Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: G8FyXbAgPgN62c4t/H7S4vi5Dy9j46YEKH1xALEoTA0=
Subject key identifier: 47:44:40:F7:FC:43:33:81:B7:66:27:76:18:FD:C1:54:CF:BC:21:A8
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019E1ED9FBCB9D2C60CC0BA604C3943DB15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 13F9
Signing time: Wed 13 May 2026 01:01:02 +0000
Manifest this update: Wed 13 May 2026 01:01:02 +0000
Manifest next update: Thu 14 May 2026 01:01:02 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: wsl3rdloO8p/SfqNNTGf/q5T3truUYLEmnP3PEOCNGU=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:fb:cb:9d:2c:60:cc:0b:a6:04:c3:94:3d:b1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: May 13 01:01:02 2026 GMT
Not After : May 14 01:01:02 2026 GMT
Subject: CN=474440f7fc433381b766277618fdc154cfbc21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:7e:e0:27:15:68:7b:63:2d:92:fc:42:05:
aa:2f:8b:8d:ee:2d:91:5e:67:2f:13:71:c8:94:25:
d4:28:8e:88:c1:6a:90:48:a3:55:af:cb:8b:e2:23:
f0:47:5c:9e:ab:d6:fe:3b:04:9d:7e:41:cc:a1:7e:
eb:7e:87:c5:26:1c:1a:75:3e:c4:77:e0:65:a6:e0:
84:bc:8c:16:26:56:cb:86:8e:ed:18:d3:1f:c4:63:
2e:37:58:11:d1:f5:c7:2f:14:4f:6d:4e:23:1e:dc:
c8:38:7c:35:8b:e3:a8:20:4f:78:36:d3:ad:d0:32:
8e:0b:42:31:22:57:6b:87:7b:77:30:97:61:15:8e:
08:dd:90:10:41:68:e4:b8:b9:99:38:a0:67:e3:e1:
41:df:dc:1f:3d:df:85:be:98:ea:20:23:03:2b:79:
21:8d:16:47:5d:46:4f:9f:9d:a9:8a:fd:f2:bd:39:
50:6f:37:a5:d2:89:bf:a5:45:e2:9c:ee:30:7d:5b:
09:25:dc:4b:65:7a:3f:e1:73:2c:7f:b4:c0:04:ee:
48:58:48:a0:48:72:23:0d:f3:99:d4:49:e8:bb:63:
c3:a5:0a:8d:c8:15:7c:48:f7:90:d3:39:07:64:96:
ef:ca:0c:98:30:f7:51:9e:ae:6f:b3:2d:8a:44:9e:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:40:F7:FC:43:33:81:B7:66:27:76:18:FD:C1:54:CF:BC:21:A8
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:3f:5b:87:32:86:a2:93:6f:35:f3:25:da:d1:84:45:fc:
ef:e9:e5:eb:13:7e:da:8f:8c:55:bd:4e:ad:f9:d2:a4:ce:aa:
87:e1:f5:fa:7c:af:a3:5b:29:0f:b2:62:19:ee:db:19:36:0a:
e4:14:d2:03:6d:06:5f:4b:76:74:e7:4a:63:e1:3d:d7:7b:10:
00:c7:93:ac:0a:11:b1:e5:b7:6c:fb:4d:8f:ba:ea:db:5f:65:
84:88:91:31:39:76:d1:21:20:ee:0a:a4:04:c2:db:ed:b2:8d:
c1:7a:8d:dd:f6:dc:26:e1:a8:50:36:21:fe:30:40:39:ce:65:
62:7a:4c:aa:a0:fa:3e:e8:32:c2:cc:cb:ad:3a:8f:78:d9:25:
94:c1:b3:9b:6e:50:09:e1:08:1b:6a:ce:0f:c1:2a:57:cc:4f:
97:f8:ef:5e:a9:e2:30:2d:79:5e:e7:3c:f3:9a:d7:a6:ba:44:
ad:84:3d:17:63:a6:22:fa:4f:5e:21:d5:92:05:fe:fc:0a:33:
bd:36:20:c9:0a:30:e8:c6:40:6c:92:3d:3b:b0:a0:33:0b:67:
61:90:b2:d0:3d:95:2a:6e:41:ad:bc:2c:ef:d3:09:22:e7:a5:
2b:eb:b5:50:35:1b:7b:b6:77:0c:04:42:9f:01:5d:9b:48:1b:
ef:27:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:16 2026 by rpki-client