Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: DMOXL2oCTViEewthNg4MMq9c3QifvYMZiFPGY7DpmBg=
Subject key identifier: C3:D7:5F:2F:C3:7B:AE:BC:DF:BF:D6:49:F7:BF:7E:17:F9:EA:27:A5
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 01A06D5DF280CB0958FCCCC58131A7DDEB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 057A
Signing time: Fri 04 Sep 2026 17:01:08 +0000
Manifest this update: Fri 04 Sep 2026 17:01:08 +0000
Manifest next update: Sat 05 Sep 2026 17:01:08 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: 3KP7SWGEKn9GkcAv7buMfBfNkmx7OI2jxZc2D2wHOlA=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:f2:80:cb:09:58:fc:cc:c5:81:31:a7:dd:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Sep 4 17:01:08 2026 GMT
Not After : Sep 5 17:01:08 2026 GMT
Subject: CN=c3d75f2fc37baebcdfbfd649f7bf7e17f9ea27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:da:10:e2:2e:12:0f:3f:cc:90:b9:f7:0e:
a4:2e:ef:bf:3d:4b:c7:cc:6a:fa:ef:0e:69:88:51:
e2:28:eb:d4:49:a4:4f:2c:30:10:3a:59:f4:f6:c2:
92:db:ac:44:c4:20:c6:6e:7d:0b:59:dc:d7:bd:7f:
23:8f:5b:b4:98:90:62:39:e0:be:3d:be:a0:66:29:
eb:51:5d:31:87:06:87:c4:df:91:99:5e:67:fc:2f:
b1:4f:1f:d4:f9:5f:68:00:49:32:98:ef:52:3c:2e:
9f:35:49:d2:15:ca:e5:db:8b:58:24:7b:3b:95:83:
86:fa:43:b5:69:ae:06:49:85:ba:61:34:35:3e:72:
7f:d4:3d:5d:f2:62:1c:71:91:75:00:e9:8c:3d:eb:
bd:fd:95:ce:e2:55:48:91:c2:a4:86:d5:96:d0:04:
45:a0:66:74:78:6f:a0:71:2b:80:4e:74:4c:3f:83:
25:7d:8a:55:27:aa:27:f9:d3:bc:fa:2f:36:ee:a9:
6d:34:d8:5d:16:e0:62:0e:c1:86:dc:71:69:a3:35:
0d:ef:4b:ea:02:61:01:33:fb:a6:0b:ae:4f:12:7e:
49:1c:25:ce:ad:9c:d0:ad:62:fe:2e:f8:cc:27:ca:
a3:28:7a:b7:e8:31:1b:1c:4c:a2:35:7e:f0:53:56:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:5F:2F:C3:7B:AE:BC:DF:BF:D6:49:F7:BF:7E:17:F9:EA:27:A5
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:42:22:e1:f4:4e:12:42:eb:cd:8e:78:d1:94:f6:d8:2b:18:
fc:5f:09:86:96:01:37:03:f2:ed:38:34:be:71:06:b6:2e:0a:
cb:45:ba:27:45:46:4e:75:13:5e:83:8c:19:e6:9b:b9:71:4c:
cd:4f:1c:59:47:6a:25:48:3f:ad:ec:c7:d9:48:d8:09:34:6c:
e2:e2:89:88:9a:db:b4:a4:27:2d:80:19:0a:52:dd:a0:57:b1:
8d:00:ba:20:65:d2:fd:97:43:44:78:59:66:87:1d:88:94:86:
96:b3:b4:b3:8a:81:4a:01:e8:05:ab:3c:00:71:35:a8:fb:03:
79:3f:b9:b4:5e:7b:90:b5:c0:7f:c3:e8:d9:fe:95:f9:0f:31:
61:aa:81:05:c3:1d:c5:bd:a5:a1:65:a0:90:3b:28:a1:91:31:
97:6e:9c:26:00:02:af:3b:1d:8c:3b:da:2c:29:17:07:82:13:
18:2e:a2:c8:54:3b:73:b1:2a:c4:69:f3:cb:ea:fd:52:a4:d5:
6d:f1:87:18:0b:23:57:38:32:70:89:6c:c6:9c:c3:8a:33:ea:
b5:e6:aa:1a:d6:de:72:d3:76:dd:5f:2d:70:5e:ed:d2:24:bc:
8c:1d:09:81:ec:0c:b8:dc:cf:fd:e9:b9:0b:9d:35:d5:06:38:
e8:d4:23:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXfKAywlY/MzFgTGn3esbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjYwOTA0MTcwMTA4WhcNMjYwOTA1MTcwMTA4WjAzMTEwLwYDVQQD
EyhjM2Q3NWYyZmMzN2JhZWJjZGZiZmQ2NDlmN2JmN2UxN2Y5ZWEyN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2knaEOIuEg8/zJC59w6kLu+/PUvH
zGr67w5piFHiKOvUSaRPLDAQOln09sKS26xExCDGbn0LWdzXvX8jj1u0mJBiOeC+
Pb6gZinrUV0xhwaHxN+RmV5n/C+xTx/U+V9oAEkymO9SPC6fNUnSFcrl24tYJHs7
lYOG+kO1aa4GSYW6YTQ1PnJ/1D1d8mIccZF1AOmMPeu9/ZXO4lVIkcKkhtWW0ARF
oGZ0eG+gcSuATnRMP4MlfYpVJ6on+dO8+i827qltNNhdFuBiDsGG3HFpozUN70vq
AmEBM/umC65PEn5JHCXOrZzQrWL+LvjMJ8qjKHq36DEbHEyiNX7wU1bI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPXXy/De66837/WSfe/fhf56ielMB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkIi4fRO
EkLrzY540ZT22CsY/F8JhpYBNwPy7Tg0vnEGti4Ky0W6J0VGTnUTXoOMGeabuXFM
zU8cWUdqJUg/rezH2UjYCTRs4uKJiJrbtKQnLYAZClLdoFexjQC6IGXS/ZdDRHhZ
ZocdiJSGlrO0s4qBSgHoBas8AHE1qPsDeT+5tF57kLXAf8Po2f6V+Q8xYaqBBcMd
xb2loWWgkDsooZExl26cJgACrzsdjDvaLCkXB4ITGC6iyFQ7c7EqxGnzy+r9UqTV
bfGHGAsjVzgycIlsxpzDijPqteaqGtbectN23V8tcF7t0iS8jB0JgewMuNzP/em5
C5011QY46NQjdQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:52:21 2026 by rpki-client