Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: 2WgkJThBFpvyrO+Ng56nmKxCkX35z0UiSifuq2gMfEM=
Subject key identifier: 02:95:2E:60:EC:8B:D2:38:06:79:C3:A6:D0:2A:61:95:49:DE:2B:A1
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019E3117C92D71DEB8A41EAEC4BC44F86C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0FD3
Signing time: Sat 16 May 2026 14:01:42 +0000
Manifest this update: Sat 16 May 2026 14:01:42 +0000
Manifest next update: Sun 17 May 2026 14:01:42 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: UOLztWz8t4ynGRaXysvxQoSz6WRjfPlrHYGlkpSOA6g=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:c9:2d:71:de:b8:a4:1e:ae:c4:bc:44:f8:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: May 16 14:01:42 2026 GMT
Not After : May 17 14:01:42 2026 GMT
Subject: CN=02952e60ec8bd2380679c3a6d02a619549de2ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:bf:f2:ad:94:94:a1:e5:cb:44:9a:01:5c:
1f:63:c1:30:cc:80:b0:f1:0b:38:0f:9b:65:b0:11:
a2:2a:24:2c:b2:f5:8a:b8:f1:0f:01:ed:de:25:bf:
0c:f9:91:bd:7f:44:36:96:f9:e1:85:e2:05:96:e1:
16:c6:5b:d7:0b:12:c2:0d:ce:78:ee:0d:86:0e:72:
ec:42:ab:5e:ce:f1:4b:76:e7:31:95:ff:ca:8d:46:
8d:78:b8:77:b6:6b:bd:c2:3d:c2:ab:ec:3c:e0:ca:
a1:37:46:9a:00:9f:b2:76:eb:7c:77:9d:30:d3:8b:
4f:cd:8e:56:48:ce:a6:bb:56:b6:17:7f:68:85:6f:
55:f8:f2:c8:23:99:40:0d:b8:81:e5:a7:19:6c:0d:
f0:0e:fe:42:da:fb:04:4c:e3:33:fe:0f:da:a3:88:
40:7d:46:26:66:45:a1:24:d9:fc:18:96:d7:86:e6:
8e:c0:77:1e:c4:12:c2:18:ae:a7:47:37:2e:10:c2:
07:77:75:ca:68:54:bb:69:c1:3f:f8:b3:2a:b5:52:
f3:13:60:4b:59:f0:bf:4f:da:5c:39:b4:e1:c6:6c:
df:15:20:6f:fd:f7:ab:b2:e2:12:8e:43:c1:74:df:
14:35:f8:1b:78:59:71:f6:28:fb:65:86:1f:7d:d4:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:2E:60:EC:8B:D2:38:06:79:C3:A6:D0:2A:61:95:49:DE:2B:A1
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a2:77:59:cf:a7:3e:be:83:bd:7f:0a:61:d0:7d:07:52:e9:
46:ea:38:6a:cb:20:c8:a0:4e:42:ba:7d:01:c1:15:4c:08:ae:
69:c0:d4:63:3d:47:a7:fe:65:46:7f:26:1d:f2:27:b2:53:c7:
68:1b:ed:67:22:fa:2b:94:fa:3f:0b:b7:8e:67:7a:d0:98:16:
f1:6f:77:37:b2:01:54:2c:db:0e:fd:59:65:e9:b5:da:52:16:
f1:f7:f9:d8:f4:65:60:dd:1b:bd:5b:6b:d4:82:e8:47:96:18:
b1:f4:d9:96:a9:c5:2e:34:71:56:47:58:81:a9:04:f9:78:78:
ac:b0:73:89:cf:37:9b:36:bd:3c:b5:50:da:c6:af:12:e4:6d:
7e:8a:b5:78:cd:f0:68:49:d7:18:96:32:70:63:62:86:08:ab:
ef:52:0b:90:84:bc:5f:ac:58:c2:b7:a3:42:e2:bb:3d:07:5e:
a2:c7:57:77:6d:57:84:9a:05:12:bf:2b:0e:08:33:8c:13:a8:
97:62:ed:4b:b4:06:e9:d6:7e:43:d7:1f:4f:66:b4:ec:2b:49:
8f:79:8e:a4:e6:e2:00:c7:d0:b0:ad:df:38:80:07:b4:e4:4d:
a5:fc:69:30:d7:04:db:cb:f0:08:ac:91:71:e9:5d:f7:be:a6:
7d:2f:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:55 2026 by rpki-client