Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: VDChMW8rWxJyrJNuFgJFTxB/UbaioY7mojzQ0Nuol0E=
Subject key identifier: 75:9D:02:54:CF:C6:EB:C1:B1:02:58:D5:54:DD:F7:52:7D:08:3A:83
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019D39775FC7A8053DEBA3963B9D26D07AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:17 +0000
Manifest this update: Sun 29 Mar 2026 12:00:17 +0000
Manifest next update: Mon 30 Mar 2026 12:00:17 +0000
Files and hashes: 1: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: VPqElHEBKZgcVeZ6e9h/1PUDZdeF9RYCha5vFtfRgTA=)
2: bpt9BsJOl3owDEYCjUtmuxEN8E0.roa (hash: nUeffKsyk9gHED4nwJFpfEhtvPTx7ZUa82CM8DIOyWQ=)
3: pUq5FgDmcbsOBzOSxvfT-61HYXc.roa (hash: UB81wheS00LuQ/3CNRheeKScZVmaRZ7KVUFOcqWElYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:5f:c7:a8:05:3d:eb:a3:96:3b:9d:26:d0:7a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Mar 29 12:00:17 2026 GMT
Not After : Mar 30 12:00:17 2026 GMT
Subject: CN=759d0254cfc6ebc1b10258d554ddf7527d083a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:41:3c:a6:61:60:28:ce:34:f8:35:eb:15:
ea:cc:2f:73:5b:6d:c1:d2:f0:99:bb:63:82:b0:09:
19:0a:03:f6:00:df:80:7a:12:85:85:0a:5e:e5:1b:
2e:ad:8e:ce:ac:a1:cf:c9:da:82:67:cd:7c:9d:75:
ff:51:c4:37:d9:b7:6b:ca:81:2b:2f:c8:36:07:b8:
b4:02:3f:f1:28:6f:b5:cd:86:f1:b3:c3:39:ee:06:
45:0b:5a:35:c5:ad:83:e1:37:3b:75:b2:5b:23:e4:
5c:b6:30:a7:84:52:01:99:aa:ce:2d:23:47:2c:b6:
e9:bb:25:9c:e6:1b:d6:2a:7d:88:4a:88:aa:45:87:
fe:35:49:2c:e9:06:de:36:79:83:79:a9:34:d9:74:
d9:70:09:b7:c4:ee:69:f4:9a:9b:c0:e8:8c:ca:f5:
dd:31:c8:35:16:91:a8:d4:55:77:13:07:4e:ba:e4:
c0:d5:c0:59:ac:e7:31:9c:b1:82:30:70:9a:ab:4c:
be:6d:af:90:fd:8a:34:21:f3:1a:e7:65:2b:4a:72:
e7:41:9d:41:26:67:84:18:21:93:29:3f:44:9f:34:
66:c2:2d:10:05:c0:e0:ad:fe:59:35:69:57:1b:9e:
71:fb:66:9a:2b:23:73:99:31:f8:6d:5f:96:cd:b8:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:02:54:CF:C6:EB:C1:B1:02:58:D5:54:DD:F7:52:7D:08:3A:83
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:fe:9f:73:e9:a4:cd:95:31:b3:d0:27:4e:52:74:dc:c9:
c9:c3:56:33:80:5c:aa:ae:9e:c9:5f:ce:58:2e:f9:c4:09:46:
a8:c1:01:93:84:80:03:a6:3a:a1:4e:00:c5:77:14:49:97:6e:
5d:a4:c1:a8:fb:64:4e:0b:8f:6e:89:b6:eb:36:38:74:7e:0d:
0d:44:ba:5e:94:2b:92:e8:10:d0:a9:98:ef:f3:39:3a:20:07:
2e:de:13:e7:bb:80:0c:bb:ed:28:c3:04:19:12:93:22:ab:0b:
b1:46:51:31:5f:55:a1:f2:f1:83:55:d2:64:1d:6a:16:90:fe:
b1:74:66:21:d9:96:6c:9d:0a:55:9e:d8:23:fc:d0:f4:1f:17:
ba:cc:12:48:b4:1d:25:b3:37:60:ba:a0:54:7a:fd:96:1c:d1:
5f:e4:59:e0:93:fa:10:2d:95:0d:67:16:da:9c:4b:ff:d6:9c:
34:e4:bd:81:11:f1:2e:95:1c:ad:4c:c0:9c:7d:15:81:b9:ec:
d7:af:57:31:ca:6b:83:81:80:a6:1b:a1:90:c3:d2:54:fd:72:
f0:61:dc:90:07:44:93:d2:2b:68:ca:dc:3f:a4:e7:3d:ac:f5:
32:f2:0d:01:70:79:c4:14:16:9e:56:70:a8:3a:92:ad:9b:db:
15:59:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:07 2026 by rpki-client