Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: lWqjUBmxgZO8NeBiom1rYrWvErfMfifqVCZaLT5xXMs=
Subject key identifier: 8C:85:0E:8F:63:59:0A:A7:54:67:0D:FB:2B:37:3E:71:44:62:85:3A
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019E31BC447D4883DC53CAE2DE3B599A9C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0F9E
Signing time: Sat 16 May 2026 17:01:22 +0000
Manifest this update: Sat 16 May 2026 17:01:22 +0000
Manifest next update: Sun 17 May 2026 17:01:22 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: P3/oKTX/pQ6hIWshYhuC99IXHB2r28iRfIU1qjUwxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:44:7d:48:83:dc:53:ca:e2:de:3b:59:9a:9c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: May 16 17:01:22 2026 GMT
Not After : May 17 17:01:22 2026 GMT
Subject: CN=8c850e8f63590aa754670dfb2b373e714462853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:d3:f1:62:61:71:25:a1:96:fb:55:97:49:
c3:8b:6f:ff:8d:c9:86:73:2c:58:ad:23:b9:a0:34:
98:c3:dd:20:9f:19:d9:f9:4f:cf:17:c9:bd:25:ea:
9f:bf:c6:68:6d:bc:1d:bc:90:91:80:4d:c5:85:e6:
06:ac:6e:0d:ae:41:48:38:c8:a6:81:4c:c3:17:d9:
d9:58:1e:27:e9:85:b9:e6:8e:1d:cd:4a:7f:9e:4c:
14:99:b7:d5:e0:56:99:d4:11:d1:11:7a:11:97:8c:
a6:fd:c9:d0:90:97:75:46:81:e4:fc:ac:c9:eb:96:
d4:9b:74:25:5e:db:b2:65:29:9c:e9:fd:e2:64:fc:
0c:a4:85:70:3a:00:40:83:ee:6d:94:a4:0b:c1:de:
91:1e:64:b9:ef:3f:93:0b:2f:0a:58:c5:98:f8:3d:
58:bc:51:0a:78:67:e7:61:87:4f:33:c6:4c:6d:0a:
67:16:b5:fd:29:7a:9c:24:ce:6f:eb:15:af:46:49:
0a:23:4d:fb:e3:f3:a0:21:93:34:54:01:d1:1b:03:
8d:51:27:69:92:79:83:5c:a5:f4:23:6a:0c:d0:34:
8b:c2:2a:0a:d5:5f:66:33:d5:65:51:1f:b3:13:92:
43:94:2c:9d:77:13:60:f8:2e:9d:cb:33:f0:56:52:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:0E:8F:63:59:0A:A7:54:67:0D:FB:2B:37:3E:71:44:62:85:3A
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:db:36:34:5b:09:3b:2f:c3:19:67:04:4b:1e:00:af:15:
54:cc:56:2b:6d:0e:ea:b9:4d:a9:35:16:78:12:fd:16:d8:46:
1e:81:40:f3:bd:07:17:70:e3:70:97:e2:e6:48:4c:75:e1:c9:
db:8b:86:d6:3b:f5:33:96:53:69:ae:d4:f9:22:0b:0d:7a:4c:
1e:66:c0:ac:ac:8e:ce:b5:67:25:2b:81:ce:59:d6:bb:db:50:
f4:bf:2f:4b:a4:1a:4a:3b:68:ca:d8:4c:dc:e5:33:62:0a:7f:
5d:b1:4c:86:c1:e6:fa:1b:0b:93:d2:f1:44:dc:33:3d:90:bf:
7d:1a:b4:3a:61:99:12:01:6a:3c:9a:80:d2:57:82:a3:5f:4c:
aa:ae:4d:6d:94:46:0d:d7:9e:06:32:39:97:35:90:13:57:69:
df:79:6c:02:cb:eb:0a:a1:9c:77:f4:51:ea:33:19:5e:a9:eb:
be:4a:ee:a1:82:47:07:5b:82:6c:4b:56:c4:57:91:bf:f6:8a:
3f:65:c4:fc:92:73:e8:9f:4d:93:94:7c:33:bd:07:4b:db:6f:
28:bd:d4:38:07:b4:08:60:2c:c3:c7:87:83:2e:d2:7d:6d:c9:
29:1a:32:0c:19:75:91:8e:fb:94:51:3b:a8:3d:99:4f:4c:ff:
c2:a4:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:12:36 2026 by rpki-client