Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: 1pm9CkooZ5AsGNBlHqkIOKvkEAEE53R3WWC8ehxd14g=
Subject key identifier: 47:54:48:05:36:50:60:E0:E4:61:53:1C:F9:64:88:C4:01:87:ED:9B
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019DDD67EFAE3DB3160A113B8F605168FD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0867
Signing time: Thu 30 Apr 2026 08:01:09 +0000
Manifest this update: Thu 30 Apr 2026 08:01:09 +0000
Manifest next update: Fri 01 May 2026 08:01:09 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: 2ei6fPgGmgfmOZ63Qb0VDuHfaHUIRxOE/8vHV9EtdcM=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:ef:ae:3d:b3:16:0a:11:3b:8f:60:51:68:fd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Apr 30 08:01:09 2026 GMT
Not After : May 1 08:01:09 2026 GMT
Subject: CN=47544805365060e0e461531cf96488c40187ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:26:5b:92:90:2c:c1:f2:a2:c4:73:90:ea:
de:ac:54:b7:37:a7:58:87:17:07:1f:62:47:2a:82:
43:7c:44:68:6a:79:b3:ed:6c:2f:b9:fb:c5:b7:91:
6d:c5:e8:c7:5c:1f:e3:15:85:ac:bf:5a:0d:d9:99:
8f:68:a5:2a:62:42:e2:0d:b5:0f:90:d7:74:4e:26:
9a:27:18:ae:af:01:1c:ab:df:c6:75:c0:54:ab:d4:
37:68:cc:df:c4:fd:e2:be:1b:bd:bb:06:36:dc:a1:
6c:6e:c3:a9:da:6c:25:77:cc:80:91:b6:45:6c:ae:
af:22:a8:32:9e:49:eb:ee:06:6b:24:58:af:12:ef:
28:4e:e2:a0:06:63:07:4b:18:c8:5f:01:9a:ca:4e:
c3:30:ab:f7:6d:aa:16:50:e4:cb:ec:9a:12:3f:17:
75:c5:87:d9:14:15:09:45:6a:ff:d4:dc:79:0f:f1:
4c:b8:61:54:75:4d:09:37:7a:6e:4f:6c:c8:df:87:
95:85:8c:09:33:de:e0:41:65:cf:9d:f0:33:8d:06:
9f:d9:9d:44:fd:0d:93:e0:98:e4:67:50:41:b6:f1:
44:cf:d4:32:44:93:e3:29:2c:9e:6e:17:d7:61:bd:
88:bf:18:3d:44:90:3a:df:1b:5b:c1:6b:b2:29:ce:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:54:48:05:36:50:60:E0:E4:61:53:1C:F9:64:88:C4:01:87:ED:9B
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:ad:12:50:99:3e:70:d4:b3:10:76:2b:5e:88:b9:7a:2a:
db:56:af:f6:1d:bc:75:c9:bc:b9:83:e5:ca:90:c8:28:7a:05:
92:b3:da:92:29:5d:5d:cc:23:be:81:ec:d0:64:16:4b:f8:fd:
0b:36:24:e4:39:c7:6f:6e:82:f5:0f:0a:a7:f9:38:25:82:b2:
9e:6f:bf:a9:b0:b2:cd:ba:7b:2b:dd:48:eb:b6:3b:4d:66:03:
46:cb:47:b6:03:49:2b:4b:3a:2a:3e:1e:4a:39:f6:bb:00:d3:
3d:be:56:17:c2:05:a3:d1:0e:0e:cc:f8:40:4e:13:54:d8:cf:
d6:99:e0:42:2c:f5:0f:d9:e2:f1:46:99:76:17:bb:ae:ae:f1:
b0:0c:09:c4:ec:4c:31:15:15:df:bf:a7:fe:3d:18:62:f8:1d:
42:ba:92:69:31:dd:18:42:a4:46:b6:b8:02:27:73:02:5d:7d:
79:ad:24:e8:8f:a1:18:63:99:53:ac:53:fb:42:43:ad:94:62:
ce:ec:59:9a:b6:19:56:f3:b1:95:c9:81:9e:43:0b:d5:3d:e0:
2b:df:6d:c8:40:40:6a:52:44:19:e9:4b:c5:bb:d8:76:b9:9c:
9c:2b:06:ed:b8:56:fe:43:fe:64:20:ea:a3:5c:5d:6f:4a:7e:
67:8b:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:29 2026 by rpki-client