Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: nWzqRLk57W2UftiXcBfWydRUoEGA0F1N/qIs5dY1tXA=
Subject key identifier: F5:9B:66:0B:E5:93:8C:08:A3:5A:0C:2B:59:B3:BA:03:56:AF:B8:81
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019D389BFAFBA7DA8E059AE965AF47FF8D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0485
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: 0e56/4gd+8A4wPlqz5Bawy1rZT5IPQ3iPvGwp7clYeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fa:fb:a7:da:8e:05:9a:e9:65:af:47:ff:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=f59b660be5938c08a35a0c2b59b3ba0356afb881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:82:38:b9:eb:06:f7:5d:96:e0:1f:05:bf:
b0:6b:f9:a6:96:c7:e1:d2:96:14:6a:7b:c2:f0:41:
56:56:89:85:cb:23:ae:61:b5:44:c5:26:c7:02:64:
fd:0e:e3:00:d4:0e:e8:96:72:e7:c2:17:5a:fd:41:
c4:79:21:1e:cd:de:61:2b:e9:5b:5d:af:44:8b:c0:
3d:3d:d1:35:e9:15:9e:74:5b:13:f9:4a:7a:1a:23:
17:de:60:6c:bd:1d:26:2c:37:27:5a:d4:e3:dd:ba:
47:9a:b2:52:69:de:23:14:0f:c9:e6:6e:0c:84:e4:
05:9b:1d:af:d1:80:33:3a:3e:0b:62:77:98:c2:f7:
63:8b:a1:31:b6:d0:79:d1:39:90:38:a1:84:83:7f:
b5:c2:3b:57:9a:47:8e:72:fa:6a:8a:1f:84:9b:e5:
51:fb:cf:b1:9a:6e:82:29:79:d8:b4:16:57:cd:31:
71:08:27:31:f2:3d:a2:58:4f:28:4d:bb:59:cd:dd:
04:f8:14:84:c1:03:6c:33:89:e2:db:4e:ac:58:0c:
80:58:e4:a4:4c:1e:06:a8:fb:c1:ef:03:b3:89:80:
a8:b5:9f:57:d8:d8:45:3b:6a:eb:1d:ea:d1:13:5b:
cf:61:e1:2f:62:96:de:91:85:93:bf:61:f7:a6:cb:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:66:0B:E5:93:8C:08:A3:5A:0C:2B:59:B3:BA:03:56:AF:B8:81
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7a:70:ce:ae:0c:c6:23:c4:7f:3b:58:32:ac:52:f0:50:84:
0b:a3:38:c5:d7:32:ca:60:28:67:a7:dc:87:ca:11:d4:8b:20:
ee:e6:46:fb:b9:15:8c:2a:8c:a7:95:e3:a9:de:5d:97:16:c9:
18:ce:a9:00:14:25:b4:68:83:d9:46:c5:c5:c5:1e:13:1f:d9:
77:0e:51:d9:a2:d7:48:4f:5d:43:69:d1:40:e7:ef:63:ae:9b:
c2:c9:cc:52:29:f6:80:b0:af:84:45:72:36:d0:7e:d8:46:50:
d1:5b:5e:af:08:6b:71:f2:05:4b:c3:fc:d0:d7:5f:6c:da:8d:
0f:41:ea:84:b4:a1:e0:77:c4:66:ea:1f:16:b3:ab:85:79:61:
f9:ca:ce:8d:80:f7:b5:1b:da:89:f0:2f:a1:66:e3:82:60:9a:
27:2a:36:be:39:a1:7d:f5:ed:09:5a:6b:64:42:17:6a:d2:a6:
b0:90:bb:45:45:92:81:cf:00:6e:3f:62:a1:28:9f:2c:03:31:
b2:83:8d:0b:b5:5f:e4:1a:0d:09:f5:e9:00:5d:b1:cc:f3:da:
ac:13:0d:4f:46:e9:5c:c2:9e:f4:3e:6b:00:72:c6:3f:d3:ea:
55:14:54:87:d0:bf:f4:ef:48:8e:c7:b3:f2:15:4e:d3:50:72:
e2:2a:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:58 2026 by rpki-client