Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: 8EK3eu/Dx/Hd8vKacD8uBEtu9b7wUsSyNLJq21VUScY=
Subject key identifier: 9E:21:16:6B:74:F0:91:9C:0C:9F:7F:03:F2:7A:2D:60:1E:CF:A4:37
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019E9BF27B30DE31A9F02E7C930A5C7BD004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0489
Signing time: Sat 06 Jun 2026 08:00:20 +0000
Manifest this update: Sat 06 Jun 2026 08:00:20 +0000
Manifest next update: Sun 07 Jun 2026 08:00:20 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: UTUbR/Fpdi37KQC6XvdzxVoWwyYn0UWsjap0j/MrZdM=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:7b:30:de:31:a9:f0:2e:7c:93:0a:5c:7b:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jun 6 08:00:20 2026 GMT
Not After : Jun 7 08:00:20 2026 GMT
Subject: CN=9e21166b74f0919c0c9f7f03f27a2d601ecfa437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:21:bb:6b:49:b2:1d:3e:a4:15:4b:f5:93:
58:cc:93:d7:32:c0:eb:9c:d3:81:f6:ac:82:5d:ff:
b1:7f:cd:1e:03:4a:46:95:6f:c7:14:b9:70:05:d9:
72:b8:ca:74:6b:a4:ad:77:03:56:ca:99:fb:97:9a:
48:45:7e:5c:4e:0c:6e:b0:b9:69:9f:b7:8e:22:59:
a1:f8:9a:e5:20:61:ba:46:97:91:a4:9e:95:33:28:
a7:14:c3:a4:32:a2:c8:39:8c:7c:9c:87:ef:03:fa:
19:fa:07:58:34:99:be:ca:a2:f7:49:2d:fa:03:16:
70:4c:ff:bc:2d:ea:45:6a:bf:bd:03:25:69:fc:39:
de:6b:be:84:f9:d8:13:dd:f7:f3:e7:05:38:c7:2e:
99:6a:76:46:8c:a5:3e:90:5c:1f:66:33:20:aa:66:
2d:00:7f:77:8d:fd:54:fa:38:35:de:7c:77:a3:0b:
05:f9:24:8c:f8:58:dc:21:f8:f4:10:70:06:db:10:
70:e6:fb:bc:12:45:cc:53:35:24:ec:1b:4f:89:f4:
8e:7c:79:d9:ec:fb:4e:53:60:eb:35:ff:5a:ac:ed:
9f:71:60:a4:27:9b:ab:ac:68:86:5c:61:50:a1:09:
f2:29:99:d0:a1:52:7f:b5:ea:17:e3:3f:d8:34:e4:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:16:6B:74:F0:91:9C:0C:9F:7F:03:F2:7A:2D:60:1E:CF:A4:37
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:75:7e:06:c2:06:3e:df:c3:5f:7d:b5:56:63:f6:ef:30:07:
ed:92:e2:07:53:c6:1c:22:fb:0c:bd:41:72:07:cb:0f:43:6a:
7c:cc:31:c2:95:93:5f:4f:90:56:d7:a0:26:05:ff:23:b8:2e:
a4:68:6b:09:b0:07:db:e1:ec:eb:ba:a1:82:21:9e:0b:98:fd:
54:6e:84:3e:5f:38:47:56:61:06:4d:d5:17:dc:42:d4:72:08:
e3:73:98:9d:a3:36:8f:ba:f6:e0:8a:9d:52:37:94:d4:d6:99:
5d:a2:f0:88:55:24:64:da:cd:ac:2a:c5:03:19:c7:2a:87:cd:
86:af:dc:5d:e8:12:ba:94:a7:a9:3b:3c:65:7e:ec:4c:66:fa:
0c:67:d3:a2:db:53:31:9c:a8:52:79:26:e7:c1:38:7c:ef:c4:
8e:3f:69:c6:ab:4f:9f:3f:25:cd:45:3e:85:e1:97:33:af:4a:
76:f2:4a:c6:01:f9:a7:ee:49:4c:5b:c6:23:92:fb:ac:49:48:
51:27:14:7f:bb:dd:9a:31:83:b5:fe:0c:e5:c1:c3:32:90:e7:
96:31:73:49:c6:7b:4b:2b:5e:f7:f9:88:7d:7a:b6:62:8d:0d:
53:6d:f5:ad:84:a2:02:b1:6d:90:0e:ba:e4:a7:8c:c6:aa:e4:
de:89:ee:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8nsw3jGp8C58kwpce9AEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjYwNjA2MDgwMDIwWhcNMjYwNjA3MDgwMDIwWjAzMTEwLwYDVQQD
Eyg5ZTIxMTY2Yjc0ZjA5MTljMGM5ZjdmMDNmMjdhMmQ2MDFlY2ZhNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM4hu2tJsh0+pBVL9ZNYzJPXMsDr
nNOB9qyCXf+xf80eA0pGlW/HFLlwBdlyuMp0a6StdwNWypn7l5pIRX5cTgxusLlp
n7eOIlmh+JrlIGG6RpeRpJ6VMyinFMOkMqLIOYx8nIfvA/oZ+gdYNJm+yqL3SS36
AxZwTP+8LepFar+9AyVp/Dnea76E+dgT3ffz5wU4xy6ZanZGjKU+kFwfZjMgqmYt
AH93jf1U+jg13nx3owsF+SSM+FjcIfj0EHAG2xBw5vu8EkXMUzUk7BtPifSOfHnZ
7PtOU2DrNf9arO2fcWCkJ5urrGiGXGFQoQnyKZnQoVJ/teoX4z/YNOQ2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4hFmt08JGcDJ9/A/J6LWAez6Q3MB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXV+BsIG
Pt/DX321VmP27zAH7ZLiB1PGHCL7DL1BcgfLD0NqfMwxwpWTX0+QVtegJgX/I7gu
pGhrCbAH2+Hs67qhgiGeC5j9VG6EPl84R1ZhBk3VF9xC1HII43OYnaM2j7r24Iqd
UjeU1NaZXaLwiFUkZNrNrCrFAxnHKofNhq/cXegSupSnqTs8ZX7sTGb6DGfTottT
MZyoUnkm58E4fO/Ejj9pxqtPnz8lzUU+heGXM69KdvJKxgH5p+5JTFvGI5L7rElI
UScUf7vdmjGDtf4M5cHDMpDnljFzScZ7Syte9/mIfXq2Yo0NU231rYSiArFtkA66
5KeMxqrk3onupg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:01:27 2026 by rpki-client