Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: 5zxVUeXA8QWj1UVyySV2kPqXrDxGwmZiFaswpA+FgJ0=
Subject key identifier: 8F:36:AA:15:F9:42:68:5F:C8:48:2A:D0:E0:2B:E4:01:4A:38:DD:8E
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019E20FF88A19CB18E8700A5716947372571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0E17
Signing time: Wed 13 May 2026 11:01:17 +0000
Manifest this update: Wed 13 May 2026 11:01:17 +0000
Manifest next update: Thu 14 May 2026 11:01:17 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: K7S2BUULd9GWeTvGWeEhK6qbWwLSwE+YLmz/524lkM4=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:88:a1:9c:b1:8e:87:00:a5:71:69:47:37:25:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: May 13 11:01:17 2026 GMT
Not After : May 14 11:01:17 2026 GMT
Subject: CN=8f36aa15f942685fc8482ad0e02be4014a38dd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:68:d4:47:92:18:3d:bf:b2:03:77:4d:b2:
6a:83:1a:5a:bb:41:80:59:5d:ab:fc:cd:5a:83:ce:
36:74:5d:a9:8c:62:9c:38:65:42:64:f8:a2:77:18:
a9:17:8a:5e:bc:7a:c5:7e:4b:ad:b3:d7:5e:b5:2b:
88:a9:6d:8d:26:bc:8d:c3:37:cb:b5:cc:5b:a1:d2:
0f:15:b3:92:79:ac:72:ff:d2:81:1e:75:b9:44:4e:
b0:55:d8:de:f7:d5:10:eb:95:1e:b5:44:6d:17:ce:
31:8b:cd:ce:33:8f:7b:be:66:dd:cf:31:55:9b:ce:
08:93:ee:b9:ff:7f:f8:ee:26:0b:1b:69:40:94:e2:
39:f3:b8:ea:d3:79:aa:6b:ee:f8:c0:5a:05:b2:2f:
a9:5a:ca:dd:d9:ce:64:38:4a:81:72:80:44:77:62:
b3:5a:f4:60:f2:60:c7:25:c3:39:35:29:60:79:e3:
de:90:0e:87:c7:87:de:df:df:42:51:2c:78:6f:df:
94:e7:f8:51:b1:8a:6f:4a:94:40:f3:87:32:7c:49:
fa:97:c4:f3:4d:29:64:0a:29:e5:b1:76:5c:10:6c:
6f:73:f5:ca:69:10:91:dc:77:4b:3f:fa:94:f9:96:
0d:aa:19:86:16:54:3c:fc:98:ca:04:ee:3e:3a:c8:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:AA:15:F9:42:68:5F:C8:48:2A:D0:E0:2B:E4:01:4A:38:DD:8E
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a9:fc:a4:24:e5:27:4c:d6:d6:a8:48:5a:65:b0:f8:b5:28:
d1:9a:b1:e1:a3:91:26:79:13:3f:8e:f7:66:80:92:c7:a9:83:
b2:0b:a0:87:5b:c0:37:f0:a4:02:31:d7:ec:fd:bb:a9:32:1a:
7f:9a:97:66:78:d0:03:87:bb:46:fb:30:62:7d:40:e9:03:86:
12:0a:6f:c9:80:c9:29:1e:bb:ab:91:10:c1:c5:a9:c7:bb:44:
75:fc:1c:31:14:b2:ce:d5:e2:d9:62:72:bb:07:10:32:4f:fb:
ed:b0:a0:19:63:f0:b8:6d:24:94:23:e5:b4:0a:eb:99:b1:63:
c9:81:b2:80:ef:a8:e4:f1:3f:7a:49:30:68:e1:c5:f8:0c:16:
55:52:e3:84:35:93:05:91:8f:1c:7b:bb:5d:f2:9c:69:73:ae:
c3:e3:04:e6:e7:39:01:f2:10:39:45:d6:3b:ac:da:9d:18:80:
e1:a5:d2:72:49:58:26:98:22:fc:a6:ae:d0:7e:50:ef:4d:30:
82:8b:42:76:91:6c:17:46:28:82:ef:83:63:d4:a6:0e:3f:d9:
bd:e6:eb:b6:40:6a:db:4e:a3:52:04:60:d4:6c:97:d9:49:d3:
c4:78:df:30:65:51:74:b4:b3:b4:e1:e3:3c:f8:68:5f:9d:ee:
86:2c:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:23 2026 by rpki-client