Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: qaRVhC8csEvVLSQUu4E6lIAIm8vCKvgd0Vx1VnCNHy4=
Subject key identifier: 5A:CD:53:B8:12:CE:DB:32:29:0D:B4:2A:65:B7:8E:18:2B:C3:73:88
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019D390A44BB338B958245CD67E3200F3FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 15B5
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 1YDQiRpIkl8dKkn91J4BZcjxLG8.roa (hash: swQzBQz8qYH+Ns05cWnj9m77XbPZt1CRiB4AvNOU1+4=)
2: 6mugNtdudbDdBm5CKSX1k0XhW7Q.roa (hash: QwJGGsLBaGqVdpKRP/uEJPtx3uyW+xZeB/D0UVYiuCA=)
3: JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa (hash: VfIPApxtxEUphMHmhUBJLte8wFfUS25OGKXWPVng31I=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: IBjd3Jh5/60v+PJ7Nq1Fb+ES9DTSpnhZD5qj+jsMaM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:44:bb:33:8b:95:82:45:cd:67:e3:20:0f:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=5acd53b812cedb32290db42a65b78e182bc37388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:5c:a7:ae:ec:05:a0:17:00:8a:55:0b:2a:
21:1d:68:1b:66:c7:30:2f:50:af:ff:03:9d:f5:63:
08:d8:c5:b7:ca:5d:4f:8c:43:17:4d:1f:ac:b5:ed:
46:f4:a8:6e:96:04:c9:50:61:fc:3b:90:08:93:f1:
28:62:e0:04:87:af:3b:d2:52:a3:9f:1f:bb:19:74:
34:7a:71:08:17:37:69:0a:74:5a:f0:30:c2:33:a3:
79:ca:18:c7:5b:24:5c:d6:cf:db:13:0b:ab:21:60:
5b:c8:71:b7:ab:b9:b1:d7:19:8f:d0:45:11:1b:95:
55:fb:b0:34:00:2b:56:1e:8a:04:c7:41:b9:7a:c6:
a7:19:b8:42:e0:0c:6f:2e:72:a3:5f:53:e0:19:35:
65:5b:7a:53:1c:51:1a:4a:3e:39:17:7d:9a:42:ed:
29:ee:9f:e2:8b:73:32:67:03:84:bd:86:70:a0:a7:
99:70:09:af:c2:0a:cd:dd:0f:5e:e9:3b:0b:cc:46:
15:ce:6b:52:99:e5:9d:74:89:c7:51:10:50:e6:54:
05:8f:3a:74:bb:9e:7e:27:06:01:45:7f:34:99:b4:
4c:90:ea:42:a7:7b:8f:7e:a5:10:95:72:9a:41:f7:
90:06:3e:d2:42:45:e7:74:4c:07:75:5f:64:b6:56:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:53:B8:12:CE:DB:32:29:0D:B4:2A:65:B7:8E:18:2B:C3:73:88
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:04:94:7d:a3:96:da:eb:c1:47:94:cc:eb:b9:bc:ea:eb:54:
31:3b:a4:e8:d3:28:c2:9f:b0:5d:df:04:2f:e0:92:7a:91:33:
24:95:66:a5:79:82:f7:78:34:90:a7:2e:9a:9a:ce:81:54:52:
0a:56:c6:92:4c:82:5f:46:ae:ee:7a:85:b4:d0:9e:95:27:23:
fd:aa:b2:24:e8:a0:f1:0e:36:0b:06:12:ae:78:df:b7:6f:b4:
9e:38:ac:03:e1:95:ff:3d:87:74:d7:89:92:a5:cc:86:8e:87:
4b:73:92:1f:7a:54:b0:9f:79:d0:53:bb:ba:10:99:b9:a5:b5:
aa:00:96:92:5c:85:04:56:75:78:8a:c3:12:3d:85:23:30:92:
ca:5c:46:cb:64:40:03:e6:28:b4:5a:f6:ba:a8:c8:7f:5f:77:
95:b4:41:9f:8e:eb:69:fb:73:9b:3f:ad:b3:6a:fb:1c:55:71:
ae:99:60:f2:fa:dc:49:8f:4e:e6:14:e7:2b:be:93:aa:8e:71:
12:86:6b:17:89:9c:63:c2:96:51:3d:36:88:af:6f:c1:6c:d7:
a1:d4:56:b9:ba:f4:7b:a2:6e:1d:b2:a1:33:f0:64:8b:92:5b:
e6:de:12:cb:ca:e8:22:82:87:63:99:f1:7f:aa:4b:03:82:d9:
16:1b:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:15 2026 by rpki-client