Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: kxGIZJ51MFx3RZFBQb3Q2Tiq7hVLTrvDj5QGqY9PFFo=
Subject key identifier: F3:E4:B4:38:7C:69:60:3F:7F:FD:EE:82:4C:D3:7A:51:4F:2C:B9:B7
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019F9F27F967D52EA16FB0A877F05AFBBB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 1266
Signing time: Sun 26 Jul 2026 16:00:24 +0000
Manifest this update: Sun 26 Jul 2026 16:00:24 +0000
Manifest next update: Mon 27 Jul 2026 16:00:24 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: bLOPtfNoC5Xl5kAzChB7ClCbfnfv1jE94MuxOui1a3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:27:f9:67:d5:2e:a1:6f:b0:a8:77:f0:5a:fb:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jul 26 16:00:24 2026 GMT
Not After : Jul 27 16:00:24 2026 GMT
Subject: CN=f3e4b4387c69603f7ffdee824cd37a514f2cb9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:74:2f:5d:36:b9:9e:de:ec:ee:a9:84:d0:
ae:70:8f:bb:8b:d6:0f:7f:76:f0:d2:a3:d3:b0:ad:
cb:1a:9f:b6:f4:51:c2:00:45:84:98:32:7e:ba:2a:
18:1a:0f:a8:80:2f:fe:08:d5:20:be:6c:d9:b0:24:
5b:23:3d:74:6e:3a:cb:34:3f:90:7d:b1:83:1b:60:
bd:6f:3c:1c:22:ba:68:24:bc:0a:4e:f6:69:9b:11:
b9:ae:5e:6a:36:ee:cd:f3:26:40:e1:8f:7e:3c:7b:
c6:51:9f:c8:2b:5b:d2:05:1e:2b:b9:e0:3d:ab:46:
d7:d0:81:38:fe:a8:22:17:77:a3:d3:4b:08:0a:68:
b1:3f:9b:ad:4a:4d:01:8c:dd:bf:fb:6b:ea:09:60:
54:d1:ce:35:bb:2d:dc:5e:f1:6c:a3:9b:5a:65:b3:
52:d3:2e:0d:23:b0:bc:31:c7:09:65:0a:d5:16:81:
5f:32:db:ff:aa:53:b4:35:27:cd:26:22:eb:81:df:
55:b4:1f:a7:f0:bd:9c:b7:25:1b:12:a9:11:11:0c:
21:4a:44:1b:d0:dc:b9:ec:cb:0e:cc:40:49:d6:f9:
21:01:e1:6a:6d:50:6c:a7:62:65:f8:65:25:7e:75:
86:01:ef:b9:69:5c:33:e3:ae:3d:1d:ce:04:9a:2f:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:B4:38:7C:69:60:3F:7F:FD:EE:82:4C:D3:7A:51:4F:2C:B9:B7
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:31:d0:41:52:ea:d1:c4:e2:1d:6b:53:c3:11:f4:d1:bd:ec:
f6:3c:bc:0c:b0:3a:65:1b:7c:29:26:3c:58:11:37:c0:6e:f4:
df:92:a3:ba:5e:d3:db:e4:2d:98:ef:85:c5:93:39:e9:2f:09:
52:85:fa:d2:1e:fd:7e:5d:83:e0:9a:4d:70:10:10:a5:42:bb:
3a:f6:2a:e3:ef:91:f2:65:0c:f7:22:4e:79:09:fb:67:99:cb:
32:41:8a:c3:70:0e:04:07:7f:ae:08:cb:1c:af:9e:66:fd:72:
ae:5b:2f:5b:c2:4e:49:ed:01:86:1e:be:76:56:4a:7b:05:95:
6d:1f:13:e4:ed:22:21:a3:1b:1f:1e:35:fd:8e:83:d6:ae:9f:
f2:6c:c0:6c:66:f3:29:d7:07:35:40:3e:26:29:10:f2:a9:27:
30:fc:37:1a:a4:1e:de:8b:ac:c5:5e:28:40:bf:16:df:51:49:
b9:c6:e8:61:ea:7b:c7:a7:79:57:63:dc:66:a7:ca:70:74:dc:
d5:9e:99:f0:30:ae:62:47:54:f6:d0:4e:df:f0:1c:f3:b4:de:
2f:c9:d1:39:c9:ce:4d:fb:fa:f3:79:d8:75:2c:9b:4d:29:62:
e4:e9:84:c6:01:0d:58:00:cc:14:eb:5f:97:6a:0c:d0:26:85:
02:f3:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:23:33 2026 by rpki-client