Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: six5MsDDvr6x/4CSPGHgCPYH6c2kPotWv5gCGSQx5ts=
Subject key identifier: 1E:F8:F9:03:26:7C:EA:55:FE:64:9E:6C:68:F6:26:B3:97:1E:63:CB
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019E1F7F36012899BB2783BA990B6AE0D656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 07DD
Signing time: Wed 13 May 2026 04:01:31 +0000
Manifest this update: Wed 13 May 2026 04:01:31 +0000
Manifest next update: Thu 14 May 2026 04:01:31 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: qrVXpoWWs9BJVExOAs0VuV0bonoVwwZxTT+dFfL5jbY=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:36:01:28:99:bb:27:83:ba:99:0b:6a:e0:d6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: May 13 04:01:31 2026 GMT
Not After : May 14 04:01:31 2026 GMT
Subject: CN=1ef8f903267cea55fe649e6c68f626b3971e63cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:5b:a7:bb:e8:c1:10:92:5f:90:e7:22:90:
c3:f4:41:70:90:a2:85:d4:cf:40:93:bc:8b:a1:d3:
df:53:17:36:f0:7c:3d:c6:30:57:db:bd:b4:b4:48:
de:bb:90:65:14:16:0c:99:67:d7:50:0f:3c:63:8d:
ba:c8:c8:b2:49:86:38:94:eb:a1:45:aa:dd:7e:43:
8a:25:d7:78:4b:04:15:ac:b9:30:d2:46:c4:00:e2:
89:52:2d:42:c9:9c:c6:81:e0:a1:89:49:c9:22:d8:
2f:55:00:46:38:c5:97:b8:15:9f:2a:e3:1c:6c:71:
e7:a0:1c:70:6d:77:19:88:7c:c3:6f:ee:fa:f1:07:
60:1f:d5:6d:46:aa:56:60:9c:4d:8a:60:b0:9b:a0:
1d:54:53:ac:d0:8f:ee:85:5e:60:47:c9:12:4d:08:
50:9d:f4:99:46:32:ed:1c:23:4f:57:26:a4:26:51:
22:0c:2b:fc:c6:1a:a3:ce:59:b4:03:8f:63:57:8c:
c6:a3:8b:7f:a1:49:fc:d2:34:4f:1f:ac:61:08:ef:
9a:4a:4a:1e:12:23:9e:91:2a:9e:3c:e0:50:1b:2d:
5d:73:09:f7:01:c8:c3:48:b2:a5:36:85:d4:71:29:
c9:d9:f9:2c:81:f9:0a:b7:95:af:c3:e2:9a:4b:a8:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:F9:03:26:7C:EA:55:FE:64:9E:6C:68:F6:26:B3:97:1E:63:CB
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:98:18:bf:98:5d:3c:db:ac:f6:4e:e5:88:4b:ee:1d:52:
38:95:f2:f6:81:f9:fd:1d:29:b4:33:f7:7b:38:e0:5c:41:74:
0f:08:1a:f1:67:b1:e3:72:79:f7:53:18:be:26:be:71:66:d6:
03:f9:6a:75:2e:5c:de:ba:ac:ad:ff:ab:d5:d5:7f:7c:e3:8d:
5e:27:61:bc:9a:40:d0:e7:e1:f4:5d:1b:fa:63:68:f9:e6:40:
53:f1:61:ee:d0:d0:b2:bd:4f:7b:a3:3e:b5:ea:0c:61:50:86:
11:3e:77:39:4f:c0:9e:fd:16:ac:7e:f4:6d:d4:3c:3a:62:cc:
5f:e3:56:12:6b:52:97:ce:24:87:55:29:10:d3:f4:f7:e1:72:
6d:e6:e5:13:86:3f:0e:e5:3a:e4:c4:00:3f:0f:4e:58:71:4f:
b1:ec:10:ca:27:a7:0f:97:0c:42:6c:7d:dc:d8:91:63:9e:28:
99:0b:cd:e4:64:8d:24:d0:c6:ee:c1:75:7c:60:1d:02:f3:7d:
99:3f:59:4c:90:4a:c6:2e:e6:ad:85:35:14:de:9d:c1:c0:60:
c3:4b:fb:98:f8:2b:cc:28:2f:a7:34:fa:f9:fb:b5:12:34:f1:
f9:cb:1a:a1:47:25:19:5c:36:95:30:18:da:3a:70:a5:f2:2d:
2e:b0:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:10 2026 by rpki-client