Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: /MCdzMEk//aNDh2GvTGgaVxS/VPUzteK7XXe8fR3ZiA=
Subject key identifier: A0:6F:D8:65:92:1E:27:2D:C0:F6:E1:B3:E8:BE:11:14:2E:2E:E3:2E
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019D992B96557CD0471F9F2CD462BF1C3F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0F4F
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: p4VwX5hHDkjHVZGqzUeqnvB7hm81N0sxraPBBzxAesE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:96:55:7c:d0:47:1f:9f:2c:d4:62:bf:1c:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=a06fd865921e272dc0f6e1b3e8be11142e2ee32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:f9:73:06:e9:68:f7:be:e7:6e:9a:c8:dd:
b9:99:e7:f2:63:0f:a2:9a:d6:b3:44:a6:61:bf:45:
0e:3e:a7:eb:bb:a9:be:35:fd:95:45:b3:f6:92:7b:
16:9e:e4:a8:ca:d7:88:79:be:c1:c0:4c:e4:34:1e:
6d:39:43:fc:e0:c3:f6:6b:90:57:68:e3:b9:73:9c:
9e:12:75:2a:ee:19:e6:9c:11:c3:29:74:9d:19:5a:
76:25:b0:2a:d5:6b:05:02:28:c1:3f:04:29:bc:81:
2c:e4:77:cf:f4:c7:92:e2:0e:34:dc:bd:4d:91:a1:
f0:6a:ca:78:62:a8:63:f0:10:57:b0:23:5a:e1:a6:
24:10:65:86:85:04:bb:d5:b1:73:f9:f9:f6:a5:7b:
8e:d7:88:32:a8:87:32:39:66:31:75:53:72:0e:9e:
75:69:12:52:60:77:78:dc:38:23:9b:39:59:2c:57:
6d:09:b3:91:a8:17:90:7f:5b:11:76:0c:26:0d:17:
ab:e6:b3:a2:f5:dc:2f:61:ad:33:4b:4d:12:de:a3:
70:ce:f5:f9:97:27:88:a3:2e:72:26:81:1a:11:c3:
40:ba:04:71:8b:0d:2f:60:2e:60:7c:bc:de:b9:a7:
67:89:32:c7:f8:89:e2:e0:0f:61:67:63:2e:1c:14:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:D8:65:92:1E:27:2D:C0:F6:E1:B3:E8:BE:11:14:2E:2E:E3:2E
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0a:7a:84:64:03:97:87:9b:b3:36:45:f9:d6:1f:39:fa:35:
e8:da:2a:02:53:f5:bc:94:60:47:90:24:4d:e2:bf:75:a1:3e:
3f:63:db:a2:23:41:2c:6c:d8:bb:a9:4b:30:66:fe:49:d5:47:
f1:e3:56:97:6f:63:67:a8:eb:db:6e:79:00:52:42:26:ce:32:
17:c4:c5:1e:4e:81:96:ea:31:38:e5:c7:38:42:c2:d0:58:31:
1e:6c:f4:7a:b3:03:a4:96:b8:13:b3:5e:d3:f3:c5:87:73:81:
48:02:10:ad:81:c9:79:7d:39:40:34:14:20:b6:c9:d1:e7:35:
e6:e3:8b:9f:2e:5b:bb:38:da:f0:b5:0f:02:73:0d:af:12:49:
c3:9b:27:ab:6d:c5:52:18:76:74:b8:e3:7c:7f:59:9d:11:b8:
6b:d2:01:87:0e:e4:1a:e5:fe:ee:ba:ed:49:3b:51:5e:fd:4e:
b1:c6:08:0c:5d:7c:c2:33:9c:2d:53:9e:10:89:95:de:a4:70:
8a:ca:07:1c:76:36:4c:f6:20:c0:98:42:a8:3c:47:3a:55:3e:
7a:4e:ec:97:41:b5:29:24:aa:32:5a:bc:87:05:72:a1:ac:60:
7f:71:fa:bb:22:86:da:25:95:29:c4:e3:1c:85:cc:73:d3:ab:
00:55:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:09 2026 by rpki-client