Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
File: Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json)
Hash identifier: BOb9BThhdz9G7gRHb+kjykVFJBdzkzlC9A8B/T2QBu8=
Subject key identifier: 86:68:61:08:43:91:35:EF:BC:26:78:1D:18:4B:11:2F:6C:96:75:2A
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial: 019D378925C57E453C2FA00E6AE4FC91F53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 03:00:28 +0000
Manifest this update: Sun 29 Mar 2026 03:00:28 +0000
Manifest next update: Mon 30 Mar 2026 03:00:28 +0000
Files and hashes: 1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: cDwTegli0FmXMPk+W36AIys90cdvuR2C8wJJejtdQF0=)
2: z3h7NH6N5wijAwMYVRinzlp5MD8.roa (hash: FU3UxZOkfnfaPhBOfubHG6bYn2mXYkfBh0IbGxObMkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:25:c5:7e:45:3c:2f:a0:0e:6a:e4:fc:91:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
Validity
Not Before: Mar 29 03:00:28 2026 GMT
Not After : Mar 30 03:00:28 2026 GMT
Subject: CN=86686108439135efbc26781d184b112f6c96752a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:dc:4c:34:12:14:e2:1e:db:d9:8a:1b:39:
ca:87:47:4e:0a:01:6d:dc:c5:cc:01:72:f0:ce:08:
89:76:f6:bf:bc:b9:f4:38:f7:9b:34:56:16:cc:f8:
55:95:9b:6c:f3:99:64:d4:29:5d:6b:66:44:a2:d3:
18:ba:5f:0a:40:c9:ae:b2:33:16:45:53:3a:7d:51:
8a:1d:e4:97:38:29:23:4a:dc:5a:03:98:14:e2:96:
26:d8:09:17:df:9f:a9:1f:48:c1:aa:ce:5e:4c:99:
6b:95:48:a8:a7:6e:ae:d0:56:e1:35:cd:ce:55:f2:
a1:b8:7d:29:b3:ce:af:d0:a8:1a:0d:71:be:75:8c:
6e:71:b8:4c:51:31:20:58:b6:dc:60:4e:b3:53:fb:
0a:63:25:c6:82:d8:60:eb:59:ca:bb:d8:0d:70:fa:
34:a1:dd:90:4c:7b:4e:53:59:59:ec:08:75:e8:10:
3a:07:91:8e:1e:cb:6e:84:97:75:05:40:22:04:ee:
26:40:8a:4a:7f:e8:b9:c6:b3:08:2d:0c:4d:9e:fb:
0b:31:a7:83:6b:58:fa:db:cb:bf:39:25:d4:05:93:
15:7c:da:d3:40:30:94:6c:9d:b9:c3:9e:7c:82:91:
97:65:94:f1:30:b5:bf:d9:46:e3:9c:24:83:f0:64:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:61:08:43:91:35:EF:BC:26:78:1D:18:4B:11:2F:6C:96:75:2A
X509v3 Authority Key Identifier:
keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6b:05:df:93:5a:a0:14:04:46:77:57:3c:ee:1f:ba:79:3a:
6e:42:86:b5:6f:c2:ba:1d:56:eb:25:60:6b:49:82:ee:8c:d1:
d4:c1:6c:31:5e:ed:34:55:70:11:aa:c8:b8:a4:76:e9:18:ed:
09:24:83:5f:f2:49:54:59:99:22:1f:82:d3:b7:3b:ac:18:af:
e9:0a:4f:2a:33:99:2c:68:4b:04:d8:4b:21:0b:bf:6c:69:96:
0d:6e:60:89:ee:8a:ab:b7:7c:e9:f9:39:b3:e7:ea:a8:92:0f:
47:6d:d7:77:34:31:a2:8e:f7:cb:30:63:0a:49:9c:90:89:f6:
25:d6:5e:89:9a:d7:9c:2b:a3:1e:b5:92:d7:e7:2a:e1:28:49:
e1:be:0e:ad:05:8a:53:c8:2c:4e:5e:36:02:6f:14:89:15:b1:
82:8d:c3:2c:7c:e8:00:ee:a1:12:f8:75:24:0b:5b:9b:63:4f:
51:f5:66:cd:72:51:c5:e6:f8:8b:5a:05:8f:3c:fc:e9:2b:5e:
35:43:e2:0a:2d:ea:19:cc:13:7d:b3:a6:55:21:d4:d1:16:3d:
6c:6e:fc:bd:94:0b:a4:a5:fb:d6:ae:dc:7b:e9:10:83:9b:55:
f6:61:25:22:ea:b7:ab:34:1f:5e:a4:9a:57:99:62:ff:7c:45:
6f:35:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:22 2026 by rpki-client