Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: 7R3a8Twdbut6u+Q1g0NFJd3GRmI6pRKhyhdGg+uaJyo=
Subject key identifier: F9:50:72:29:96:6A:D3:E1:C9:FE:11:7A:12:CB:27:65:EB:17:05:6C
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019D37C0236597F54C2E52367C1372D0CBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 08F8
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: u8Ux19rxl+cM3/5emejAfVq3oMbevQinfiAK3SE1TcY=)
2: kBiWJKONqx_8EJPfrqy-KE44x6Q.roa (hash: SVLH+Gw9sGMbTjjOdTtaqUxTQmICEWWbtA+6NK4dItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:23:65:97:f5:4c:2e:52:36:7c:13:72:d0:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=f9507229966ad3e1c9fe117a12cb2765eb17056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:9c:9e:bd:5a:7d:7f:2e:2d:2c:a8:d8:8d:
6c:43:a1:4d:e9:cf:c1:ea:ba:ef:af:79:11:48:07:
26:9a:56:52:6b:63:f0:bc:5c:d8:b9:48:fb:e4:33:
80:c7:f6:4b:0e:59:e1:0e:c6:1d:59:0c:f5:5e:da:
4f:2b:e3:23:71:0a:99:d7:48:78:59:d9:17:40:c9:
67:88:15:71:ce:27:7f:ed:22:d5:a5:c0:32:21:ac:
62:5b:f9:66:01:ec:94:85:4e:3c:dc:81:c3:66:d3:
a9:9f:9e:4a:c9:e8:9e:08:be:32:eb:bf:81:b4:bb:
a5:4c:8b:90:50:ad:b3:a8:50:9d:b7:76:f1:c5:53:
66:14:d4:58:df:93:ac:16:2b:4b:cc:b8:7a:4b:61:
df:d8:3a:b0:a4:63:9d:0a:4a:d0:5f:f4:70:4e:a0:
2f:6c:64:0c:af:6a:89:49:c4:0a:8f:19:d1:ca:53:
4f:a8:68:30:ec:10:f2:c2:1f:85:74:03:56:1d:6f:
37:fc:2d:43:54:43:0d:7d:86:a9:d3:7e:eb:ab:75:
20:51:63:3a:fa:e8:48:cc:d3:c1:09:a0:13:5b:63:
06:2f:19:32:5f:b7:da:4b:c8:74:d7:b2:32:7f:86:
cc:fa:64:61:02:9a:54:40:1f:57:9b:2c:4b:e1:f7:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:72:29:96:6A:D3:E1:C9:FE:11:7A:12:CB:27:65:EB:17:05:6C
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:40:56:e7:d2:5c:3e:a5:40:1a:db:b5:d7:b4:a8:b7:da:da:
b2:ad:8c:85:a9:0c:44:44:6e:40:00:85:81:25:f9:bc:33:4a:
0f:f1:fa:9a:d6:f9:ee:e3:07:f4:70:29:5c:83:db:76:6c:f9:
fa:13:66:97:bf:3b:ea:9e:b6:4a:cf:03:24:8a:a6:9a:13:7d:
48:29:4a:6b:84:85:f2:f0:17:0e:1b:ac:60:e2:07:c5:66:a5:
a5:60:db:5a:78:24:9b:40:4e:af:d8:77:2b:20:d6:f6:ac:64:
71:dd:28:4f:cd:5c:6f:59:ea:50:af:85:0a:7b:1f:b5:7a:26:
01:20:81:38:66:ef:17:16:d6:5a:65:26:3e:1e:91:29:7a:b9:
8d:6d:e3:47:f9:95:7a:27:6b:32:3f:23:3d:38:89:5f:6d:6c:
a5:80:6a:2b:ed:de:f0:88:d2:90:b5:52:dc:44:8f:08:66:14:
a6:fa:68:3b:bb:08:62:c9:b4:d9:0b:cc:35:8d:32:db:59:8f:
fa:a5:8b:ce:c0:95:b4:bd:d5:b7:13:b4:c0:4b:63:aa:ad:7c:
9a:08:90:2d:5a:94:1f:20:ad:fa:d6:d2:e8:72:83:d7:b4:27:
83:b6:a4:d2:97:bb:49:91:60:be:91:59:af:e7:1c:15:57:c9:
96:75:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:19 2026 by rpki-client