Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: F/skVuaXipcCHdzuhIK+OUWABi1U+tYQLFcbkewxia8=
Subject key identifier: 33:1B:F4:22:1C:E1:34:68:18:34:5A:3B:B1:D4:50:A4:06:94:66:B8
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019CABA235ABB669E66EAA40B8AE53123441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0ED4
Signing time: Sun 01 Mar 2026 23:01:00 +0000
Manifest this update: Sun 01 Mar 2026 23:01:00 +0000
Manifest next update: Mon 02 Mar 2026 23:01:00 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: UeKO2uBoZnOKsobTVE+A3GGSE9U4NTiIDkvHLdQ+/oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:35:ab:b6:69:e6:6e:aa:40:b8:ae:53:12:34:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Mar 1 23:01:00 2026 GMT
Not After : Mar 2 23:01:00 2026 GMT
Subject: CN=331bf4221ce1346818345a3bb1d450a4069466b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:eb:7a:43:b5:9e:2f:53:77:0b:f0:46:7d:
33:5e:6d:2d:30:db:a1:6d:e6:e0:42:b7:4f:31:a9:
37:7e:05:28:eb:ca:00:89:e2:3a:63:ce:81:67:34:
46:60:8c:8e:11:0d:99:73:7b:18:62:43:b4:86:5c:
eb:ed:1f:2c:51:31:80:ed:22:e6:a4:cd:0b:be:01:
75:3b:17:05:95:9d:2e:cc:3a:67:0f:d5:c5:b0:32:
df:4b:63:c8:8c:97:a3:61:92:74:60:47:40:f8:6f:
c9:68:ea:fc:6d:f2:c9:a7:db:95:9d:00:bd:0a:19:
da:8f:0a:25:55:9d:68:e1:f8:c6:11:e1:a5:27:6f:
b4:b3:92:34:f2:09:c9:b6:78:c2:22:48:36:ec:09:
f1:be:d1:16:0b:18:61:45:eb:d6:b2:09:6a:72:d1:
37:fa:52:35:b1:9e:f2:21:cb:55:15:03:e7:b3:77:
10:3d:c7:09:d7:28:0c:ef:dc:95:3a:88:1c:e1:4a:
fd:25:27:1d:c8:44:26:4b:a1:e5:1a:47:96:60:de:
72:4b:6d:d5:13:7a:24:b1:24:9e:f7:9f:d7:01:f8:
91:1c:80:34:6d:e1:10:b6:e4:e2:1e:72:34:14:71:
f2:db:c0:7f:ff:95:3c:be:90:d1:18:28:e6:ff:a0:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:F4:22:1C:E1:34:68:18:34:5A:3B:B1:D4:50:A4:06:94:66:B8
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ca:ce:cc:8d:2c:4d:ed:00:ea:f6:be:ae:23:3b:ce:1b:db:
2b:6c:06:4d:66:a2:2f:c6:4a:1c:ec:3d:d9:da:8d:90:1a:79:
24:48:24:05:62:46:f2:2d:35:56:74:61:21:f6:f5:f2:0f:14:
02:a0:87:9b:72:5f:a5:7c:ae:d4:7f:d7:e5:63:64:b4:78:51:
fe:55:66:d9:d5:02:8c:d8:72:af:f7:e3:5e:78:a9:22:05:c2:
02:47:c5:5d:85:f9:64:14:64:66:23:4f:6a:e1:5a:0b:c0:2c:
df:52:ba:18:64:cd:59:36:49:9b:50:90:05:46:1d:4a:90:34:
3f:9a:38:5f:8a:92:46:ac:3e:43:e7:5d:8a:7b:9b:1d:5e:de:
04:b8:e2:46:6e:a7:68:3d:99:c6:6a:7b:02:59:02:23:a9:38:
70:96:e7:47:29:bd:61:d5:1e:3d:52:7f:cf:64:2d:9b:af:ea:
ca:58:a5:6f:a7:24:ff:fe:1a:e6:34:f2:98:49:87:09:99:c5:
45:d7:1b:71:79:90:22:15:11:1b:d6:94:80:e2:53:a5:d1:ea:
7e:da:9f:be:bf:10:db:e9:c9:59:8b:df:0c:9e:7a:5f:1d:a8:
21:b4:02:66:76:c2:3c:bc:dd:b2:25:94:d0:40:ad:24:0f:66:
ff:29:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:11 2026 by rpki-client