Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: rahVbJ3Vi+TS1BjtW1fSUmt7Sx+DPqqx+uNVyAzvqTY=
Subject key identifier: D9:7D:53:D2:BF:49:D9:A7:A5:AD:C4:B9:AA:91:D4:F6:79:AD:65:46
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019D2929B1897A97476449D43491F5834098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 047D
Signing time: Thu 26 Mar 2026 08:01:31 +0000
Manifest this update: Thu 26 Mar 2026 08:01:31 +0000
Manifest next update: Fri 27 Mar 2026 08:01:31 +0000
Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: Ndj5BRnCEpcRCp/0cvgzILlWw8PFXj0eGQekYRCBGkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b1:89:7a:97:47:64:49:d4:34:91:f5:83:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Mar 26 08:01:31 2026 GMT
Not After : Mar 27 08:01:31 2026 GMT
Subject: CN=d97d53d2bf49d9a7a5adc4b9aa91d4f679ad6546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:74:0d:4f:68:89:75:c5:73:34:ef:58:70:
d2:f8:a1:ab:81:37:60:b2:b4:56:b7:78:b3:d6:f9:
15:e6:0c:3a:ff:f9:1a:75:59:59:cb:e4:fd:04:cb:
6f:02:c7:7b:1e:75:34:48:41:87:e1:c8:1b:a8:10:
f4:ef:35:5f:95:6e:cc:72:c8:da:58:05:8d:0f:14:
2d:37:f6:6b:31:a1:90:3e:88:a5:49:ad:db:af:1c:
c5:2c:59:9e:07:4c:e9:83:1a:f7:ce:80:7c:5c:9a:
6a:47:2a:b1:ca:b4:40:cb:90:dc:37:3c:c5:7d:34:
d1:32:da:4c:a3:a2:fb:49:e9:ce:02:7d:1a:88:a7:
81:b8:f5:a5:dc:ee:ec:8f:c4:ac:98:cf:fa:dd:51:
c5:1e:90:a2:3e:48:6b:24:b0:32:9e:5e:a1:b0:84:
56:a5:a0:85:8c:1e:45:ce:35:7f:3e:50:84:c1:26:
71:26:d9:6b:6f:ac:79:e8:74:d3:68:cf:08:48:d4:
4d:f1:9a:78:5d:09:9e:b8:4e:2c:23:79:b5:8a:d6:
fe:f6:ec:87:44:bf:cb:2c:46:01:69:f5:3f:a4:cb:
43:44:13:14:f7:71:ce:a9:2b:22:db:52:60:76:a0:
e3:15:85:7b:79:2a:b5:e4:99:7f:82:4d:24:cb:e2:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:53:D2:BF:49:D9:A7:A5:AD:C4:B9:AA:91:D4:F6:79:AD:65:46
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f9:ee:64:75:ef:e1:8b:20:3d:4e:87:b3:06:0f:77:0a:ad:
c0:65:3b:11:e3:01:b2:d4:f1:f2:eb:8f:1e:7d:72:6a:c3:06:
41:61:3f:eb:18:f4:13:af:09:24:8c:63:d2:6a:3d:f7:9e:52:
89:b0:6b:79:c5:42:a8:52:2e:c9:cb:27:a0:32:b5:5e:20:0b:
c7:e1:e7:e8:8b:8a:0f:3d:00:89:50:54:bf:98:a6:79:f1:f9:
68:69:7a:6f:5f:7d:c2:aa:20:ec:e8:98:16:c8:17:61:d1:3c:
de:94:c8:83:65:13:92:14:5b:af:4d:f9:e5:08:c4:e9:59:a6:
9c:ec:b3:d3:c9:a8:5f:2d:24:78:09:05:0b:af:f0:f6:65:6b:
08:e2:09:31:07:58:03:17:ae:d4:c6:3a:79:b4:cf:71:e6:1a:
2c:6a:b3:9c:72:2e:dc:e2:d5:5f:db:14:cd:e2:67:2b:09:85:
c2:06:67:62:96:22:f9:f8:00:20:8d:87:d3:bd:32:c6:a2:78:
a9:7b:7b:14:f2:67:b0:30:90:39:63:5b:d8:f7:e1:14:5d:7d:
6f:d6:fd:44:39:4b:8f:75:19:d5:eb:eb:54:c1:04:62:0b:33:
20:4d:25:23:a1:52:b2:be:fb:fe:fe:40:18:54:81:60:77:7c:
60:e8:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:57 2026 by rpki-client