Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: T3U54EuyHxkpQ6fSnGg/S3yNQ1Y6QhafIqZWfiU1QAc=
Subject key identifier: 87:B6:32:CD:E9:10:B6:95:88:A4:94:3D:E2:51:B4:1E:F0:F4:FC:50
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019D992BA2B6CEC540F253254A96B9AD8EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 04B7
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: yuXdVIh+JnARYW1jIp1yuvXMrciB628ltPIYMnxpXX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a2:b6:ce:c5:40:f2:53:25:4a:96:b9:ad:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=87b632cde910b69588a4943de251b41ef0f4fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:b5:53:14:33:f1:e2:93:b3:74:cf:e9:d9:
44:88:f7:5e:f7:cc:9b:9e:92:2e:7b:f4:af:4a:bc:
ea:7e:02:73:e9:4d:2c:ca:f9:57:4e:ad:0d:b9:e7:
1f:b9:8b:3f:91:07:6d:ae:a8:dd:6d:f8:f8:d5:02:
a2:8c:25:3c:44:a8:5d:17:a5:b7:43:8e:87:2a:30:
ce:94:7e:34:28:1c:9a:53:f6:f7:07:e6:a8:8a:9a:
2c:d2:a4:2f:84:ad:d0:b5:b1:54:46:de:77:27:12:
7c:e0:3d:14:79:d2:5e:e5:36:fe:08:c9:fb:5c:f5:
37:bb:b3:1b:4b:93:d4:5a:bf:2e:17:1c:40:1c:c5:
ec:93:8d:e3:82:4c:2c:60:7d:1f:f5:ae:fa:d4:91:
52:74:89:1b:5a:ac:9b:fe:18:44:23:33:c8:92:3c:
5b:81:66:8f:78:55:6d:23:78:fb:b7:b2:f9:e3:ea:
f2:12:da:8e:d2:d3:03:52:a5:8c:97:c7:05:4b:1f:
a5:52:1e:80:3a:fc:5d:33:2a:83:b4:8a:0c:b1:f1:
3a:56:b8:75:18:54:90:2c:e5:89:fc:b9:1f:46:8c:
42:05:b3:13:ac:82:70:8f:df:f9:be:64:b1:f6:b8:
43:1a:8d:38:ab:84:74:33:24:1b:71:2b:a6:f0:fd:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:32:CD:E9:10:B6:95:88:A4:94:3D:E2:51:B4:1E:F0:F4:FC:50
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:4d:a1:e6:8a:4f:65:18:04:33:14:ca:43:68:be:cf:bf:
bf:58:21:68:73:78:04:7e:45:34:40:3f:58:80:c9:4d:85:1f:
cd:3f:91:26:96:b9:b6:57:2a:4b:1c:55:9b:72:89:e5:25:a6:
5a:6d:5b:44:31:fe:9c:49:bb:ab:c3:cf:34:c6:f3:a0:fa:42:
21:bd:53:8d:c0:0d:c1:a6:45:4b:f2:1b:4f:36:b3:b2:91:99:
ab:a7:24:5d:9c:33:74:23:fd:54:29:1e:e3:d7:fa:7a:b4:82:
27:05:b6:76:a0:aa:42:8b:de:02:45:d4:5c:d8:29:92:bc:d1:
0a:db:e9:66:b9:b7:12:77:4d:14:a4:08:7d:fe:93:af:2f:31:
45:00:2d:a3:4f:8d:50:a7:ca:b4:3b:76:8d:6b:a2:89:0d:8b:
1b:f1:27:72:36:0c:4f:a6:5d:27:71:61:37:1e:7d:fd:c8:2f:
c5:44:d8:8b:0c:56:92:12:4b:25:ea:ae:cb:40:47:8c:cb:3e:
a0:c7:b9:d5:23:4c:0a:d0:d6:15:ae:ac:64:2f:4b:a2:8b:02:
21:bf:75:c6:34:68:a6:2d:79:e1:6e:f0:1a:ce:33:d8:aa:4d:
19:14:f3:cc:39:a4:3c:f3:07:77:ad:82:18:ea:c1:3e:88:54:
2f:26:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:44 2026 by rpki-client