Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: xgmCD8mbDRgYlEBkq+SSHInv2gCAI17AY3VLsqb+nDc=
Subject key identifier: E6:7D:39:37:43:6A:AA:AF:BA:6A:2E:A8:F9:1A:47:1D:FC:F1:37:EF
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019CF3BAFCFDE7785A08DE5EF34E9D9625C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 07EE
Signing time: Sun 15 Mar 2026 23:00:43 +0000
Manifest this update: Sun 15 Mar 2026 23:00:43 +0000
Manifest next update: Mon 16 Mar 2026 23:00:43 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: f35ocgwMupBzyzlh6aqgSmn0EB7mOzCO5ZoZsJ/qPus=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:ba:fc:fd:e7:78:5a:08:de:5e:f3:4e:9d:96:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Mar 15 23:00:43 2026 GMT
Not After : Mar 16 23:00:43 2026 GMT
Subject: CN=e67d3937436aaaafba6a2ea8f91a471dfcf137ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:08:53:3b:40:db:24:6a:ca:28:95:e5:c1:
d7:52:f2:65:02:7b:a6:f2:8f:9f:59:92:31:f3:ff:
bd:a2:43:87:56:6a:c4:18:33:0c:a6:cb:0c:25:c7:
21:fc:03:30:c5:b3:d9:ea:3c:ef:47:d9:7b:85:54:
d1:dc:4f:98:4d:58:36:52:7c:bd:1a:6d:8c:d4:f5:
c8:fc:03:d4:cf:92:74:82:a1:de:cd:e5:a7:54:0e:
36:34:4e:df:9d:3e:8a:4b:64:be:87:5c:f8:dc:90:
56:6f:16:50:72:e9:0a:d4:30:6b:56:f1:af:bc:c2:
64:20:a9:87:67:2c:2d:59:2e:b3:e2:5e:e0:73:56:
e6:f0:fb:9b:62:93:e9:de:4a:32:3d:96:ef:73:95:
de:44:0d:e6:67:91:10:5d:25:47:36:a1:f7:62:a7:
51:a3:f2:cc:15:d6:7f:26:f0:f2:66:64:46:67:3c:
8a:ac:e1:72:aa:28:28:41:cd:c7:cb:b8:a4:53:ac:
d8:1e:bc:09:65:14:b6:63:27:bc:ef:1f:76:b0:a5:
cc:e7:1f:4d:b4:8d:0c:aa:25:9c:92:b6:88:69:c2:
32:ac:55:05:f3:21:9e:c6:14:52:9f:51:b6:fd:47:
01:07:c8:75:cb:9e:73:7e:29:4f:00:08:75:e3:a8:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:39:37:43:6A:AA:AF:BA:6A:2E:A8:F9:1A:47:1D:FC:F1:37:EF
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fa:99:62:40:79:54:b2:28:f7:16:5b:c5:bb:fb:d0:c5:26:
47:74:0b:a8:97:f9:76:ba:5c:14:08:88:af:7c:de:cc:ce:bf:
5a:e1:03:8d:cd:8a:12:64:37:11:aa:7b:fc:30:e4:26:ef:6e:
f7:9f:0c:d8:00:09:57:83:8f:7c:e1:a3:be:27:3a:58:83:8b:
f5:57:e2:12:70:c9:0e:b7:f7:25:43:5a:43:0e:1d:b2:26:3e:
bd:39:79:ba:6f:3d:e7:43:11:50:07:d9:1f:84:9c:f5:b8:f8:
96:84:26:f6:ba:1f:1e:2f:4c:d4:5f:57:52:b1:33:3a:e4:21:
7b:a7:f4:7c:ef:72:ec:70:7f:91:7a:81:a2:2c:7a:5d:f6:06:
d2:ad:07:d1:fd:98:74:26:0b:0d:4b:6d:4d:95:84:8d:d6:af:
5f:f3:ef:24:28:f9:1f:61:ca:07:89:e8:66:ae:97:08:b2:c3:
db:ec:9b:52:23:ea:90:99:4e:f9:69:55:3e:0a:6d:ea:2c:8c:
37:e2:6d:b8:c3:56:00:4c:20:59:6e:4a:ec:53:2d:d8:7d:6e:
5b:5b:d4:b5:e5:c3:1e:1e:ba:71:c1:7d:ad:56:66:33:ec:15:
94:f4:49:2b:a2:ee:39:39:b2:74:e9:31:0e:58:d2:e3:c8:42:
65:1c:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:00:13 2026 by rpki-client