Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: a37lfefj3K2WqkgvYYnQYySe7jF3XDdC3msz6p02MnM=
Subject key identifier: C2:26:D0:42:20:7B:AB:17:74:4A:A7:0C:88:48:A6:7B:1D:30:89:7B
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019E205A9AB17A3C4203A5E1692858571ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0449
Signing time: Wed 13 May 2026 08:01:09 +0000
Manifest this update: Wed 13 May 2026 08:01:09 +0000
Manifest next update: Thu 14 May 2026 08:01:09 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: LNLkl2FEF9FhqkgmMIU87SAqHe6ooSG/3xoJnoy1AxU=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:9a:b1:7a:3c:42:03:a5:e1:69:28:58:57:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: May 13 08:01:09 2026 GMT
Not After : May 14 08:01:09 2026 GMT
Subject: CN=c226d042207bab17744aa70c8848a67b1d30897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:e1:8e:45:e9:98:d9:26:4d:ef:2d:80:0b:
b6:de:13:17:1f:4d:30:e6:b9:28:25:f4:ff:c7:28:
61:8d:57:00:94:eb:c4:31:25:dd:91:7a:00:c5:ed:
a4:1e:77:7d:32:dc:22:ba:fa:8c:9e:ab:eb:c1:ef:
9f:c5:04:3a:41:5e:77:20:7b:dc:7c:94:05:16:e6:
04:6e:ab:cf:21:b3:49:fb:6c:10:fe:03:6a:0c:5d:
62:ac:82:1a:66:45:a1:35:2d:72:3f:8f:fc:82:a6:
7f:15:1b:65:11:80:9b:da:0a:30:ad:77:14:61:0a:
78:2d:11:65:8b:1b:37:69:e0:62:32:51:5e:76:0d:
10:cd:20:a0:6c:5c:f1:4a:8e:47:9c:41:c6:e9:d8:
d3:3d:b1:8a:10:b8:86:0f:b9:05:98:5a:80:36:d5:
e7:00:6d:be:7c:24:2e:7d:09:6b:c0:77:8a:b9:4d:
a1:41:c5:9a:85:f8:91:cc:d2:0e:62:2c:37:9d:45:
75:8b:55:ae:32:a2:cd:88:77:ae:ed:17:f2:22:f7:
b6:8d:c7:ab:a3:07:b2:6b:cf:a8:b6:45:48:b6:f1:
7e:9c:e7:50:56:d3:f9:b2:78:3c:a2:a1:b3:cf:6a:
33:3f:d5:fb:ff:80:2e:cc:45:16:fd:c9:4a:4e:ad:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:D0:42:20:7B:AB:17:74:4A:A7:0C:88:48:A6:7B:1D:30:89:7B
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:2e:b7:10:0d:d7:59:ff:70:57:c6:58:d5:43:05:94:3e:
4a:c3:11:ca:7c:ec:f1:bc:18:24:ac:cb:e6:13:f5:e7:64:af:
9e:e1:e9:3f:e9:3a:bb:b8:f6:8c:06:bd:d6:ac:3f:4f:91:94:
72:36:15:f8:24:37:5e:98:a1:24:88:63:7b:ab:e6:fe:73:e8:
81:d1:52:1b:3e:c4:78:00:7e:4f:40:6d:fe:70:e0:c6:d3:a9:
dc:ea:4c:3d:59:19:35:29:82:2e:50:14:7c:66:5e:6c:81:fc:
19:5b:e4:cf:52:0e:5a:1f:7d:9d:e0:a4:30:79:8c:88:2b:f8:
75:48:e8:97:91:21:eb:b6:9f:c9:dc:41:03:e6:98:3b:38:72:
93:41:f1:19:4d:d5:6b:94:50:4e:0c:81:cb:b2:39:64:37:ee:
7e:b7:c7:90:66:a7:6a:01:bf:17:49:d8:ea:cf:96:dd:c6:e2:
20:f8:6f:3d:37:bb:13:49:01:2f:23:f5:46:71:07:20:d9:b9:
46:05:cc:f8:6f:91:ad:59:a9:22:85:b6:b5:b0:6e:51:04:3c:
00:3a:0d:4f:a1:3c:15:7d:e5:03:ce:aa:43:82:21:14:0e:88:
bf:13:e5:04:21:00:3b:5d:02:10:73:b2:72:a7:15:c3:f4:01:
80:a1:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:01 2026 by rpki-client