Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: CuXxxbfoV70MU8v74h8YgjNUSaaw122/zysHAZ8G6Ws=
Subject key identifier: 38:AA:00:F6:03:4C:A6:B4:4E:9E:FE:ED:A4:E3:63:DE:75:2C:DE:7B
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019E1ED9C54A585063F1D63257B724B89CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1249
Signing time: Wed 13 May 2026 01:00:48 +0000
Manifest this update: Wed 13 May 2026 01:00:48 +0000
Manifest next update: Thu 14 May 2026 01:00:48 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: l5ixSO2nhnzjZvAMq76eQDDsG/8MhcR5ocz2fyp0k54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c5:4a:58:50:63:f1:d6:32:57:b7:24:b8:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: May 13 01:00:48 2026 GMT
Not After : May 14 01:00:48 2026 GMT
Subject: CN=38aa00f6034ca6b44e9efeeda4e363de752cde7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:53:c7:44:e1:2a:e7:4d:ec:9e:f5:9e:a4:
20:2c:b6:62:27:8e:93:e5:2e:ac:82:41:b5:f5:5f:
f0:6e:d8:94:2f:fa:d9:37:6d:79:ed:0f:39:0d:e9:
23:a2:53:fe:31:a2:15:9a:aa:79:e8:74:39:81:3e:
66:42:e0:70:65:15:b6:d3:c2:26:44:1b:13:d6:3f:
27:e2:1c:05:30:5a:14:ca:f5:d3:87:6f:bb:ec:9b:
5d:73:82:59:f3:0c:f1:9e:be:82:bb:7b:18:9d:9d:
ea:92:20:5c:dd:cd:e7:e1:c5:92:99:58:f2:1c:f8:
f8:79:58:bf:b0:7a:60:86:58:e7:96:92:11:92:5c:
29:b7:71:9b:a9:14:18:33:2e:ad:63:ef:f3:c6:ed:
22:be:f5:b0:95:01:c2:de:8f:67:35:11:76:22:4b:
33:89:4c:f4:de:ab:96:d9:3e:3b:58:24:3e:a2:b7:
30:2e:e6:fd:f5:23:c2:6b:62:26:83:3f:26:e2:3e:
1e:5b:2a:47:cc:d6:fd:87:58:1f:17:21:62:3a:5d:
32:bf:06:b4:c0:43:fe:6b:fb:90:30:e8:d3:9d:20:
9b:a1:33:7e:fc:dd:ea:b0:4f:5b:d5:6c:54:26:8c:
f4:92:87:79:ff:9a:c0:7f:eb:7b:63:fc:6c:74:00:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:00:F6:03:4C:A6:B4:4E:9E:FE:ED:A4:E3:63:DE:75:2C:DE:7B
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:77:88:db:43:30:f4:a7:d0:61:d5:ac:c2:ee:61:b4:ac:6f:
bd:3b:7b:ea:22:01:0a:1d:87:dc:8d:f5:b8:f5:82:c2:01:ae:
86:48:29:1f:9e:9d:2d:cc:f2:d3:34:80:9a:2e:21:0d:cc:97:
31:d2:d7:e9:bb:1b:c3:1a:f5:0b:a6:81:62:37:43:b6:ff:08:
1c:b4:88:6b:70:f8:d5:84:b3:77:cd:dd:79:43:f2:2e:6f:ee:
25:46:e0:92:96:f8:d8:eb:90:7b:79:fe:dd:2b:69:d0:cf:8a:
8b:ed:a6:ee:23:5b:82:02:85:8f:8f:9a:0a:61:b6:bf:05:b0:
e0:3b:3c:ca:c5:2e:00:2e:48:c7:49:65:26:b9:02:b4:e3:cd:
50:0a:84:b3:51:29:3c:f5:ee:95:3a:e7:d2:30:9b:87:b8:35:
70:8a:0a:75:a7:7c:36:6b:04:2e:81:e7:7f:5a:91:ef:55:2d:
58:16:3d:e6:a8:10:6d:73:83:5d:e5:25:14:c8:4c:da:ba:cb:
cf:99:1d:2e:4d:c0:f3:92:db:55:81:66:bc:9a:01:e5:f4:f1:
b0:41:e7:f6:b9:d1:a8:19:ef:7f:57:62:95:35:70:fc:bd:6f:
8b:af:99:b3:ef:70:d1:05:db:21:63:09:98:4e:8a:35:f7:70:
e3:16:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:28 2026 by rpki-client