Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: XJypunhnwjVrjgcHbxjUNrg05q5x8LaL/5JOv29nuHY=
Subject key identifier: F9:0E:63:20:15:BD:D4:7C:CE:83:2D:12:63:10:D2:3A:92:31:63:81
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 01A0E13D2F93C627B9D32C47888699073EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 1102
Signing time: Sun 27 Sep 2026 05:01:18 +0000
Manifest this update: Sun 27 Sep 2026 05:01:18 +0000
Manifest next update: Mon 28 Sep 2026 05:01:18 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: Lm7ylqmFrRKd6UiZohZMEfNDagKbCz2RPfPNGEBW7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:2f:93:c6:27:b9:d3:2c:47:88:86:99:07:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Sep 27 05:01:18 2026 GMT
Not After : Sep 28 05:01:18 2026 GMT
Subject: CN=f90e632015bdd47cce832d126310d23a92316381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:94:27:98:d7:d7:a0:f8:b4:c8:bc:c3:1c:
40:fa:de:b3:57:7e:70:96:8d:c9:68:95:64:4a:f4:
65:02:f6:21:90:0c:39:6f:50:a1:11:b7:f5:bf:81:
50:ab:8d:1b:20:b0:82:ae:89:85:ff:a7:7f:c4:bf:
a6:b9:ca:36:7d:f4:b8:6c:6f:ab:48:72:a6:01:4d:
ad:cf:2b:28:e9:1e:03:5a:20:9f:6b:bc:f8:c3:ef:
ca:b8:6e:64:0d:5c:f3:93:b2:a9:29:95:64:aa:ec:
43:0d:1d:55:c5:6c:b2:fc:ae:d1:88:f9:7d:64:f7:
63:76:b5:ad:b4:0b:8f:21:12:c9:6c:c5:0d:8b:26:
07:ac:98:ba:d8:20:40:90:49:1d:9c:97:b0:55:7f:
5b:0e:d0:cb:31:84:e3:5d:cb:6d:cf:42:05:10:4d:
ee:78:c6:d2:d7:cc:2f:cb:1a:d1:ea:87:b6:03:0a:
73:e9:51:f3:7f:eb:c1:ca:99:b5:2b:f2:86:df:fa:
c6:d2:a3:6b:dc:ae:ce:7a:1a:8c:4c:94:47:c9:cf:
fb:ba:fe:a2:0e:8a:5e:81:12:1d:97:d1:f6:c1:63:
90:01:99:22:b7:b8:c8:e2:a2:5e:79:66:0f:3a:11:
df:2a:a7:48:eb:dc:9f:6a:3d:9e:c5:b4:02:10:dd:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:63:20:15:BD:D4:7C:CE:83:2D:12:63:10:D2:3A:92:31:63:81
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:ba:b4:52:fc:a7:33:bb:31:88:0a:3f:c1:79:eb:3b:17:
35:a4:75:98:c9:e4:35:56:97:62:07:7e:ae:9d:b5:9a:a5:7a:
aa:26:7c:31:d6:62:46:9e:9d:43:c5:c3:7b:96:36:09:a9:af:
5a:93:4d:20:4d:72:0e:63:ca:98:d3:b9:fe:9e:7f:15:bc:f7:
2f:4c:7b:65:94:41:22:f6:73:07:5d:1e:c4:ec:06:db:00:d4:
4f:86:4a:18:40:c2:64:8b:e0:80:0a:da:7a:18:0b:88:31:91:
4c:9b:ed:f8:20:37:b0:ab:21:57:7f:30:f3:f6:e4:c6:74:46:
9e:64:e4:df:7b:0e:57:b3:78:d5:78:88:2d:57:46:87:82:7a:
de:6e:f2:82:60:c4:d2:c9:57:11:97:13:91:d0:d6:91:50:38:
55:73:f5:9e:6a:ff:c3:31:cb:5f:97:fb:5e:fc:71:74:1a:1c:
ec:17:33:d1:60:02:90:a6:44:01:65:c3:f7:7b:78:d6:45:79:
d0:37:4b:f3:14:0c:db:50:a8:be:13:40:ff:79:71:e7:e6:17:
a9:ea:47:75:7e:0e:31:f4:c9:75:f6:dc:90:37:d5:3f:1e:df:
bd:d3:7d:70:1e:0c:85:0e:92:a8:ba:44:60:b9:4a:a3:6b:39:
2e:19:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:40 2026 by rpki-client