
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: YBbOYPFEY/MVDzPZjy+nDmHK5ck7RJ1xdasS3blLYFQ=
Subject key identifier: 3E:2F:12:AB:89:98:87:CE:52:8D:D7:11:9D:0E:96:43:71:97:FF:05
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019E20924747FE339D9306EB67C6A1C6CD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0DEB
Signing time: Wed 13 May 2026 09:01:57 +0000
Manifest this update: Wed 13 May 2026 09:01:57 +0000
Manifest next update: Thu 14 May 2026 09:01:57 +0000
Files and hashes: 1: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (hash: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM=)
2: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: c0tg3JGYqzSaTZshDkcSvDmuwJJ5qE8Ybzcd29ViWVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:47:47:fe:33:9d:93:06:eb:67:c6:a1:c6:cd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: May 13 09:01:57 2026 GMT
Not After : May 14 09:01:57 2026 GMT
Subject: CN=3e2f12ab899887ce528dd7119d0e96437197ff05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:ae:c4:6a:b9:4d:17:88:f9:29:22:19:96:
dc:5c:84:43:a1:5f:45:f1:89:0e:c5:a8:86:b0:b0:
91:cc:ec:93:0c:8e:d1:55:15:1e:2d:56:ad:a8:c9:
97:70:32:30:7e:44:d2:33:d5:8f:26:9d:44:a9:10:
12:1e:8e:76:8e:3c:8a:4d:c4:89:82:57:a3:9b:2c:
84:85:e0:bc:47:be:28:91:20:87:af:73:12:a0:0a:
f1:c1:c2:6c:8a:4a:14:88:2f:e9:7b:87:50:7d:c0:
88:cf:b1:c1:cb:4b:fc:c8:fc:f3:78:dc:26:2c:c5:
b3:11:c0:fb:ae:de:8a:b8:d1:db:bd:9e:66:c6:5e:
5e:b0:71:73:be:8c:ce:e0:f3:2f:da:a2:f6:51:0b:
84:58:70:70:e7:1e:77:b8:7b:5a:6d:2c:16:28:6a:
30:2b:df:96:ab:89:d1:48:2c:e8:08:e5:35:89:65:
1e:25:45:ae:87:06:93:7a:d1:1f:cd:9c:a4:8b:72:
b0:a4:3f:e0:85:08:59:0c:9f:5a:d7:17:98:75:44:
e1:71:f5:56:c8:cf:2a:01:83:31:47:a2:54:8f:86:
af:83:16:9e:e3:d6:b0:e6:49:9b:7c:d2:19:d5:3e:
fd:3e:ad:a7:ad:2d:6d:8b:0d:6a:b7:21:b1:61:9d:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:12:AB:89:98:87:CE:52:8D:D7:11:9D:0E:96:43:71:97:FF:05
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:69:b4:22:24:91:61:92:e2:a0:30:b2:94:9b:e0:71:89:
6d:0b:d6:75:6a:fe:45:e6:c0:16:56:26:59:71:e2:ac:01:70:
20:17:3a:05:25:11:1a:3a:2a:3f:33:07:30:0a:97:94:ff:70:
6d:a7:8c:9f:e7:34:5a:cb:b0:de:1f:6d:a8:7e:f4:97:2e:1d:
eb:93:55:31:92:c5:62:e3:44:03:69:b5:bd:ff:f1:c3:43:12:
21:09:c9:a4:52:44:08:13:78:15:39:bb:47:0b:90:b1:47:73:
55:3a:ee:bf:11:25:63:c4:22:78:7c:60:e0:1b:94:59:6f:8b:
94:e3:b1:f8:ee:36:6b:ed:12:85:c5:f3:16:14:d1:1d:36:97:
ec:1c:98:ba:b3:72:7f:08:49:a0:21:79:23:cc:eb:c3:7d:5d:
2f:9d:94:9c:89:91:0a:65:40:e2:44:8b:b0:f5:77:b6:63:f1:
c1:f9:5f:3b:eb:d3:fc:c6:ec:f9:d7:c4:9e:25:fa:85:29:01:
ca:73:b3:da:37:86:f6:c6:52:0d:71:9a:88:6d:9a:80:a3:f1:
3f:cc:fd:55:5c:fd:81:de:37:f3:2a:a5:1b:85:66:f3:29:27:
20:96:65:11:be:51:9f:e9:9a:51:6e:8e:38:0e:eb:42:e9:37:
1d:c6:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:22 2026 by rpki-client