Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: BZoqeVRPrkPrqJFVxWfw8iJjWtZ5sImsCV8IVnVEo/A=
Subject key identifier: CE:FD:B3:6F:6B:29:E3:A7:98:B9:72:21:5B:C8:77:14:DC:EB:54:E6
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019E205AD60DA97DEF4D0D13F3C1EB495E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 04FD
Signing time: Wed 13 May 2026 08:01:24 +0000
Manifest this update: Wed 13 May 2026 08:01:24 +0000
Manifest next update: Thu 14 May 2026 08:01:24 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: kFS2SjREpUPSphXYoWiMCuUEdFntrOtgWwu3Hz1Hy1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:d6:0d:a9:7d:ef:4d:0d:13:f3:c1:eb:49:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: May 13 08:01:24 2026 GMT
Not After : May 14 08:01:24 2026 GMT
Subject: CN=cefdb36f6b29e3a798b972215bc87714dceb54e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:eb:5e:4c:eb:c7:ca:c1:21:23:c4:f3:6c:
e4:7c:46:33:fb:04:cf:de:61:50:97:09:94:ca:e8:
98:ee:0a:3c:fe:13:9b:07:f8:26:c9:60:fb:ec:c3:
87:7e:08:80:11:75:f6:94:a5:5c:d8:ef:73:6a:6c:
18:7d:79:a2:2c:b2:d5:dc:f2:5a:e9:12:b9:48:d8:
0a:86:57:0c:62:ac:c5:85:a8:d6:53:7e:5d:44:c1:
76:24:9b:5b:59:2f:27:29:09:51:8c:8c:fe:15:9a:
0d:ea:ba:41:01:2f:60:3c:3a:56:be:e5:f9:2e:f4:
e0:82:87:af:fa:df:ae:90:30:4f:c1:c5:9f:22:cd:
7f:2e:12:17:b7:a4:1a:78:ee:93:19:1e:2f:46:06:
14:85:dd:ea:20:b2:ad:48:39:50:f7:f5:8b:33:c6:
45:32:3c:ff:a6:0d:37:58:9b:84:1c:13:4f:f6:86:
28:32:8a:59:b8:c0:18:ba:2b:d4:f6:dc:72:5c:8e:
24:74:37:fd:f7:99:02:ce:a3:b1:2a:b5:80:77:24:
bf:35:77:5f:9c:7a:11:da:7e:3a:36:d4:9a:e3:a6:
f7:57:d6:09:a9:27:62:73:4f:d7:39:db:a5:e9:0a:
10:d2:f9:31:6e:d1:28:b2:86:c9:2c:f8:03:d7:dd:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:B3:6F:6B:29:E3:A7:98:B9:72:21:5B:C8:77:14:DC:EB:54:E6
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5c:9b:7a:d4:dc:33:c8:47:46:f9:b5:de:98:60:f0:a9:b2:
c1:5f:4f:fe:b9:72:05:8f:d6:4f:95:bb:89:bc:33:b6:b2:60:
68:79:53:d1:4d:92:b7:04:07:3a:3d:26:ab:fe:68:eb:2d:5e:
d1:1a:a4:ef:3e:34:11:60:e5:94:81:37:94:86:a0:0e:79:c1:
86:07:ea:78:65:10:63:b1:43:6c:69:3f:51:56:a2:79:18:26:
ec:b0:1e:9b:24:7e:26:24:c9:28:f5:1e:95:bd:77:56:2c:d6:
b9:e6:96:85:5f:53:73:e9:a0:d0:61:05:d8:79:95:9a:a7:aa:
42:e3:26:1b:9d:bb:66:59:f7:31:fc:46:92:9e:cb:f4:54:95:
13:7e:66:2b:59:45:e3:fa:bf:21:69:69:bf:76:e7:80:e2:40:
01:02:c5:1c:51:a4:68:67:28:56:1a:32:84:98:45:25:dd:78:
5a:83:fa:4f:c4:4e:68:2f:85:10:37:7c:4e:5b:14:b2:6f:e9:
6f:b2:80:c6:ee:ab:2a:d2:8f:40:bf:b7:a3:d2:fb:f9:44:82:
61:37:85:5f:60:a3:15:ca:11:c6:32:a3:91:04:10:83:8b:a6:
a0:f7:ed:e1:75:40:4e:e4:1f:84:b2:a7:e9:73:87:fd:dd:b4:
69:80:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:59 2026 by rpki-client