Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: spD/eJm1JqQVGaYbEcppTMp9VE40zp+PR8O5oK/qoE8=
Subject key identifier: 67:90:0A:59:67:95:37:52:BB:77:D5:38:8A:42:87:46:78:A5:33:65
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019D2929B14B4EABFD1AA0ECE0DABAD813BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0F15
Signing time: Thu 26 Mar 2026 08:01:31 +0000
Manifest this update: Thu 26 Mar 2026 08:01:31 +0000
Manifest next update: Fri 27 Mar 2026 08:01:31 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: pK5ve/7UAGbuL8Ly49bT8vDFqkCPHM+f6wwm5RDYmz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b1:4b:4e:ab:fd:1a:a0:ec:e0:da:ba:d8:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Mar 26 08:01:31 2026 GMT
Not After : Mar 27 08:01:31 2026 GMT
Subject: CN=67900a5967953752bb77d5388a42874678a53365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:78:7b:64:6b:1d:d3:1d:be:6a:35:52:b3:
49:c7:19:0b:be:06:97:d1:91:87:96:fc:19:ea:02:
2b:fe:92:e5:ce:6e:28:71:2c:3f:03:17:27:c5:e8:
2f:57:7e:20:5a:cc:77:66:55:ec:be:9a:7f:49:b6:
ec:8d:fe:a4:d5:3c:e4:a4:5d:af:5e:9c:06:df:f8:
51:c7:e0:e0:62:d2:5b:e6:c7:d1:7d:eb:95:b0:17:
68:77:5a:4e:a6:f6:cc:4f:80:b1:b4:c1:02:52:3f:
71:7a:bf:74:65:34:51:04:a2:f1:e1:d3:fd:6c:94:
be:06:83:17:3c:13:4e:50:94:b0:51:67:7c:d1:0a:
4c:be:ee:8b:e0:0e:74:cc:cf:72:c8:8b:be:99:e7:
4b:cc:59:18:d6:0a:63:fe:2d:d3:2e:d4:81:21:88:
e1:39:77:6d:60:ee:71:73:63:66:35:0c:4d:dd:a7:
02:ce:58:1b:8d:23:d6:00:99:de:93:8b:4c:d1:07:
29:3f:f4:ca:21:f0:11:b7:36:a1:32:3a:59:ec:65:
e9:73:8c:ce:fc:a4:bb:ab:f8:47:32:82:18:c6:46:
ca:cd:11:67:63:0d:17:df:9f:53:54:ef:1e:f0:88:
ae:c2:82:86:83:bb:66:66:a4:83:5d:9c:61:0c:87:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:0A:59:67:95:37:52:BB:77:D5:38:8A:42:87:46:78:A5:33:65
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:22:99:a5:d4:46:8c:69:3f:ff:36:8f:37:12:60:30:a2:
4f:29:e7:84:86:f3:c7:51:e3:0c:ad:88:70:ea:f1:49:d6:2d:
83:09:85:a7:c4:5b:e3:9e:20:47:2d:35:4d:9f:a0:78:7f:49:
53:e2:46:52:86:76:4f:41:a9:5b:04:51:90:73:df:7d:89:11:
7d:43:7a:74:01:30:c7:bd:6b:37:49:7a:e2:7a:ff:9d:f0:02:
64:22:66:96:f3:c2:0a:da:84:2f:f0:a4:f8:d4:55:74:c8:29:
d6:f0:b2:aa:3c:ec:49:ac:34:5b:1f:dc:37:bc:da:0c:48:dc:
a4:10:29:dd:d7:f5:16:66:c7:58:0e:dd:11:90:e5:7f:3a:bc:
a7:55:0c:93:1b:c4:76:4b:db:ba:3d:ec:45:33:a3:15:28:02:
eb:e0:d5:62:4d:d9:af:e2:94:de:be:a9:6e:b7:05:2d:7c:3d:
dd:46:ed:61:34:86:60:19:ce:36:63:07:20:ca:03:00:b4:6f:
eb:2f:f1:01:f5:c8:9c:13:76:e8:81:85:78:39:38:15:b1:27:
b0:5f:ef:dc:21:f7:1b:91:55:ed:c5:92:7e:c8:10:cc:f9:5d:
01:ae:24:14:4c:c6:39:56:ae:1d:65:c2:bf:86:6a:7a:3a:6c:
da:fa:64:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKbFLTqv9GqDs4Nq62BO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGJkNjQ5MDczNjQ2YzFmNGMzYjAxY2FjYWE3MmUyMDll
OWRhZmYwHhcNMjYwMzI2MDgwMTMxWhcNMjYwMzI3MDgwMTMxWjAzMTEwLwYDVQQD
Eyg2NzkwMGE1OTY3OTUzNzUyYmI3N2Q1Mzg4YTQyODc0Njc4YTUzMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWR4e2RrHdMdvmo1UrNJxxkLvgaX
0ZGHlvwZ6gIr/pLlzm4ocSw/AxcnxegvV34gWsx3ZlXsvpp/Sbbsjf6k1TzkpF2v
XpwG3/hRx+DgYtJb5sfRfeuVsBdod1pOpvbMT4CxtMECUj9xer90ZTRRBKLx4dP9
bJS+BoMXPBNOUJSwUWd80QpMvu6L4A50zM9yyIu+medLzFkY1gpj/i3TLtSBIYjh
OXdtYO5xc2NmNQxN3acCzlgbjSPWAJnek4tM0QcpP/TKIfARtzahMjpZ7GXpc4zO
/KS7q/hHMoIYxkbKzRFnYw0X359TVO8e8IiuwoKGg7tmZqSDXZxhDIfE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeQCllnlTdSu3fVOIpCh0Z4pTNlMB8GA1UdIwQY
MBaAFGeL1kkHNkbB9MOwHKyqcuIJ6dr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2Ut
ZWQ3OGNiNzY2NjFjLzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2UtZWQ3OGNiNzY2NjFj
LzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzoimaXU
RoxpP/82jzcSYDCiTynnhIbzx1HjDK2IcOrxSdYtgwmFp8Rb454gRy01TZ+geH9J
U+JGUoZ2T0GpWwRRkHPffYkRfUN6dAEwx71rN0l64nr/nfACZCJmlvPCCtqEL/Ck
+NRVdMgp1vCyqjzsSaw0Wx/cN7zaDEjcpBAp3df1FmbHWA7dEZDlfzq8p1UMkxvE
dkvbuj3sRTOjFSgC6+DVYk3Zr+KU3r6pbrcFLXw93UbtYTSGYBnONmMHIMoDALRv
6y/xAfXInBN26IGFeDk4FbEnsF/v3CH3G5FV7cWSfsgQzPldAa4kFEzGOVauHWXC
v4Zqejps2vpk4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:51 2026 by rpki-client