Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: pTqjcybDQoRAghj7AN7XahjLfewVUxCvzlcu9ykQGTY=
Subject key identifier: F6:F0:BE:CF:87:51:74:6E:FF:75:8E:85:21:D2:99:2D:B5:43:10:9F
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019D37F7540A0D40250F50CDF78BB8528A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 0425
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: Lzc7sa4lJ2v/ZwsUWl1vJHokQLJKhwYmaLk8tI93In8=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:54:0a:0d:40:25:0f:50:cd:f7:8b:b8:52:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=f6f0becf8751746eff758e8521d2992db543109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:b7:0f:7b:8c:92:97:59:4b:fb:3e:3b:7c:
62:5c:f8:83:4e:98:41:14:e4:00:06:bd:de:6f:57:
ef:ee:aa:0c:db:4c:6b:09:f1:74:77:c9:9f:57:05:
8e:af:40:0f:d6:bd:72:c3:46:74:3a:7e:fb:55:15:
32:65:2a:7f:80:77:43:16:4a:63:f3:13:a9:7b:06:
4f:bb:4e:8e:d1:60:6d:b7:f3:32:ef:d8:c4:e1:2b:
e9:a9:60:15:9d:42:23:47:7e:a8:e4:d9:f8:ec:1c:
aa:4d:2e:54:c9:f4:18:94:2f:ac:dc:c3:76:61:e8:
9c:b5:ed:32:f2:ac:ab:04:70:27:be:5b:ec:06:36:
ab:55:ec:47:45:a7:5b:ef:4d:b9:84:5d:53:b5:84:
2d:19:d7:6e:a9:40:fe:b6:37:aa:00:f6:a0:7f:34:
9c:42:97:ab:1f:cf:9d:6a:84:71:ab:a5:3e:d2:4d:
4c:93:e5:16:e9:96:4e:6e:46:82:8e:5f:c9:2d:4d:
8f:e7:f8:c0:8b:9d:8f:bb:2c:fe:ec:c2:10:06:5a:
cf:14:bf:71:1e:af:e6:85:4c:cc:11:e6:e7:56:e0:
d4:61:92:d2:c0:d1:d4:2c:e8:5d:d5:65:8b:7d:06:
41:99:57:2c:4d:08:e1:fd:c1:9d:21:ea:31:b3:21:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:BE:CF:87:51:74:6E:FF:75:8E:85:21:D2:99:2D:B5:43:10:9F
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:a1:de:60:8e:1a:df:b0:a6:b6:6b:96:4b:6d:d9:d8:59:
e8:f3:9c:05:86:22:17:25:da:4e:26:90:9d:91:1f:5f:26:6e:
45:67:bb:6b:a4:3f:14:fd:9c:60:39:ab:64:75:19:cb:81:09:
0d:1d:7e:8c:c0:92:7b:75:0c:91:e8:78:30:91:bd:90:69:bf:
18:7f:37:ce:aa:79:77:fd:dc:39:59:5a:d3:09:33:d5:c8:ca:
d4:11:0b:33:39:71:fb:2d:b7:ab:77:57:f4:06:46:16:11:4d:
48:25:05:52:2c:67:41:d8:5c:82:01:5d:a1:bd:29:77:9a:58:
a3:47:2b:f4:cb:2f:75:ec:ad:00:24:53:de:27:60:c2:4e:9d:
cc:a9:a2:8b:07:7c:ca:ed:ed:e1:9b:a6:48:37:5a:a7:b8:23:
95:9c:b1:69:d1:8e:32:6b:d3:de:71:45:82:2c:38:7a:4a:9b:
89:1b:c2:05:38:ce:2a:99:da:1e:35:3a:0d:ca:0e:f9:ad:16:
c5:96:99:99:5d:e5:be:d5:86:75:d3:b7:75:ac:32:aa:2b:c2:
44:dd:c6:3c:22:3e:b8:a5:89:0c:fa:c4:73:55:c7:26:68:fa:
31:25:bb:51:5d:dd:a0:02:4d:01:ac:48:39:02:a8:19:47:ac:
68:05:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 09:12:32 2026 by rpki-client