Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: 2FuHvdKTG2ItsvWQfBM1fIZkOV1p9f8NUOmfWSPKppU=
Subject key identifier: F5:0F:39:24:AB:89:9D:D7:70:A0:47:06:D5:FF:F5:3F:D4:62:84:75
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 019CE5910F793821A81FDE0BAB037DC04F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0E79
Signing time: Fri 13 Mar 2026 05:00:15 +0000
Manifest this update: Fri 13 Mar 2026 05:00:15 +0000
Manifest next update: Sat 14 Mar 2026 05:00:15 +0000
Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: HVVo/UGafNhP/K5TZiZxR15LjOEc75uHnb/RGZLgn/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:0f:79:38:21:a8:1f:de:0b:ab:03:7d:c0:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Mar 13 05:00:15 2026 GMT
Not After : Mar 14 05:00:15 2026 GMT
Subject: CN=f50f3924ab899dd770a04706d5fff53fd4628475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:5e:4b:ff:5a:ba:88:94:19:43:36:97:75:
47:c7:26:ab:f4:50:e0:15:34:68:be:39:a3:4f:d0:
a3:b6:b9:c5:99:2e:5e:57:f1:c9:3f:e2:a6:fc:d3:
8e:56:f8:84:9b:a5:85:48:52:3b:30:05:fb:bc:17:
58:7a:f0:b2:06:27:f6:16:48:4b:6a:67:b9:d3:b8:
56:92:df:dd:8d:d6:c9:86:e4:33:fd:93:63:c6:39:
af:4d:43:83:48:9e:ff:71:7b:d7:0e:d3:02:91:b9:
75:87:5d:f6:99:9a:06:1a:7a:73:ef:25:81:34:91:
54:8a:62:52:1f:03:53:fc:66:f0:dc:ef:8d:2a:cd:
8d:02:ac:d9:8c:5d:df:77:fa:ed:de:79:3f:ca:8d:
e0:4f:ff:40:5d:e7:ae:b8:15:69:f5:cb:2a:2e:db:
2a:2f:21:06:de:9e:b8:69:6c:e4:55:02:3d:4f:a6:
d3:87:df:f5:fc:88:ba:77:b5:55:ed:55:2b:f8:47:
7a:71:40:24:91:3a:cd:a6:29:71:84:09:6e:9d:79:
08:ae:45:61:39:f5:8d:1e:9e:d2:0e:d3:19:b9:c1:
5b:74:ba:fd:f5:ea:8f:0a:32:00:19:4a:ab:ea:ef:
7c:e6:7c:0a:9a:db:b9:5c:61:4f:84:db:d4:91:30:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:39:24:AB:89:9D:D7:70:A0:47:06:D5:FF:F5:3F:D4:62:84:75
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:24:30:8d:32:09:6b:7f:67:a1:c9:f6:05:21:d5:75:48:37:
c7:a5:4e:59:f6:5b:b0:b1:5f:f7:a3:2f:ff:3a:8f:d7:c6:01:
a2:62:13:22:b6:6e:47:f3:4f:44:fa:6b:ae:d8:e9:db:58:d4:
16:24:44:ae:fb:1a:fb:4e:ea:58:92:92:b9:91:a6:d9:cb:da:
9b:75:f7:42:30:d3:cf:7d:c9:82:74:b5:8a:49:97:ac:9a:46:
d0:17:11:ef:e3:a6:bf:65:70:56:49:b2:d5:fc:dd:be:7c:08:
a4:0f:89:f5:9f:91:89:65:3f:1c:17:af:24:15:f0:5b:35:dd:
a4:49:12:3e:1c:b8:49:11:25:d3:b1:d1:d0:f1:f7:18:c8:a2:
ea:d5:11:07:e1:38:18:5c:04:be:53:47:aa:7f:66:dd:b4:5e:
f3:cd:df:ec:50:4d:03:94:ad:fd:ee:60:89:63:b7:07:50:a5:
c2:92:e9:a3:1e:4f:32:a9:ca:54:43:66:f4:26:7c:d5:01:30:
20:2c:2c:7f:ce:c1:cc:86:3d:97:66:e2:ca:0f:ce:95:b5:a2:
3a:ae:14:48:26:9d:b6:99:55:de:54:6c:c2:93:75:83:02:75:
42:60:3d:8c:07:80:a1:74:a3:b7:f4:3a:e1:8f:b7:51:4d:2b:
82:77:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:52:59 2026 by rpki-client