Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: iBwsYVyi4mf5gSYqWgD+d0gYOT2g7xrEEKcNoCIFfSk=
Subject key identifier: 30:5F:0C:FA:AA:3B:D6:07:89:55:FB:C4:6E:86:33:61:DC:16:57:93
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 01A0BBE628EA2ED42DF8E9ADA98C22871712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 17B2
Signing time: Sat 19 Sep 2026 23:00:18 +0000
Manifest this update: Sat 19 Sep 2026 23:00:18 +0000
Manifest next update: Sun 20 Sep 2026 23:00:18 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: Z3vYLYzxhRYHsjtST43a8T6NViDDjG5TTILze9ZYaJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:e6:28:ea:2e:d4:2d:f8:e9:ad:a9:8c:22:87:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Sep 19 23:00:18 2026 GMT
Not After : Sep 20 23:00:18 2026 GMT
Subject: CN=305f0cfaaa3bd6078955fbc46e863361dc165793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:ab:76:ce:a0:ca:2d:b6:b1:6b:e2:bb:49:
f6:49:3d:1f:49:66:fd:ad:c5:e4:e0:44:4d:b2:29:
8f:e2:af:78:9e:da:24:4a:f0:0b:b4:0a:bd:f5:71:
54:99:dd:c6:10:7c:f3:9b:65:3e:7c:3e:95:40:af:
a6:2a:c7:09:2e:6c:94:4f:c8:e5:44:86:52:02:f5:
bd:0d:dd:7d:93:91:16:ae:48:e3:e2:7f:3a:4a:f6:
bc:90:80:f0:0e:a0:58:30:7b:9c:b7:6a:e2:de:ed:
68:03:af:0b:9f:4c:1f:e3:98:e6:5c:72:ee:7c:4a:
24:40:01:28:74:0f:02:7b:c6:4b:5a:ff:cc:67:9f:
0b:a3:b0:9c:d9:95:1f:ef:1c:ee:30:14:c8:94:04:
f8:6d:68:87:00:8c:dd:96:22:84:35:96:b5:5b:2d:
c7:d0:08:92:b0:f9:41:63:5c:74:d9:aa:e5:e8:f7:
82:d8:9d:18:f2:b7:a9:8d:a7:ed:b5:fe:98:40:1c:
32:0e:7e:01:6d:d8:7e:06:0b:a9:78:e8:3e:03:14:
63:db:7f:d9:7e:08:23:9f:dc:07:ff:7f:d7:67:2a:
d1:6f:93:15:31:26:73:73:44:aa:75:66:a7:ff:5b:
75:03:90:06:73:58:46:1e:4c:3a:3c:da:a1:8d:81:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:0C:FA:AA:3B:D6:07:89:55:FB:C4:6E:86:33:61:DC:16:57:93
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a7:ef:37:e1:6a:3f:f4:e5:5b:4c:28:91:0e:72:29:6c:6d:
5f:fd:08:d0:a1:dc:00:18:06:ed:74:96:c4:30:d0:a6:27:44:
aa:ce:b0:43:fe:3d:8a:bb:9a:b4:03:5a:72:85:6b:49:af:a0:
44:e3:13:16:9f:3a:3e:c6:a1:c9:c1:90:f9:40:83:ba:d3:84:
ac:63:4f:0b:25:d6:e1:e4:c6:43:87:4b:57:f8:f2:5c:f2:d2:
24:af:5c:de:62:0a:1c:dd:f3:49:3e:2c:31:6f:28:f6:12:35:
46:a0:a3:28:19:8a:4b:c0:7f:4a:2b:98:8c:13:24:e2:6a:fb:
d6:68:a3:69:87:f2:f5:fc:e7:0f:ab:70:0f:df:62:46:bf:ea:
35:d6:14:cc:9a:96:72:f4:34:19:4f:d7:9c:84:41:e4:4b:af:
5e:ec:ff:44:22:ed:f7:3b:b3:c9:ef:af:c3:6e:aa:4a:7a:ba:
5b:de:49:27:5f:c0:05:52:d0:24:dd:aa:23:52:2d:e8:00:f2:
1d:aa:34:25:37:35:fe:47:11:22:89:91:2d:c6:b5:21:fa:e5:
ea:4a:3b:dd:c3:2d:cf:70:d8:77:72:70:d5:70:cc:57:28:d2:
3e:bb:26:fe:3b:43:1a:1c:d8:c9:bf:6a:73:58:99:18:42:d9:
17:be:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:34:42 2026 by rpki-client