Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: sCsHguN/R33qBsA5FDudw6XuV8uzKaIdzcg/iiTDiEI=
Subject key identifier: 96:F9:E2:81:C1:8B:28:24:58:2E:3F:3B:D5:B7:08:D5:99:E8:A1:F6
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019D39E5B5546002EE9CA1B2CB4F1C6C57C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 16A0
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: OieRf5Ruq29LlupF3YpaDpX1JS78ROLUDkmK2dt9tSk=)
2: edP4akUMA-KW5rz8mARn_FxYYuc.roa (hash: Bpp4EPAnJ50C+lo/0XnBwL4aQGBYEBIyI5OyCtU4jV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b5:54:60:02:ee:9c:a1:b2:cb:4f:1c:6c:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=96f9e281c18b2824582e3f3bd5b708d599e8a1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:71:32:57:35:a3:05:e4:2d:ee:8d:52:c8:
b8:af:48:ad:3c:a2:af:f8:c1:63:24:ee:a8:eb:0a:
3b:94:ec:47:be:04:f9:b9:0c:37:2e:d0:9b:91:83:
95:09:f0:ea:e4:96:cf:e4:13:a4:11:81:b8:c2:d6:
ff:1d:3a:74:d8:bb:d7:1e:d0:64:35:4b:61:fb:0a:
2a:36:ed:e8:aa:7a:ea:0c:a3:01:66:57:80:eb:50:
c6:ff:6a:3d:8e:7d:d6:26:cf:aa:e6:31:46:95:3a:
33:11:c8:b7:0e:0f:85:a4:3f:aa:f1:e6:71:cd:92:
13:a3:5e:02:24:64:b0:cd:8b:a1:b1:2f:d8:0e:a6:
68:eb:53:d1:44:1b:b0:a7:f7:50:c5:2e:46:1d:e5:
54:37:62:fc:04:f4:1f:43:26:7c:f0:93:b1:de:79:
dc:b2:5a:3a:84:d4:7d:37:cd:a0:ad:78:b4:c5:af:
dc:cd:25:a7:82:00:07:1d:30:1b:c7:69:83:1e:8f:
0c:0c:c7:2f:ef:6f:30:56:0d:b8:6f:30:5b:fc:cc:
c8:80:9c:63:0d:9a:91:4b:8a:af:0e:e2:f5:10:b9:
97:eb:59:87:f0:e6:9e:0a:b8:f7:31:2b:83:0b:6e:
92:ee:22:8f:50:d8:79:ae:3c:1b:00:a0:fb:af:ea:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F9:E2:81:C1:8B:28:24:58:2E:3F:3B:D5:B7:08:D5:99:E8:A1:F6
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cc:60:b9:69:8d:4a:d7:1c:39:a3:a1:9a:e4:3c:a7:e0:ea:
75:6d:47:6a:6c:2c:d2:a8:72:26:61:13:1d:34:42:d4:fc:5e:
fa:b9:da:5a:43:e3:4a:2b:a3:86:93:f7:27:1b:ed:45:d7:08:
48:0a:57:24:d9:e2:9f:0e:6e:04:5a:8b:61:25:da:d4:80:64:
72:a9:ab:ae:e9:b1:96:45:d3:39:75:70:22:3f:0f:51:55:dc:
f3:2c:87:dd:0b:0b:a1:0c:d9:1b:58:fc:82:e2:6b:5d:56:6b:
51:a2:1c:56:62:43:cc:6a:00:81:1e:18:c3:d7:b9:cf:52:67:
ba:96:de:f1:b2:51:d3:21:26:0a:c1:07:f1:92:e7:bf:2e:c0:
e2:3d:07:08:60:27:f2:ef:55:92:69:b2:25:3c:22:c7:f3:35:
36:f6:63:8c:8d:b4:fc:37:3e:a7:cc:12:2d:cb:97:ed:c9:13:
00:89:47:40:c5:b4:f6:0c:73:f6:f8:b8:38:c5:45:20:d6:9e:
9a:90:1d:c2:af:2e:82:f8:c5:16:f4:12:7c:28:85:a8:f2:38:
9d:05:26:af:7d:67:b6:4d:17:77:f2:74:08:15:aa:d6:44:24:
b1:7f:62:6e:12:3a:93:de:2a:af:a6:14:83:e5:78:61:9b:4e:
51:a0:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:41 2026 by rpki-client