:b6:6c:4e:8b:b5:1a:0d:63:
c4:b4:35:76:ad:23:a8:ec:16:7d:c0:0e:25:b0:f4:
47:fb:91:45:1d:52:81:02:62:61:09:66:61:97:ee:
c3:92:23:04:e2:38:62:92:5b:0b:d4:dd:9c:60:6f:
20:d7:4f:ee:0d:00:bd:79:e3:6e:6f:34:e5:eb:e9:
8a:c6:74:90:3d:82:51:8e:e8:13:1c:ea:8b:5c:3d:
e5:44:7e:01:37:00:fd:c7:7e:0e:4c:e5:7e:5e:7a:
12:c5:d7:9f:42:38:fd:9f:e8:11:82:1b:6b:d1:68:
0c:9d:1d:a0:38:de:66:82:ea:78:c0:8a:ad:d1:68:
2e:21:c0:83:91:85:c3:ae:a5:14:7b:9f:c0:48:97:
20:65:3a:69:56:19:79:84:3b:7c:4d:e4:4b:7e:85:
dc:3a:2b:db:ef:49:df:04:37:4c:58:4b:1d:b7:5c:
db:08:ed:40:ec:a9:5e:e6:c6:b8:51:5f:f4:5e:66:
33:e8:e2:3d:2d:62:ca:36:00:48:ed:36:ee:b8:2e:
a9:8b:37:f1:1d:5f:c5:de:5b:02:87:a0:07:e1:52:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:1B:56:2B:60:2C:2E:AE:67:96:81:C0:44:14:CC:1A:F1:F9:9E
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ab:e1:33:ad:fe:2f:c3:a9:c3:33:b2:ab:c4:57:73:f9:5f:
0e:10:37:12:33:77:a1:5e:64:d7:65:fd:6e:ad:85:b0:a5:27:
fa:fa:2d:65:1a:2d:88:7c:60:97:f7:30:1e:e4:45:d6:82:b8:
e0:8a:f1:80:ee:97:53:8d:c0:18:c7:7e:19:0f:5c:e0:10:72:
d6:3b:49:96:91:2c:da:38:33:99:4b:47:ab:0c:5f:9a:d9:7a:
0b:a5:2f:38:75:15:02:fc:f9:52:29:67:99:0b:13:82:98:1f:
3c:8a:31:e6:60:e0:24:13:7c:53:d3:5f:a3:5f:db:61:b0:7a:
1c:a4:0a:dc:34:52:1a:30:f8:38:b6:28:a1:e9:51:1c:5e:51:
e4:0b:ba:8a:8b:08:2e:57:cc:03:42:e8:dd:76:85:00:c3:a4:
1e:80:4a:c6:69:20:96:73:d7:67:bf:d0:3b:bf:c6:70:c8:aa:
42:f7:a7:bb:b1:13:1d:87:bc:2f:03:6a:c4:43:7c:24:1b:1b:
fa:e3:72:0c:44:bd:96:46:22:b2:d2:f4:b9:6b:1d:3e:36:6c:
b9:ee:36:c4:42:e9:b7:99:7c:d8:e0:2e:e7:b6:e5:95:57:18:
1e:f1:e4:a9:e8:6a:58:a8:e3:b2:47:94:b4:74:47:c5:39:37:
37:01:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:08 2026 by rpki-client