Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: v7P5DwuXxQl5MIqziGQx66gARpOavh6Y9JWKUJl1xHs=
Subject key identifier: 71:3F:EE:36:63:DC:AA:26:A6:12:DA:E9:B6:AC:8A:C7:55:B9:BC:89
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019D3909C40683AF0879A4E0F97F00886ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 1128
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: 5oyDsuY+mxpD8t9kbdQ6sn98dxIQuGnFekSKD55Tx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c4:06:83:af:08:79:a4:e0:f9:7f:00:88:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=713fee3663dcaa26a612dae9b6ac8ac755b9bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:21:5d:e1:24:a5:c3:c7:f8:2c:e8:f1:13:
e8:ac:08:c6:33:79:28:1c:73:f0:07:68:0c:4d:7b:
e9:58:e0:bf:1f:43:6b:4e:f3:a1:6d:ba:1f:03:3a:
5c:a8:34:13:8f:08:c1:5f:8e:21:0d:3a:1e:93:88:
7f:0a:be:aa:bc:fc:58:f4:ab:c9:07:be:41:42:41:
1d:5c:4f:f7:43:c7:ad:9c:72:1e:96:5e:bf:da:d4:
f8:85:59:e0:bc:a3:d2:df:33:d9:68:da:c4:c4:12:
4c:32:f2:3d:9a:c6:1b:99:51:b1:16:96:42:0a:f4:
b7:1c:c4:3a:f5:c2:99:3f:d1:23:f6:8f:34:05:49:
28:29:ce:44:24:45:92:50:56:74:a1:47:37:f1:00:
5e:10:f1:6f:96:77:4f:92:4d:cb:17:c8:8c:ff:2d:
f5:a5:4b:df:fa:0d:7a:18:68:33:9c:d5:3c:b7:8e:
35:01:e3:06:95:7c:88:d9:99:df:a7:07:2a:c5:16:
8e:f0:05:24:d0:ec:3c:99:ee:42:49:3c:f1:46:8d:
53:29:09:12:23:65:42:c4:02:c5:ea:b8:bc:3d:c4:
0a:24:78:94:c1:13:8a:bf:d7:18:6f:f9:31:33:0f:
62:a9:86:c6:db:be:ef:10:bc:17:0a:3b:02:b9:ea:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:EE:36:63:DC:AA:26:A6:12:DA:E9:B6:AC:8A:C7:55:B9:BC:89
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:b3:0d:ff:3c:89:cc:e8:4a:a5:f0:ea:c1:2b:ab:76:76:
bc:67:cc:17:be:d1:8a:3a:18:2f:a3:d1:d0:1e:87:e9:f8:94:
2e:f4:d2:5a:c2:74:8a:01:74:a3:1e:b6:20:ba:00:34:68:9c:
6c:ec:83:83:00:52:af:78:bb:06:f0:26:71:ca:bd:4a:d4:af:
79:cc:81:7c:d7:2e:e7:e9:7d:70:0e:43:36:df:c1:4e:a3:ee:
59:09:d6:56:95:bc:cd:2a:70:0f:ae:4d:a0:96:ab:52:7a:ba:
4c:1e:d8:ab:f5:80:3c:da:08:09:a9:5c:03:40:23:76:e2:fa:
41:99:78:d5:08:9c:1e:2c:28:e4:7f:2c:74:b3:f2:73:96:a9:
6e:e7:31:c2:b4:6c:1f:f0:bb:de:95:80:c9:4e:8f:1e:99:f9:
4b:f7:5a:f3:16:00:29:0f:4e:c9:0d:75:c6:a0:df:49:01:f8:
1b:01:63:8f:cb:bd:2c:db:c6:ee:16:c8:84:7a:cc:cf:c1:37:
70:3d:30:43:2d:7a:b2:6f:20:87:5f:2e:7b:19:8c:1d:6c:c0:
92:50:4d:fa:06:9b:65:af:79:88:31:a2:4c:ea:a3:5f:1c:ad:
28:93:f2:a1:17:f8:da:3a:0d:fc:59:9f:72:69:ea:39:5f:0e:
cb:75:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:36 2026 by rpki-client