Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: c7P/cvxslBDXL58iVA1Vf/uHtQi2n2LGvz0lV9zxFng=
Subject key identifier: C3:57:E4:6A:4A:0A:96:64:B9:54:85:CF:93:BC:46:D4:9F:41:E7:EA
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019D390A0EAA2DC71359AEA950EBAE807D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 1382
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: huIqbKvIsZIS+3cyIxbuBk9XqXIUT72Onjq++zOoJ1w=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0e:aa:2d:c7:13:59:ae:a9:50:eb:ae:80:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=c357e46a4a0a9664b95485cf93bc46d49f41e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:81:c5:37:a8:32:1c:c9:d1:b6:b9:d8:f7:
ad:8e:c6:ee:60:8b:ce:15:f1:71:f1:b5:8d:57:a0:
b6:c3:92:24:66:89:e2:c3:98:fe:54:8e:2c:67:c7:
73:56:5b:f3:19:a5:63:05:fc:0e:11:5d:6e:55:fc:
8e:cc:08:08:ad:e0:ee:86:d0:0c:6a:6f:5b:9c:d9:
ad:bc:85:2c:e6:25:43:82:2d:32:f0:67:d3:4f:88:
2e:44:60:3d:bc:80:6b:cf:cf:99:38:68:68:a7:33:
a6:f5:8d:86:56:01:aa:f6:6b:80:dc:5c:ae:2a:57:
67:89:bb:da:54:1a:64:0d:bb:af:f1:56:84:9a:3f:
00:ce:c5:d9:2e:da:68:c2:8c:50:fe:c9:74:4d:0b:
a4:54:d3:2b:be:b1:63:09:b7:dc:4c:1f:87:27:c6:
12:70:f3:dd:a0:d8:bf:c6:79:7f:0a:88:c3:7c:43:
7c:a2:f4:cb:57:b9:5f:ad:49:6a:bc:ac:4c:96:b9:
d1:de:2e:8b:15:2f:71:db:14:45:9c:31:05:3f:76:
53:e5:b8:b7:bb:93:4d:01:87:9a:8c:00:1c:56:c0:
52:bd:2a:3c:08:a3:7e:97:d8:6a:90:f6:a0:42:55:
9c:93:b3:42:9d:67:b2:8d:c0:ec:e7:e7:94:e2:85:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:E4:6A:4A:0A:96:64:B9:54:85:CF:93:BC:46:D4:9F:41:E7:EA
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:92:49:1f:3d:68:29:47:8e:97:b8:04:ea:c1:4e:00:e7:
d7:48:69:cf:55:67:ff:52:82:1a:78:a7:2f:f4:1d:63:dc:27:
72:e0:4b:14:bf:5b:ec:57:b0:70:83:90:d2:bc:99:eb:b7:94:
5d:1b:03:74:7a:0f:ab:8c:8e:17:cc:e3:bb:4b:24:1a:d7:22:
e3:72:04:fc:25:89:d4:52:e7:c1:0d:7a:4d:ec:f1:98:9d:3c:
3c:fb:00:6e:82:07:cf:cf:84:44:e7:f2:dc:a0:fe:da:b0:25:
20:80:0f:f5:f9:c0:42:3e:76:0a:9c:ef:b8:05:35:22:e7:f1:
de:78:19:db:ae:07:7b:4e:e2:28:ea:04:4e:ed:30:e7:95:75:
b6:67:f2:20:09:1c:12:5d:4e:8a:3e:8d:3b:cc:4b:37:b1:37:
53:8d:ec:cd:47:48:e7:0c:01:e3:a6:4d:58:c2:7b:25:b4:9d:
56:23:59:2b:22:0e:8d:33:ad:10:b1:0f:68:f8:d2:03:d2:3e:
32:fe:b9:68:ac:8a:05:6d:cd:1b:75:9b:18:ca:02:e2:f3:10:
a2:71:87:4f:0c:f5:17:10:b1:0b:a0:4a:80:12:23:d5:dd:10:
52:09:bd:da:8a:2c:42:5d:8e:aa:95:08:ed:7e:be:1a:24:3c:
9a:68:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:41 2026 by rpki-client