Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: gVfgHtP6UNMaSz/HH2hwRtk7L/cHiTqpfmqSFAwOKOg=
Subject key identifier: BE:84:75:19:26:3C:3C:86:3F:CD:31:8E:42:8B:E8:A1:33:56:42:76
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019D9850B9BF7EE0E3F14DB9B84700891C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 0797
Signing time: Thu 16 Apr 2026 22:02:00 +0000
Manifest this update: Thu 16 Apr 2026 22:02:00 +0000
Manifest next update: Fri 17 Apr 2026 22:02:00 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: 0L3B2oUAjfgEG53/HKZO+9FuOYfpxV0rQCndqIymLgs=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b9:bf:7e:e0:e3:f1:4d:b9:b8:47:00:89:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Apr 16 22:02:00 2026 GMT
Not After : Apr 17 22:02:00 2026 GMT
Subject: CN=be847519263c3c863fcd318e428be8a133564276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:e7:31:87:26:a9:63:51:e0:bd:87:be:40:
0d:8c:3d:a7:50:7c:44:f2:91:6c:43:ff:19:30:33:
0f:44:7e:a7:51:dc:7c:65:62:e7:a7:69:fd:1f:41:
ad:b3:e8:e0:e9:4f:ae:d5:7e:f9:02:56:5a:38:92:
c0:9b:33:6c:4a:f6:90:bd:5f:96:80:85:f0:59:94:
07:b5:8d:b4:08:29:3f:9c:de:3d:6f:d1:99:d6:44:
43:db:87:b8:91:e8:69:82:7d:3a:a4:9d:b3:ed:f9:
f3:7e:3f:41:71:4d:2e:63:d9:e6:1e:d8:b5:56:14:
5b:a2:72:84:4d:35:8b:4a:70:27:52:06:5d:a8:d6:
df:45:e8:7c:ee:5f:bd:78:4f:cb:ea:a3:65:9c:bc:
c3:d4:ad:fc:f5:60:61:3d:4a:af:3a:a4:de:cd:fa:
52:a6:20:e5:b1:d2:14:e1:e2:48:b6:5d:71:c3:2d:
0c:95:9f:3c:64:5e:c9:bc:e6:af:d2:60:1b:96:46:
0b:bd:18:03:51:f3:ac:e4:94:32:f2:51:9d:34:e6:
a4:eb:76:24:0f:de:90:c1:a4:82:97:3f:bd:44:9b:
4e:e4:9c:f6:e6:5f:a7:f7:0f:1e:67:1f:7d:00:c0:
7b:2f:2b:f4:b6:f3:18:48:8e:43:ce:98:f7:a8:72:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:75:19:26:3C:3C:86:3F:CD:31:8E:42:8B:E8:A1:33:56:42:76
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:ca:d3:82:8e:3a:52:47:77:58:8b:8a:e5:0d:10:5a:0c:
de:0c:46:50:33:b5:b1:52:15:28:a0:83:40:ef:f5:78:a4:e7:
1b:9e:65:9e:23:df:a7:a7:0e:3c:6e:af:01:c4:d6:1d:a7:17:
66:c8:72:2e:91:ce:c2:c4:69:f2:e4:0f:7e:f1:b7:7a:ba:a8:
fb:30:0a:f0:c2:84:2a:bd:bf:63:18:a2:0c:95:b9:fe:d9:fd:
69:0c:6c:18:2e:03:43:75:3b:04:cd:e0:55:5b:94:95:2d:44:
06:14:be:30:80:a9:7f:6f:a4:46:99:06:4b:bd:85:53:06:c7:
f0:b0:ee:e7:1e:92:35:f3:56:81:ce:a0:53:12:bc:ca:93:4c:
da:78:94:3f:59:29:41:1d:89:09:05:73:c9:89:52:e2:1c:a5:
f2:21:4f:c0:91:d5:ec:28:a1:f7:95:8c:e5:c2:65:b8:88:fd:
ad:b2:51:d3:5b:bc:c6:f4:1f:5f:03:4e:f4:cb:6c:57:2c:ff:
00:ce:75:6c:56:5c:9f:8f:4b:6b:c3:c9:ab:a4:a4:2c:3e:22:
9c:b1:4e:20:99:bf:03:f8:91:1c:4a:d7:88:f5:bd:18:7f:29:
57:20:1c:25:81:6e:1a:1d:6c:9d:ff:cb:4b:49:ea:f8:8d:b4:
38:76:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:19 2026 by rpki-client