Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 06sDQY6ktO6nJf7rMnbnVw6rpC9vb+0UgynyrJ/lrUw=
Subject key identifier: FB:FF:F8:75:10:D6:B4:53:59:8A:33:06:92:26:D7:78:82:CA:F2:DE
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019EB76A97EAEE09E75DD7548A9F5987A0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1298
Signing time: Thu 11 Jun 2026 16:01:16 +0000
Manifest this update: Thu 11 Jun 2026 16:01:16 +0000
Manifest next update: Fri 12 Jun 2026 16:01:16 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: /U6lWic4meswf0Lp3NCOHqnFhhOdyC3aUBUPenjvoc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:97:ea:ee:09:e7:5d:d7:54:8a:9f:59:87:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jun 11 16:01:16 2026 GMT
Not After : Jun 12 16:01:16 2026 GMT
Subject: CN=fbfff87510d6b453598a33069226d77882caf2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:3f:3f:30:2e:99:30:e2:6f:4a:20:0d:45:
14:31:df:10:17:a0:ff:f9:0c:b9:ca:25:e3:51:db:
3b:e4:34:a0:70:29:9f:f8:a6:35:62:0a:bd:f8:af:
5b:2c:0c:07:11:3e:4f:15:6c:09:05:07:47:26:ff:
64:19:c0:7c:aa:3b:50:c6:fc:67:0f:d9:15:18:9a:
52:f7:51:e0:6f:17:bf:bd:f8:c7:ed:e8:b8:85:5b:
1e:c9:83:5a:eb:e1:97:5a:2f:cf:9d:ab:47:c5:b7:
a9:6c:bd:36:1e:3b:97:31:c6:3b:4f:63:08:34:61:
ea:d5:4a:2e:29:7f:a0:e6:6f:20:cf:d7:aa:b0:39:
fd:40:67:a7:26:fc:2b:f0:3d:35:58:b4:e5:f5:31:
36:50:3e:ab:5f:d7:ba:3c:1f:3c:00:54:c8:c4:69:
bf:20:3a:eb:82:fc:52:56:29:73:ad:97:66:6f:c8:
45:ee:0d:65:ab:74:d4:e1:f7:fb:86:de:24:19:10:
d3:0d:97:4f:38:6c:9b:4b:5f:98:b4:f8:ea:4f:3a:
7e:65:17:d3:e6:de:79:67:66:28:7d:65:6e:4d:a6:
cc:47:e0:d7:f3:59:1e:ae:ca:e2:d4:43:1b:34:73:
ff:d0:91:3b:74:ce:54:0f:75:84:98:6a:d6:c8:69:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:F8:75:10:D6:B4:53:59:8A:33:06:92:26:D7:78:82:CA:F2:DE
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:1a:8e:5e:75:0b:4c:94:bd:11:0c:28:fe:98:cd:7d:00:
cc:d5:82:cc:dc:92:53:40:de:7a:6c:d8:2e:24:ce:af:5f:df:
36:31:58:b9:c2:d9:f6:83:b0:20:9c:25:d1:29:07:28:6d:e0:
67:17:d9:76:7e:f1:23:7f:c2:d2:18:85:c6:38:b7:87:f5:2c:
83:2f:43:6d:9d:1c:66:7d:26:f7:8d:34:d9:c1:ec:ab:9d:25:
e1:1b:21:63:17:d4:6b:45:0b:a5:76:8b:b0:10:10:14:11:51:
97:aa:b3:b6:74:44:d4:e1:40:b6:92:52:75:65:cd:f3:e2:93:
84:cb:32:bb:c0:5d:e6:87:9f:60:81:85:aa:36:8b:38:64:65:
95:3d:6d:17:80:47:d9:d6:59:dc:64:7f:8a:53:11:29:a3:ed:
93:90:11:b1:c3:88:1e:4f:48:77:45:d8:b0:cc:63:1f:89:e4:
ad:8e:54:ae:76:54:93:d9:57:96:48:92:2f:97:20:b8:c9:3d:
10:61:f0:12:f9:32:aa:4d:ec:28:8a:04:19:cf:03:50:ee:09:
6c:2a:32:58:4a:ed:79:03:b6:fe:a9:ea:e2:32:7c:08:dc:8a:
c3:0f:f0:3d:ea:28:b4:7f:62:ad:1d:01:1b:40:51:4b:6d:f6:
bc:ef:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:57:28 2026 by rpki-client