Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: C1k+RM8YbANIIVBcExFUbtEx4XOeQDdXR7e84Me1/sE=
Subject key identifier: 79:41:09:90:D3:10:9B:BB:46:72:85:37:52:E5:06:E0:9E:23:BB:75
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019D37C107DE8A3156C5F21ED27AFACA8E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 09D8
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 1NqKf5HgL6ux/wMjUA1IyW2FwAycYIzDICOn/QbSMn4=)
2: q-N4SkxuSPlKg7X5WqFUQAnFD7s.roa (hash: GLAdjtugl2x3FM2Zba5Eclt3UAYEj3C31Itsrx0oxUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:de:8a:31:56:c5:f2:1e:d2:7a:fa:ca:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=79410990d3109bbb4672853752e506e09e23bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:c9:66:c3:b3:1a:70:6a:a3:0d:49:3d:77:
da:92:6a:5a:3d:0d:03:42:a0:e2:e1:2b:b3:4f:2c:
9f:3c:bf:3d:14:2c:e8:35:26:2d:fc:b0:98:30:25:
d4:3b:b8:8e:1e:29:3e:d8:af:e1:72:77:53:2c:e7:
49:43:e3:80:3e:d9:9c:0b:3c:53:0c:eb:4e:c7:d9:
ff:45:2a:81:3e:1f:1d:74:c2:aa:41:89:03:2c:35:
6f:56:b2:ca:62:d6:6b:37:9c:67:ab:62:a3:19:a0:
25:62:1c:df:52:d4:f7:25:a5:ef:9a:2a:a9:d8:7d:
5f:84:5a:a8:8f:d7:97:18:20:84:de:90:9e:9c:8f:
49:fc:8a:0e:50:79:70:ba:f9:0c:5a:c8:c4:8f:07:
0e:ad:9e:2f:48:89:d0:da:6a:7c:7f:77:90:e2:76:
c0:2e:f9:77:73:47:19:92:e1:42:32:de:23:25:69:
39:4c:22:82:72:fd:87:1f:49:f2:5d:47:b2:cb:e4:
03:50:38:16:0e:0b:f9:a8:43:24:29:9f:bb:ea:8b:
ae:f6:72:94:d8:5a:a5:3a:28:55:fb:aa:4f:28:a4:
23:27:55:ba:3c:c8:34:5e:42:5b:af:4a:61:ba:e1:
55:d3:e5:1a:65:2e:ff:4f:af:7e:ea:78:9b:a8:d8:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:09:90:D3:10:9B:BB:46:72:85:37:52:E5:06:E0:9E:23:BB:75
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:ff:9f:7b:cb:cc:4e:a3:b0:87:f2:a1:36:73:cf:40:94:
1f:0e:5f:f8:56:32:d4:f8:93:89:80:9e:19:3c:c8:ca:c2:5e:
b7:d0:a0:31:43:d1:d7:c0:b5:6e:f9:56:11:6e:2c:3b:a9:97:
20:74:b1:d7:7a:cc:f0:23:79:5d:ba:16:72:19:62:46:fe:80:
68:be:93:db:12:a2:ae:5b:8a:5c:ed:ae:9f:15:ec:ba:69:59:
23:64:84:06:bb:ac:df:7c:00:3c:e8:b9:45:1f:45:fb:7c:e7:
30:fa:ea:8a:a2:93:59:0e:a8:4e:22:c0:df:83:33:d6:72:42:
6a:e3:28:52:56:7f:d4:30:6a:49:2b:40:81:77:54:be:70:09:
3a:cb:77:6a:ce:90:59:af:12:00:ba:e0:90:40:5a:1b:ad:b5:
1b:fe:87:c5:0f:e1:8b:d2:58:3b:fa:d6:5f:03:1b:2d:df:44:
2d:75:95:65:fb:04:72:e6:58:bb:ed:af:40:9c:c2:f1:1f:1f:
6e:e7:87:6a:af:8d:3e:ff:01:dc:3e:df:6a:bb:4a:82:9c:33:
5d:23:47:7f:04:f7:8e:fb:5b:e3:c5:48:5e:93:34:bc:6b:fd:
37:19:ef:f0:fc:72:6c:82:f2:22:24:28:06:05:4e:3f:e7:a4:
55:02:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client