Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier: 5fecVogIb2so/pfMOyyrRzL+TaWG5WeM2m03Y5BerIM=
Subject key identifier: 03:01:14:27:6E:30:01:D6:0C:74:79:81:D6:69:CE:D4:FF:21:F0:72
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 019D37F6E78D6A1607236878189EE3F16C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (hash: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA=)
2: YytdvmUqMlUYaz2rUM4035jtC1g.roa (hash: shR9sZHCpyT2KbYpD+KESwIQfMOwq9VzuzMQm7Ip8Tg=)
3: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: Gd3fVzmJ+Vj4oUSPk5oig2QR3hgoPtL2XLl0Zweh36c=)
4: _rX0Pp7-maFWlmqvdtFQDE9VMd4.roa (hash: JcwoPPYbwcTSP2znNESFrTnQNOV0v0WHsf0jgmgiH6I=)
5: by-UGjZnPxHASghfMrX3xMxAH0U.roa (hash: E+h5Wx406s4BfDje+75V+He27RZ6hOR4CfZDRt1lPHI=)
6: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (hash: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk=)
7: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (hash: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e7:8d:6a:16:07:23:68:78:18:9e:e3:f1:6c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=030114276e3001d60c747981d669ced4ff21f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:1d:b2:b9:d7:13:87:df:82:ac:25:fa:39:
27:8c:e5:58:ff:68:db:47:96:4c:69:4a:27:99:79:
60:e8:61:ee:fc:96:79:e4:59:15:0f:43:a7:ff:5f:
c7:95:f6:7c:76:09:48:01:d4:54:52:0a:ce:a3:0f:
f2:c8:7c:2b:01:25:f1:ef:b4:1a:18:38:db:ad:52:
1d:8d:97:6e:a7:27:00:98:41:c6:bc:a6:53:48:ec:
5a:3a:93:d1:9a:80:db:1e:56:6f:0d:e6:cc:4c:39:
9b:d2:67:b3:98:0e:0f:6f:f2:29:0c:f9:f5:f2:3f:
9f:16:ad:a7:49:bd:83:d7:ce:8f:8d:0f:88:9e:67:
91:8a:32:c3:dd:e7:6d:46:14:e8:04:eb:e5:15:10:
4b:dc:a9:e6:85:1e:b1:c4:b9:ca:3b:8d:80:6c:a5:
a2:a3:25:0e:9f:2f:d4:f7:77:5f:56:a4:78:e7:37:
39:b7:f9:0a:a5:f6:36:7f:10:29:75:87:5f:de:ff:
d8:7c:3f:5c:25:fd:54:f4:d7:e2:8c:7f:29:fb:0d:
36:f3:53:8e:79:fb:55:a9:1d:0a:e9:4e:ba:20:45:
2e:ce:7b:b6:68:0d:29:69:64:10:9c:94:23:53:1a:
b8:a8:64:16:69:d5:f3:c6:60:36:8d:e5:8c:09:68:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:14:27:6E:30:01:D6:0C:74:79:81:D6:69:CE:D4:FF:21:F0:72
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7b:54:72:7d:a9:78:84:13:ad:5e:8c:fc:01:f8:1c:a7:dd:
d9:10:b3:29:39:87:a1:4e:f9:cf:cb:f9:3b:28:a3:cd:0b:de:
26:99:63:a3:07:ab:8a:a1:fd:ab:f1:cb:21:ce:45:c9:09:d6:
c7:e9:d9:3b:73:06:4a:d5:f1:74:30:6f:ac:73:b5:0d:74:e7:
4b:2f:8e:73:1c:37:21:bc:19:6c:c7:67:c5:ee:3c:eb:91:2d:
d6:1d:d9:58:4e:48:13:57:4c:00:68:bb:81:ac:a3:24:01:18:
28:c9:5d:f5:6d:54:08:ce:7e:92:19:df:f9:23:a5:4f:5e:8f:
d3:87:fa:34:b2:18:48:82:8c:b8:df:b2:a6:b0:c7:c2:24:ac:
f5:76:ce:94:14:3d:08:3d:7f:ac:46:f2:64:89:99:63:42:51:
36:41:70:19:fd:37:c8:7f:87:ce:ef:4e:fa:9b:1e:26:67:35:
f7:10:50:35:d0:20:3c:44:1f:35:39:65:ee:9e:53:fa:7b:df:
43:11:27:5c:fa:99:1c:91:d4:98:b8:f6:67:f0:a6:c3:3d:1a:
b6:7a:57:54:84:87:7d:8a:45:0b:07:42:8e:61:f6:8f:46:2c:
94:fa:ea:1e:8d:53:6c:0b:9e:33:de:9d:b8:7f:ba:75:fb:53:
df:fd:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:25 2026 by rpki-client