Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: 4/iJbZTDtjiptJTKEXaVGcC3+XIOMmUhBRYENjIXjtA=
Subject key identifier: 1C:9E:BE:A4:92:E3:D4:C5:63:5D:A5:6B:C9:B4:F1:C3:4C:22:9D:B1
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01A08D8DEF6D5BA9383738675747D9D0E589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 110C
Signing time: Thu 10 Sep 2026 23:01:24 +0000
Manifest this update: Thu 10 Sep 2026 23:01:24 +0000
Manifest next update: Fri 11 Sep 2026 23:01:24 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: teYNmq2IzXLsSMg7wL8nmv7N73LoeqBTsRxEE5ru/MI=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:ef:6d:5b:a9:38:37:38:67:57:47:d9:d0:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Sep 10 23:01:24 2026 GMT
Not After : Sep 11 23:01:24 2026 GMT
Subject: CN=1c9ebea492e3d4c5635da56bc9b4f1c34c229db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:a8:8a:1a:32:16:6f:38:c0:e3:e2:bc:64:
d3:76:82:b9:e4:60:7d:5b:4b:e9:fe:11:88:07:d2:
68:bd:8c:f2:52:a1:5b:14:82:1e:23:0b:c4:04:9b:
9f:b3:92:e6:d4:25:f7:21:6d:b4:0e:3e:cf:f3:82:
31:71:4f:e0:e4:1a:0f:af:5a:d5:e5:68:1e:1c:bd:
97:17:64:00:74:1f:a9:b2:09:dc:02:70:82:b1:a2:
fb:97:a6:22:6b:bd:b8:0e:6d:3f:ad:a5:74:3d:6d:
39:41:62:51:36:4d:c5:6e:2f:dc:35:a6:e3:b6:ca:
c8:fb:71:42:ed:0d:f8:88:0d:db:93:ae:a5:74:60:
df:08:a0:7e:7b:e2:ca:f4:cf:48:bf:96:20:50:0d:
a6:84:2e:6b:61:67:8b:8d:d7:3a:d5:9d:d1:06:5d:
75:2f:86:d4:6c:06:ac:12:d5:eb:cb:d4:14:97:23:
4b:44:f0:aa:39:a3:7f:6f:cd:43:7a:f2:21:0f:9a:
c3:00:f7:43:99:82:6c:fc:3c:3a:d2:78:bb:07:d8:
20:35:94:a1:26:eb:8a:de:07:bf:8a:4b:5a:05:5f:
f2:79:13:1c:2e:04:4b:8b:e9:37:0e:2f:df:03:e9:
aa:c5:15:2a:99:e0:f2:35:81:9d:03:6c:21:6a:1e:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9E:BE:A4:92:E3:D4:C5:63:5D:A5:6B:C9:B4:F1:C3:4C:22:9D:B1
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:c8:f6:20:32:b6:43:63:95:0f:ec:fd:0c:b1:bb:67:7d:
7c:59:48:4a:74:dc:5a:59:53:a8:e9:ed:5a:2c:22:9b:cc:9e:
9a:88:ab:59:4f:21:10:19:e6:4a:e7:bf:fb:82:c8:f3:19:93:
9b:08:70:01:9f:ae:b1:fd:7b:58:f5:65:ad:a4:da:6d:86:0c:
8f:d4:2f:7a:4d:55:54:bd:59:15:74:cf:25:b7:68:97:f9:ad:
30:c3:26:c2:6a:25:2b:49:22:51:7e:58:65:2d:f6:5c:3c:91:
27:a2:f2:9e:be:e8:b2:0a:5c:71:33:3b:65:e5:ce:0d:61:24:
bb:da:45:59:02:fa:ed:0b:16:ff:80:76:19:94:e1:76:3a:6a:
a1:b1:11:5b:86:ef:12:be:45:cf:0d:b9:14:5c:de:32:5f:ec:
c2:06:3e:d7:79:2b:0b:f3:06:c7:0f:5e:d5:6a:55:16:01:2b:
f9:84:55:70:86:35:52:b0:94:b0:35:71:64:5e:b4:6c:2c:e7:
57:03:53:16:d4:5d:c5:86:0f:78:07:17:e9:5d:9e:9f:71:77:
e2:32:85:aa:e1:1c:26:37:04:d8:b3:dc:e6:3b:10:78:fb:89:
e1:56:12:09:49:0e:21:33:86:8b:81:16:28:dd:f2:11:e7:52:
7f:d0:48:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNje9tW6k4NzhnV0fZ0OWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjYwOTEwMjMwMTI0WhcNMjYwOTExMjMwMTI0WjAzMTEwLwYDVQQD
EygxYzllYmVhNDkyZTNkNGM1NjM1ZGE1NmJjOWI0ZjFjMzRjMjI5ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7CoihoyFm84wOPivGTTdoK55GB9
W0vp/hGIB9JovYzyUqFbFIIeIwvEBJufs5Lm1CX3IW20Dj7P84IxcU/g5BoPr1rV
5WgeHL2XF2QAdB+psgncAnCCsaL7l6Yia724Dm0/raV0PW05QWJRNk3Fbi/cNabj
tsrI+3FC7Q34iA3bk66ldGDfCKB+e+LK9M9Iv5YgUA2mhC5rYWeLjdc61Z3RBl11
L4bUbAasEtXry9QUlyNLRPCqOaN/b81DevIhD5rDAPdDmYJs/Dw60ni7B9ggNZSh
JuuK3ge/iktaBV/yeRMcLgRLi+k3Di/fA+mqxRUqmeDyNYGdA2whah6/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByevqSS49TFY12la8m08cNMIp2xMB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/7I9iAy
tkNjlQ/s/Qyxu2d9fFlISnTcWllTqOntWiwim8yemoirWU8hEBnmSue/+4LI8xmT
mwhwAZ+usf17WPVlraTabYYMj9Qvek1VVL1ZFXTPJbdol/mtMMMmwmolK0kiUX5Y
ZS32XDyRJ6Lynr7osgpccTM7ZeXODWEku9pFWQL67QsW/4B2GZThdjpqobERW4bv
Er5Fzw25FFzeMl/swgY+13krC/MGxw9e1WpVFgEr+YRVcIY1UrCUsDVxZF60bCzn
VwNTFtRdxYYPeAcX6V2en3F34jKFquEcJjcE2LPc5jsQePuJ4VYSCUkOITOGi4EW
KN3yEedSf9BILg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:06:08 2026 by rpki-client