
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: +q4KcmcWKVQfdRbZ6V3OOV2hqTDdAjxT3D9wDyLLCY0=
Subject key identifier: 5E:30:90:25:EE:C4:BE:9D:15:CE:DA:0C:30:6A:3E:DB:96:07:D4:69
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019EC0A3FE016C5B358E7B1ACD638950808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0FE8
Signing time: Sat 13 Jun 2026 11:00:33 +0000
Manifest this update: Sat 13 Jun 2026 11:00:33 +0000
Manifest next update: Sun 14 Jun 2026 11:00:33 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: BKRnGzz+XPw7M+f35gODMb0mrhvzop3wQ7zOPg9W16I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:fe:01:6c:5b:35:8e:7b:1a:cd:63:89:50:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Jun 13 11:00:33 2026 GMT
Not After : Jun 14 11:00:33 2026 GMT
Subject: CN=5e309025eec4be9d15ceda0c306a3edb9607d469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:73:28:2d:1b:40:f1:57:cc:63:1e:ef:88:
54:9e:2a:e8:2e:35:4c:c4:a1:71:ea:3a:e3:a9:dc:
82:af:60:ac:43:22:d0:21:2a:f6:09:32:b1:7e:1b:
60:17:a1:b3:55:9d:9c:37:a5:75:d5:4a:2d:38:b1:
65:ab:6b:dd:2d:a6:34:6f:fb:ea:ca:1b:14:5d:cd:
50:d6:37:38:0e:46:77:ae:98:b9:52:37:a0:0f:d0:
20:23:24:80:ba:1f:9d:b2:17:81:ff:82:47:7b:49:
af:46:c6:a0:4f:c4:ab:1b:e3:5e:42:05:fd:df:b1:
63:07:11:77:dd:bc:fd:27:e3:9f:16:d5:d9:ec:fd:
57:f9:26:23:17:2d:23:83:7f:b8:6a:03:a5:8d:8c:
62:c7:4b:3f:00:71:23:64:c9:81:12:75:13:cf:11:
77:3e:a0:d5:fd:98:91:fb:7f:67:f1:5c:18:d9:e9:
76:0e:43:ca:73:9f:29:4d:99:6b:17:8b:f7:02:fa:
1c:d5:08:f8:10:a2:b7:33:a0:35:b9:13:fc:ef:bf:
74:f9:0c:56:11:67:65:95:e4:17:fd:c7:7b:30:8a:
5f:a8:19:ec:1b:b3:97:5b:e4:1f:3d:1b:49:7e:21:
5a:d8:cc:96:a8:79:1f:60:54:7a:b4:49:36:8f:3e:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:90:25:EE:C4:BE:9D:15:CE:DA:0C:30:6A:3E:DB:96:07:D4:69
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:cf:a6:46:a8:12:e0:d5:25:d9:29:b7:fe:f6:d1:4f:be:
a4:85:81:31:03:23:29:6e:36:15:a8:77:48:0a:05:37:be:e4:
23:06:5e:a0:80:06:76:5d:fa:ad:12:65:7f:bc:87:32:2d:87:
5f:3c:d6:46:1e:8e:db:93:97:b6:c6:5b:ad:f0:20:d6:0e:fa:
db:68:c1:87:83:a0:fd:be:10:d0:d5:b7:2a:a8:6e:4a:1c:80:
18:33:2d:23:40:90:08:66:0f:89:c3:cb:0c:8c:d6:17:d1:7b:
0a:b3:71:90:ec:ec:81:49:48:da:b4:57:93:e4:df:6a:89:9e:
98:af:b5:e4:fe:02:be:b7:ea:25:c0:29:c7:d9:d0:e5:51:24:
c1:7e:49:bf:e9:f8:d4:21:0b:8b:1d:94:72:f4:b5:d0:dd:0f:
64:34:3c:c9:b1:cc:9a:8a:5a:5b:36:c9:bd:51:8f:91:b1:a2:
6c:28:ab:ef:a7:5a:88:71:a6:b7:cd:89:fb:1a:a5:e3:08:79:
86:a9:3f:85:dd:59:24:e5:b0:4d:f8:a9:8a:d3:fd:19:99:5c:
49:ad:62:11:17:04:c7:f4:ff:a9:4b:75:91:d9:04:4f:fe:28:
1c:65:70:31:56:f5:2d:d5:b7:49:d9:6f:32:fc:ce:18:43:82:
a0:96:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:40 2026 by rpki-client