Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: nP8d6bHS7qyj2I7U+LQGVYM1URoj79NhRvYrnrB1TF8=
Subject key identifier: A1:BD:9E:BA:0C:7C:4B:AA:6B:13:24:0A:CC:C0:F8:7A:23:02:E3:A2
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 019D3AC1F323D88E8363D0C1501FCDD434BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 0709
Signing time: Sun 29 Mar 2026 18:01:22 +0000
Manifest this update: Sun 29 Mar 2026 18:01:22 +0000
Manifest next update: Mon 30 Mar 2026 18:01:22 +0000
Files and hashes: 1: N8EyJda6rhR9QteQQOD1cmq2_LQ.roa (hash: cndG9t1x1ssBeu5ltRQC+iF8/XMVzNaV3QWE/yAHOVI=)
2: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: i3vVwXYI2oGTPvwHoZebMdhezCGKcRLYlsAu7NbJ1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:f3:23:d8:8e:83:63:d0:c1:50:1f:cd:d4:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: Mar 29 18:01:22 2026 GMT
Not After : Mar 30 18:01:22 2026 GMT
Subject: CN=a1bd9eba0c7c4baa6b13240accc0f87a2302e3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:3a:97:6e:a3:0e:53:5a:f4:2c:92:4e:85:
85:a7:c7:d8:64:d0:b9:a9:b3:8b:1d:28:22:fc:03:
f1:9e:56:55:8e:c9:de:d0:b7:91:74:47:6c:15:bf:
b2:d3:f1:76:da:b1:1c:61:0d:c6:09:1f:55:62:61:
7f:97:56:20:ea:35:28:b3:34:24:0b:35:dd:f8:b5:
61:24:fa:f1:1f:92:79:53:c5:44:74:52:b9:18:0d:
42:b3:8a:7b:c1:d6:83:83:30:21:34:b8:07:aa:af:
d9:af:6b:ce:12:c6:af:3a:f0:ea:0c:7f:f5:b8:e4:
10:dd:c9:e9:3e:d7:87:73:2b:ed:1f:ae:4b:81:98:
7d:1e:44:82:71:dd:ba:57:d1:9e:e6:72:bf:b3:cd:
23:cb:2f:18:d7:fc:4f:af:30:a2:e0:79:0a:4e:a9:
7a:93:16:96:05:70:7f:18:fb:16:57:c8:8f:27:20:
48:0e:7d:ce:da:fe:e6:ce:50:bc:99:d5:09:a8:79:
62:6e:c0:7a:6d:d8:e9:83:3e:19:57:ad:8e:24:c7:
60:fe:4d:e4:00:e8:e0:5d:20:1c:2a:48:b8:9a:6e:
f2:0a:63:b8:66:2b:76:a8:b0:80:55:34:ea:03:fb:
27:38:cd:85:8d:0a:f1:33:d5:fb:97:8b:6a:07:8e:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:9E:BA:0C:7C:4B:AA:6B:13:24:0A:CC:C0:F8:7A:23:02:E3:A2
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9d:cb:4d:22:c2:d4:f5:36:37:cf:68:83:ea:63:8a:ea:49:
e3:fe:e0:ae:0d:d5:43:31:b3:04:1e:32:6f:65:bb:0b:10:6f:
54:cc:28:3f:d1:c4:a7:99:ef:60:5c:54:eb:e5:24:8a:08:da:
97:fb:6f:fa:29:a9:f2:33:71:79:0a:48:f1:a7:a5:ab:7a:2e:
9d:6f:9f:4e:7f:84:cb:15:34:87:9c:f5:91:ee:ee:45:f6:18:
55:6b:84:49:ce:03:74:fc:d4:a7:04:70:35:7c:a6:d4:6f:f5:
4f:40:32:36:99:0f:fc:eb:04:9f:aa:cd:68:f0:c5:e0:cc:11:
2e:30:33:e0:a4:4c:5f:64:95:7e:b4:03:ef:5b:11:b6:2a:b5:
e8:bf:66:6d:17:9e:bc:72:78:e2:d3:d5:9d:69:6e:53:89:ec:
85:66:59:11:a5:43:e5:32:2c:31:b2:0a:fc:f0:e1:4f:81:24:
72:8f:2e:45:90:00:ac:2c:5a:76:b7:6e:bb:9c:67:fe:1b:58:
6e:28:e0:92:1a:84:42:9c:1e:d3:44:3e:ff:0b:20:a4:aa:d4:
d1:7e:67:c9:45:9e:1e:75:58:de:a8:5b:a8:b7:f0:34:04:90:
84:50:eb:ee:b8:71:1d:cd:98:ac:fa:d3:3d:53:d3:3b:ef:27:
b2:3d:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:52 2026 by rpki-client