Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: CFfujdqujCkBYKVQcp8NG1MjolfacIDxuENfz75oKVY=
Subject key identifier: FF:21:3C:87:CE:2B:42:C9:12:83:29:46:BD:B9:32:07:5A:3C:2C:76
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 019D371BE9CA736DF97FD59D1A4132ABA734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 16B5
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: 9GBWdjPw-BNZrNnli56ahbKMkEA.roa (hash: Oupb+aKsrMig1VIpCyGRplvadhLjMfLJm8H0dkmS7pE=)
2: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: dVsOyGmBQx5HtaQ+ZlU2G2sGF+0vwPo0aoSQ9xLrFQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e9:ca:73:6d:f9:7f:d5:9d:1a:41:32:ab:a7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=ff213c87ce2b42c912832946bdb932075a3c2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:8a:1d:42:4b:f8:58:18:ad:8b:c8:e3:6b:
d1:e7:f7:30:e4:51:e7:b9:a4:68:70:73:bd:81:fb:
5a:da:ec:ff:0d:4b:b4:66:80:2b:dd:76:21:62:1a:
ed:54:66:fe:c2:72:dc:f7:9e:6c:9f:32:51:28:fd:
e1:42:25:ad:79:9d:8b:83:be:a1:0a:64:68:fa:1c:
8d:30:07:3a:00:7c:ad:71:e4:a7:92:c7:49:8f:4c:
7c:5f:3f:e3:10:78:f5:44:72:19:4d:10:56:c4:9a:
50:8b:0e:3c:b9:70:64:5e:79:c2:d4:5e:3c:99:f1:
25:b0:b3:da:45:3e:b9:4c:f5:54:d1:c3:6b:c1:df:
c2:e5:69:22:fe:2a:7a:f1:ee:c3:93:4f:97:c6:94:
c3:91:51:16:48:5c:70:4b:71:fa:58:f0:ef:39:39:
50:3e:e4:df:8c:cc:66:e2:15:39:a8:1f:b4:f3:97:
18:69:52:4e:05:bc:a3:cd:c2:a8:2e:0a:14:97:da:
06:97:b0:d8:8f:9b:c6:27:3f:1c:cc:43:ed:24:ee:
fc:88:aa:7c:80:4a:42:ed:f9:1c:b1:ab:60:8b:a1:
d1:65:2b:ed:1b:86:54:53:a8:82:1a:cc:8f:ec:5e:
1a:2c:74:a0:56:8d:a4:57:42:0c:8a:b8:dc:61:fd:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:3C:87:CE:2B:42:C9:12:83:29:46:BD:B9:32:07:5A:3C:2C:76
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:9d:cf:80:93:25:46:ff:63:4b:e7:da:03:99:6d:fc:34:
76:ae:61:0c:aa:ab:49:2f:7e:a1:d6:91:ec:ab:80:0a:da:2a:
f2:94:d8:f3:c5:bf:ca:25:cd:ac:df:c8:ab:68:88:f5:a4:b9:
e9:dd:3e:74:67:cc:8e:0b:b8:39:3c:37:10:35:e1:98:b3:73:
7a:60:03:86:70:43:48:6d:8b:10:83:35:c8:40:1c:21:67:5e:
4d:27:dd:ee:01:41:0c:ec:9e:0f:c0:1c:fd:3e:47:3a:fa:e1:
2a:bf:9f:1d:8f:c9:95:7e:4f:54:94:da:c6:58:97:68:7a:22:
02:bc:1b:73:8f:49:c2:79:64:e0:3d:c9:ec:72:15:ff:b1:36:
b0:91:2b:6c:20:53:12:53:8a:e3:f6:04:3f:a9:4c:24:3f:96:
bb:d2:2e:70:8d:1a:4f:1a:4f:4c:45:29:f5:4b:7c:1f:ba:cd:
0e:e5:5f:9b:43:3f:56:17:3b:67:1a:da:be:97:bf:12:4c:a6:
e4:93:67:4b:d1:4c:f3:99:ae:b9:7f:71:8b:86:e2:8b:a6:2d:
d3:96:72:4e:b2:e2:83:81:39:83:1e:c1:75:7c:e0:94:4b:2a:
51:f9:d3:f5:26:88:34:1e:fe:5f:a0:8a:92:72:66:ef:a7:3e:
14:ae:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:27 2026 by rpki-client