Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: J8uqEjQl45CEIflZPvNGzvm8t3cCT33dxgdkV3IOirI=
Subject key identifier: E5:4B:49:A3:E5:B4:85:67:98:DC:A6:A5:0B:A1:CD:CB:76:ED:20:B6
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019D389C19E511A089078A90BB3947A5E0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0F1D
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: aB/2mCxkjNfRl+2k/O05bZAqymHPucDS0M1Cly8Qd9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:e5:11:a0:89:07:8a:90:bb:39:47:a5:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=e54b49a3e5b4856798dca6a50ba1cdcb76ed20b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:5f:e7:50:fd:dc:ae:be:6d:1e:76:0e:7e:
dc:78:e0:0e:1c:d7:40:f3:fd:34:dd:8b:f1:a9:54:
6a:b7:b5:91:cc:0d:ba:60:c3:b4:24:0a:fd:38:62:
be:f4:49:a5:28:9b:be:c4:07:c7:12:f6:c3:ee:93:
37:46:63:4d:a3:43:61:82:71:66:a8:47:0e:db:55:
9d:7d:d3:93:ee:57:48:18:9c:48:69:25:ea:3d:33:
1f:0c:7a:0a:a8:06:ad:66:04:e9:22:26:2e:60:5c:
55:1b:05:bd:bc:b0:3c:14:6d:89:57:d7:11:e0:62:
43:4e:61:67:0f:d0:a2:5a:ee:3f:73:29:71:3d:0b:
27:74:03:57:94:eb:9f:4a:04:64:e7:d5:40:c6:b2:
45:6a:45:ed:68:f5:1f:90:94:49:f9:f6:6b:3b:70:
a2:c0:cc:b7:0b:bc:b4:b1:eb:8b:8d:5f:e8:88:34:
61:b5:73:ef:6d:1a:56:d1:ba:13:2e:98:46:7b:b1:
ac:7a:fa:83:af:9d:3d:6a:cd:f8:7e:29:dc:68:5d:
fa:53:65:a3:91:ed:fa:64:4a:da:6f:75:39:0e:cb:
02:9e:50:40:11:45:71:02:c9:31:e1:58:9e:b2:99:
bf:de:db:cd:c5:c3:40:81:ea:04:34:da:ef:31:e6:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:49:A3:E5:B4:85:67:98:DC:A6:A5:0B:A1:CD:CB:76:ED:20:B6
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9c:da:db:2a:8b:be:e4:96:77:3c:5a:60:cf:71:f2:0e:04:
4e:2d:5f:a2:5f:48:f4:53:f0:2c:d9:80:b9:29:7c:25:c0:ac:
c2:8b:90:b3:bf:a7:1f:38:16:5a:30:c5:ef:3e:03:8c:11:98:
2f:80:3e:12:90:b1:03:58:b0:91:34:51:18:49:4e:45:d8:7c:
bc:ef:7e:86:43:3b:74:8c:8b:8d:52:3b:78:96:0f:6f:70:ec:
e4:7d:14:41:3e:95:38:f8:3b:6d:1b:80:79:da:3a:ed:da:39:
08:65:45:f6:bb:aa:db:83:f8:a6:ca:6a:c2:d5:d7:45:e5:d3:
f2:a5:fc:e4:86:cc:b3:e2:6c:13:0b:35:8d:97:1b:d6:02:c9:
6b:7f:97:24:f5:e3:0e:ae:83:7a:73:5d:44:a4:c3:1f:3e:5d:
43:7a:c7:f9:91:ee:33:37:53:2b:f9:9f:99:cb:c3:e7:f3:f9:
fd:d0:b5:8d:99:ff:18:75:f7:f6:f9:c6:e1:13:de:69:2a:a4:
b8:80:08:5b:dd:b6:f0:3e:e0:b5:d9:24:e1:48:48:43:4c:09:
b9:94:2b:47:16:da:21:8f:a7:3f:4a:17:ab:9c:c8:fd:95:e8:
9a:4a:80:3e:c6:c6:aa:a6:48:9c:36:b5:76:55:e7:7b:6f:37:
43:93:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:27 2026 by rpki-client