Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: Y8RTvdeK8l8hL7hI6HufUPiFu2E7Cxg2yL5OhE+Mjc8=
Subject key identifier: 0D:6A:29:77:3E:2B:E7:81:79:0D:71:29:E9:46:30:F5:7B:76:4E:17
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 019D3865DBB3AAED4B98EF95B95E8207F80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: rhtRCZhYNdhbOmGRPl1tPFB5hHGUV05J8bHkl7OXTWM=)
2: evI5OEg6waUB24zj44AWaj3RZOA.roa (hash: Y1fnav5sUcdKyDCdtyfukclX/9hK+jv3+W4ALIcJR4g=)
3: yFQMrmkIeVte8wYzH-IkC5x7aUc.roa (hash: pXQ4i9KXqTJ+j0TOAAMeJveDI3UPmqEwzHnm1ISng7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:db:b3:aa:ed:4b:98:ef:95:b9:5e:82:07:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=0d6a29773e2be781790d7129e94630f57b764e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:f5:74:84:75:41:97:17:15:b3:93:bc:a7:
c2:62:b7:83:fc:0d:74:6b:6f:0a:7b:d1:0f:f4:b5:
b7:2d:b1:24:86:ec:7b:39:ca:e6:70:eb:66:37:9e:
a0:fb:1e:86:4a:41:14:ed:38:02:74:fb:93:b3:53:
ee:45:a9:f6:67:a5:13:2e:77:47:ad:ce:44:39:49:
32:5f:13:b3:4d:e9:57:7f:bb:a9:f8:68:ef:4b:0d:
13:a5:41:1f:3d:73:2a:6e:e6:60:57:07:76:ee:2a:
cf:5f:f6:e5:48:83:f6:a1:6b:d4:80:09:63:5a:89:
f5:af:8e:6b:7d:48:56:e8:0b:18:e4:05:68:8c:2f:
5c:00:24:98:a1:1e:45:41:72:fa:ed:04:d9:4c:80:
b5:0f:52:cb:7b:e4:0d:ec:74:88:48:8f:7c:fe:3e:
09:fc:2c:83:cd:26:0c:88:91:4a:66:28:34:ab:98:
25:06:05:64:cb:c9:66:0c:ab:66:cd:db:9f:56:b0:
c2:78:e9:a1:73:12:87:48:46:3e:b2:05:09:65:b8:
c2:5b:7c:82:0c:dc:d9:a6:a8:86:3c:7a:94:cf:78:
f8:18:8c:da:7b:56:01:60:72:63:52:48:87:e4:3b:
07:af:70:4f:4b:71:11:8d:7c:eb:3e:2b:a8:5a:44:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:29:77:3E:2B:E7:81:79:0D:71:29:E9:46:30:F5:7B:76:4E:17
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5a:38:06:43:49:4c:e0:0b:70:72:5e:b7:67:fd:a2:61:0e:
3e:4d:a1:b9:5c:48:eb:81:c7:9b:cd:e1:ed:5e:99:8e:4b:be:
7a:c2:e8:7f:39:03:74:09:a8:47:be:8c:9c:6a:8c:3f:02:07:
7d:2d:62:d6:4e:ad:0a:e7:50:7c:a2:dc:f4:dc:8f:17:41:11:
cc:fc:ee:1b:c5:e4:66:e3:57:1d:e9:ee:28:09:12:46:eb:85:
87:70:13:2b:5f:f2:c1:10:be:62:4a:b0:e0:05:27:55:69:f4:
3f:ed:44:36:40:45:df:c8:3c:94:c7:dd:bf:09:51:5b:e7:2e:
08:ad:10:56:f7:d7:55:fe:22:4b:e3:09:a2:f6:78:fb:c8:07:
22:74:88:00:f0:01:96:1b:1a:e0:9e:8b:91:18:f0:73:c4:40:
1a:4c:a9:95:8a:08:d1:53:dc:b8:62:a0:4d:a8:16:03:25:de:
c5:23:98:f8:84:83:c0:a5:ac:ff:dd:74:60:4c:6d:e6:50:ab:
08:eb:0a:8b:06:4f:79:e9:31:73:e2:11:23:29:39:93:b0:d8:
a3:21:5b:a5:c8:f9:20:7c:da:b3:82:fe:7e:b3:d7:87:56:da:
17:6a:ca:7d:be:4d:f7:1e:8a:ad:a3:a7:8e:e6:24:32:f4:b6:
f5:f5:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:14 2026 by rpki-client