Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: QhEJa6HszQp5k5feA0Lqee9acdqxl1beQSb2AAaKCe0=
Subject key identifier: A4:11:C4:73:98:91:13:02:4C:23:57:62:9A:F7:DA:B9:8D:8D:6E:4D
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019CABA1C3E31FC7AB5ADEE6AB9B1C653428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 043C
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: kUMHddYeE4uUT5Y0VfToT2L3rTT+8PPoxLqoOYor+II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c3:e3:1f:c7:ab:5a:de:e6:ab:9b:1c:65:34:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=a411c473989113024c2357629af7dab98d8d6e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:3b:fb:7d:65:5c:2e:e2:cc:f1:f3:bb:9c:
c6:91:d0:21:86:ed:ea:b7:62:f4:c1:e2:4d:7a:4c:
55:8f:03:a0:37:70:73:e4:83:c7:0f:17:88:10:dd:
74:52:27:6a:70:00:10:24:d3:3f:c5:56:38:8c:22:
04:39:11:ee:dd:b0:29:c7:23:98:17:92:c8:43:e9:
1b:4d:5c:ce:ba:f5:d2:af:1c:e8:ce:e1:fd:f5:a7:
f7:2c:07:ee:22:14:f7:9f:d3:ed:b1:e7:26:ee:99:
26:95:b3:e6:59:c0:83:90:02:bf:9d:20:6a:ca:db:
68:43:95:ec:73:84:5f:76:10:80:ed:1d:6d:f8:80:
61:23:f4:29:43:6c:f0:1f:d1:9b:e3:ea:f0:4b:f8:
bf:8d:68:42:0c:34:e5:e1:93:1b:cb:4e:7d:69:a0:
ba:64:98:c3:d0:54:26:87:fb:2b:1a:8c:8b:0d:e5:
5f:99:57:70:dd:a5:9e:a8:d0:77:05:32:d3:26:86:
be:52:b3:8b:e0:6d:38:17:2a:4a:64:6e:7c:9c:7f:
96:d7:3c:6a:86:9e:09:c9:1b:14:86:cc:03:cb:cd:
ab:18:59:33:ae:b8:1a:97:cd:d1:f4:ea:f0:b9:da:
6c:14:f7:76:7f:e5:b9:cb:22:b2:4c:3b:9b:bc:84:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:C4:73:98:91:13:02:4C:23:57:62:9A:F7:DA:B9:8D:8D:6E:4D
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c5:22:75:10:74:1b:6d:e6:f1:78:f1:6b:06:7f:b7:b2:ad:
ab:7f:2f:91:10:c9:93:9a:c2:6a:a3:ee:b4:67:bf:75:9f:63:
3e:22:eb:ce:c7:b4:76:fe:15:06:9e:ac:06:64:04:40:08:1a:
26:5c:c5:36:58:9c:f9:15:3f:94:01:4c:1e:2b:d7:d9:d3:07:
d2:67:2a:7a:7c:52:f4:f7:9e:71:a2:d9:75:d9:36:de:38:94:
11:2c:2f:7e:bf:c0:bf:93:aa:79:bb:e7:41:15:42:9d:db:ce:
0c:ca:65:0c:15:70:b6:24:27:b6:fc:64:97:57:d4:b4:bc:ff:
7a:c7:6a:92:10:fc:a8:45:22:04:3a:db:99:09:c5:e9:c0:bb:
41:8a:8b:e7:51:34:f7:6c:cd:7e:27:af:24:b6:ba:c5:87:ef:
30:34:1c:fd:20:88:09:3f:d6:4a:2c:a5:20:4a:10:09:92:14:
b3:f6:8e:68:40:11:ca:50:f3:82:c4:75:94:97:0a:f3:1e:08:
da:df:0e:28:7c:e0:b4:40:b5:53:09:4f:da:5b:cf:33:c4:56:
72:4a:03:8a:16:11:ab:89:a8:e3:dc:14:90:a6:f1:99:fd:13:
cd:f6:0b:86:fc:96:69:dd:29:0e:fc:04:6a:9a:72:6c:b8:3a:
51:b1:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:23 2026 by rpki-client