Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: 3r170bKX1vWqF7vrQhq/cEXq9/v6hlgWkbbTLsebgFg=
Subject key identifier: F6:23:9A:86:6C:B8:A5:8A:AF:08:DB:E1:A6:3A:AA:5A:E1:53:4C:C8
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019E8CED7155964DE85A4D7E1AAED1B73B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 1432
Signing time: Wed 03 Jun 2026 10:00:31 +0000
Manifest this update: Wed 03 Jun 2026 10:00:31 +0000
Manifest next update: Thu 04 Jun 2026 10:00:31 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: RttWXgwkfTeXShwOzf5CDLWyvPqZ/O1fTJ7+HHzmnrM=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:ed:71:55:96:4d:e8:5a:4d:7e:1a:ae:d1:b7:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jun 3 10:00:31 2026 GMT
Not After : Jun 4 10:00:31 2026 GMT
Subject: CN=f6239a866cb8a58aaf08dbe1a63aaa5ae1534cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:2b:9e:8e:30:83:da:13:d5:81:f4:5e:12:
43:89:48:55:54:dc:fd:ad:1a:f0:fc:79:e7:0a:f5:
41:43:0c:01:d3:a5:e6:95:d1:07:b0:79:87:93:1d:
62:74:7a:16:78:77:af:ac:34:d1:84:ea:6c:1f:06:
04:76:60:45:eb:34:6f:c0:ef:5f:c9:52:c9:1a:db:
ff:06:9a:ff:f3:9b:f2:e1:06:44:dd:eb:a3:9b:a2:
83:d3:26:28:fd:d8:16:60:ce:c7:47:8f:1a:0c:19:
7a:e6:54:53:ad:56:43:be:aa:48:97:3f:61:99:e7:
db:84:4b:3c:4c:ab:c4:1f:e7:a4:63:36:b8:bd:66:
4b:50:44:15:14:08:7d:b0:e0:11:42:3e:24:08:a9:
d6:24:b3:30:29:10:87:97:c3:b7:44:ae:75:39:d2:
64:77:33:ca:16:40:98:df:bf:36:c1:14:4b:33:fb:
8a:24:00:cf:38:c6:4c:38:51:27:96:57:b2:9e:83:
7b:1f:6d:af:3e:80:10:8e:31:25:9b:91:03:08:80:
01:e7:4f:f0:da:a2:bb:28:42:a6:4c:f3:9d:b3:32:
a6:63:28:bf:bc:61:64:7d:ea:32:64:ad:d5:10:42:
70:60:16:6c:ca:d0:74:fd:d6:a5:64:e3:a7:05:9d:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:9A:86:6C:B8:A5:8A:AF:08:DB:E1:A6:3A:AA:5A:E1:53:4C:C8
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:68:90:db:8f:ed:8b:31:39:5d:1f:31:94:f5:b3:c3:c1:
c3:5f:11:e4:56:02:23:dd:da:12:85:f1:54:75:47:1c:a3:39:
3a:70:53:31:7a:b9:6e:f2:7b:d4:5e:cb:7f:a5:fb:21:f5:57:
7d:16:64:1a:66:1b:94:4f:72:e6:7d:ab:e8:9c:f0:27:95:64:
fe:73:bf:1a:9a:08:56:e6:c0:dd:e1:b2:10:fd:bd:03:f6:50:
aa:2d:66:e9:1f:5d:5e:62:2d:d2:25:a7:56:d3:b5:f9:0e:fa:
2d:7b:7c:4d:79:20:5a:cd:ba:00:7c:f0:1d:7e:ef:fe:8c:0c:
7c:f2:91:3c:83:ef:5a:14:c1:41:23:f1:6c:c8:37:44:06:5c:
d8:f3:40:40:3c:6d:74:f7:9c:a2:cc:3d:2b:c2:d1:7c:80:99:
ca:96:fe:65:2e:af:8b:31:d9:70:d6:4e:50:80:5d:ad:f3:6a:
30:5f:7d:ce:f9:9b:ab:fa:5c:ca:e7:ba:2f:5a:dd:af:26:d4:
08:39:8e:e5:1b:e9:1e:7a:c1:a3:b2:b6:b2:74:24:90:a3:26:
ed:c9:5c:b1:8c:93:e3:78:1d:0f:b1:73:79:4f:4f:e3:55:28:
4f:d7:b6:85:28:f9:67:99:e1:aa:d3:60:8c:18:1a:c4:8c:18:
ec:d9:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:21 2026 by rpki-client