Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: Gc1kHWjVZDLjWOyNhGfR9mh/1Dx4USoKssmb9ggzvUk=
Subject key identifier: CD:7A:85:64:94:35:28:7D:D8:D0:68:CF:18:12:E7:CB:F7:79:86:37
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 019D37C0F52AC37E6B803ED2BD105A9D5D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=)
2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 3RIv3JYPJL/M6mfMwYaVLGW6b6u59B6BuRkh6m0M87o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:2a:c3:7e:6b:80:3e:d2:bd:10:5a:9d:5d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=cd7a85649435287dd8d068cf1812e7cbf7798637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:03:af:2c:a6:f9:34:63:9c:8e:0c:d9:32:
b1:7a:d1:26:50:c5:4d:08:2a:c7:cc:ab:ea:30:6c:
5f:bd:e8:a3:57:e1:1d:f2:4e:69:4b:ad:b5:5f:ff:
82:34:e2:45:06:f8:50:e2:37:21:c8:53:c4:36:c9:
ab:9c:88:c9:34:68:10:2e:55:ef:e3:b7:f2:a7:10:
f5:ef:13:61:a5:51:97:72:07:75:b7:08:24:a4:56:
fd:27:14:b0:9c:3e:b6:8c:57:cb:14:af:36:ae:69:
d4:b9:6a:13:8a:e8:3f:3d:b9:e7:07:16:6b:b1:60:
d7:e4:09:99:7f:30:24:c7:64:3f:28:a1:c4:e3:7a:
c0:01:ea:ea:a6:e8:42:28:c9:52:cd:9d:c0:be:7e:
78:b2:5a:8f:76:6e:4d:95:e6:ec:13:e8:cf:74:c5:
60:38:c9:47:62:b8:bf:78:b3:33:cd:bf:ec:5c:4f:
7c:21:cb:75:df:71:fe:76:45:2c:51:c6:c0:5a:68:
bf:89:85:21:c5:3e:75:9a:2e:33:6b:3b:a6:f8:d5:
1b:10:0a:03:76:46:61:78:e6:8b:d4:63:b6:a6:c2:
c1:e1:81:53:8c:5c:1f:3b:fa:99:fe:db:1f:8d:97:
9c:83:de:98:ab:86:30:55:02:c5:a1:c9:20:18:11:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:85:64:94:35:28:7D:D8:D0:68:CF:18:12:E7:CB:F7:79:86:37
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:8d:2f:4b:89:e6:f2:76:e7:11:6c:45:fd:09:0d:2c:49:
0a:c2:c9:71:1c:c0:30:6b:ad:c6:a5:58:5d:e5:39:2a:59:05:
09:b1:21:80:3b:7f:fd:3c:b8:7e:f5:d4:67:53:55:98:57:2f:
dd:55:ba:7c:0f:58:93:68:3c:d7:f9:8c:04:21:a5:05:03:48:
2d:a9:6e:4d:0d:a3:a5:e5:2e:04:bd:38:8b:22:16:8d:85:02:
61:be:b7:ec:f0:07:80:c2:4f:b9:d8:7b:d8:c9:58:4e:5b:6f:
7e:41:cf:16:0a:4a:0b:4b:10:7b:a6:7f:c5:e0:9f:a4:bb:91:
9f:03:f4:8f:09:5c:8e:ff:f5:2f:fe:bd:45:24:e6:1f:a7:c4:
df:da:b9:43:35:fe:df:d6:86:9e:d9:d6:62:cc:65:fc:6f:a0:
74:bc:76:38:5d:98:cc:f4:3e:e5:84:ad:a6:92:84:84:ac:48:
20:60:9e:84:71:dd:02:a3:21:17:88:a0:2f:8f:d1:c8:3d:ac:
c5:ee:0b:36:bc:09:c8:1e:d1:47:13:26:7b:43:18:58:6e:c7:
5e:96:c3:cd:6e:4b:98:c5:9d:72:99:fe:6a:cb:79:94:bd:41:
d4:2f:d8:e3:bf:37:69:31:b8:c3:00:2f:67:cd:77:da:a1:16:
08:c7:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:03 2026 by rpki-client