Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: GcBa+EdLvw/4OOmim8ktRmnwuRGvqZRq/IjC5iFyT0o=
Subject key identifier: BC:44:AB:12:10:D0:08:E0:1F:72:BB:79:56:D4:38:62:60:CD:4E:82
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 01A1DB6FDA137B3046E35CB6DC9AE36D0794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 12A5
Signing time: Sat 14 Nov 2026 19:01:42 +0000
Manifest this update: Sat 14 Nov 2026 19:01:42 +0000
Manifest next update: Sun 15 Nov 2026 19:01:42 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: hXkNqJZ0ZYP9BKO0emj9WUjOfJSH3/7ihDYqPTO0FiI=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:da:13:7b:30:46:e3:5c:b6:dc:9a:e3:6d:07:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Nov 14 19:01:42 2026 GMT
Not After : Nov 15 19:01:42 2026 GMT
Subject: CN=bc44ab1210d008e01f72bb7956d4386260cd4e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:1a:f1:60:82:7e:3a:c1:e6:c7:65:66:d4:
bd:38:f3:82:2d:52:e7:a2:bf:2d:18:39:20:0b:4b:
27:b7:3f:f3:9c:c4:47:e6:10:73:f4:e6:37:02:58:
1a:1b:1d:0f:58:9e:ed:36:b1:72:5a:dd:2a:58:f0:
fc:52:5c:3a:97:f4:3e:00:46:9f:1e:7f:17:8f:86:
59:7b:0c:8a:2a:6a:a0:19:a3:0b:f9:24:7b:00:69:
d4:9d:61:b0:83:e3:8f:92:50:4b:ef:0c:b3:c4:bf:
2b:0f:7d:11:9e:00:eb:f5:e2:81:3c:53:be:b2:26:
44:b6:32:b3:b3:6e:92:eb:b5:b1:f2:a6:06:d8:0b:
a0:4a:93:88:19:3c:a8:45:b9:1c:21:39:02:a5:4f:
db:9a:72:ee:88:2d:3a:55:6d:b9:e3:3d:f8:66:12:
09:75:c1:0c:6a:7b:43:ef:d3:6c:d1:7b:ba:51:a1:
3c:be:a4:85:ba:42:a4:a4:85:e9:85:5c:a6:e6:8c:
fe:e2:4b:e6:5d:b1:b5:b0:9f:30:7c:ac:4b:53:9e:
81:09:7d:e0:33:f1:91:7f:24:68:5d:fb:52:65:cf:
d4:d6:00:c5:ce:fe:45:76:e5:e2:5d:17:d7:d8:4a:
65:53:24:01:ce:60:32:2f:de:54:10:dc:be:7c:db:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:AB:12:10:D0:08:E0:1F:72:BB:79:56:D4:38:62:60:CD:4E:82
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:5c:0c:6b:2f:c4:59:6f:f5:70:ea:ae:1b:89:b8:67:9c:
87:7b:bf:dc:dd:3e:23:a9:0b:5f:f2:0d:58:77:1c:28:28:eb:
64:90:f7:9e:f6:51:39:8b:60:15:8e:ef:d9:a5:66:00:fd:b3:
2f:64:71:b4:64:1f:97:7e:87:11:d2:86:e5:16:35:17:8c:cd:
e4:cd:f9:ab:85:20:e0:02:c0:c1:93:29:c7:d2:b9:54:77:0e:
f3:04:56:89:cf:4f:4b:4a:dd:80:26:24:28:ed:a4:55:f6:e2:
24:6b:2c:be:fd:74:3f:d0:7c:a7:e7:07:1c:8f:be:c5:85:67:
8e:a0:fa:74:13:1e:28:58:58:a9:2a:7d:f4:1c:5f:fe:d1:47:
b0:dc:b7:9a:71:7b:fa:69:65:d1:27:2b:db:90:77:ea:79:93:
8e:05:3f:12:41:ca:57:60:57:3c:f0:63:36:38:0b:da:be:d6:
e5:78:98:b5:40:b7:8d:91:e7:2c:5c:87:4b:80:3a:f5:60:ed:
4d:c5:ec:40:2a:26:be:a2:18:c9:54:92:e0:d3:61:47:76:9c:
8c:cd:f0:9f:75:82:97:60:9a:b7:d9:74:30:86:ff:27:59:0d:
14:45:10:02:8d:8a:a9:ad:af:c7:6a:6f:14:df:5b:50:2e:11:
2d:01:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:58:03 2026 by rpki-client