Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: u70c+GWutjbYzrQ2plHIIRUPPusbZohI9QNJIpagndc=
Subject key identifier: 7D:D3:52:9F:FA:98:CD:C0:A5:AF:76:E7:F2:81:8F:55:21:15:B5:02
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019D38D2DD1F7A2BCCFD2132F0BFE3C41F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0ECD
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: 3oNBPDxqPmEzCAgvOd6HFjME9OM.roa (hash: oEX/gxqcuspBR3wSJHEr/VS6QW0PNYcAWyELJ7EqCc0=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: JWz1SsZSMVxuKT1veDuS/OcB6FCkr8MOOhRuzCyiOro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dd:1f:7a:2b:cc:fd:21:32:f0:bf:e3:c4:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=7dd3529ffa98cdc0a5af76e7f2818f552115b502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:2c:de:aa:69:2e:0e:8d:46:92:f5:88:0a:
05:36:44:10:7e:be:4f:23:75:6e:57:e7:69:a2:1a:
a1:db:39:f1:5f:5e:cc:44:77:4c:7a:fd:0b:9b:92:
44:bd:79:c7:2b:c6:e8:e5:f1:38:87:10:01:11:6d:
bb:e3:53:a3:4e:9a:ee:e0:15:6a:57:4a:45:86:0f:
b1:79:b9:2c:23:82:3c:d1:e7:60:a5:5b:6e:3e:34:
d4:52:ee:3b:8f:0b:f0:c6:9d:2d:1b:d2:77:f3:1f:
35:ab:7e:1d:07:a3:90:bb:ef:06:87:be:eb:83:b7:
4a:ef:4f:81:09:94:09:06:38:d2:10:ec:71:fb:ba:
47:cb:1f:13:55:e6:bf:c1:b9:d1:31:e3:c2:d0:21:
5f:f8:79:3c:0e:54:b4:45:2a:e0:68:12:21:a9:4a:
0b:dc:45:f4:13:35:b2:3f:d7:45:5c:7d:ec:75:42:
e0:55:ac:0a:c9:84:3d:4b:86:50:40:e5:a2:fa:f1:
3a:76:b0:ab:cc:b6:bf:83:3c:c6:1b:4f:d7:d5:1c:
d8:85:99:82:b4:e5:d8:c6:14:bd:8b:67:cf:ef:57:
fd:8e:6b:c2:e4:9d:9d:c4:51:3c:64:9c:a5:f5:84:
f0:3e:c4:b5:78:61:bf:91:53:83:1b:1f:f3:08:7a:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:52:9F:FA:98:CD:C0:A5:AF:76:E7:F2:81:8F:55:21:15:B5:02
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:a4:5c:46:60:84:f4:f9:cf:b1:5d:00:90:3d:05:28:e5:
00:b4:52:3d:4c:98:9c:15:17:b7:3a:60:42:a2:f0:16:7f:4e:
2a:e2:88:8c:02:3e:5f:19:69:f6:4c:c3:af:19:b4:46:01:78:
2f:fa:d9:ba:36:09:63:ef:74:4b:80:83:f0:26:bb:a1:7d:d5:
e9:16:bd:ea:53:b4:c5:2e:81:7d:67:70:b6:7a:33:e0:b2:a1:
b9:be:37:f7:68:d5:35:85:36:43:11:92:1b:ed:e6:7b:c8:c5:
3b:8e:30:d1:f3:c8:7f:46:81:06:2a:76:55:67:56:59:14:52:
09:9a:44:68:33:9b:2b:32:f5:2e:56:28:14:07:9e:e8:5c:19:
fc:11:58:60:f0:d9:3d:34:03:58:33:36:9b:7d:42:96:f2:3e:
dc:e3:0b:d3:32:fa:82:b0:6b:6c:66:8f:2b:9c:a0:71:f6:6d:
a0:7b:83:9c:1d:f4:b4:4d:66:83:a3:1a:cb:38:51:53:0c:1b:
04:fa:b6:fe:4d:9e:fc:12:87:06:8c:15:25:68:18:d9:ca:1f:
a2:55:a4:72:5f:25:2c:ff:93:f8:1c:f9:72:ed:83:4b:d4:39:
da:4a:a6:6d:b6:70:23:9a:4b:0a:ea:84:e3:16:5b:a7:83:d4:
45:f1:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:06 2026 by rpki-client