Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: ajiMY1l5w4AxtZoDjAG7VpxCNHgbJHNRkspKra6guYM=
Subject key identifier: 8C:7B:59:7D:A5:B6:B4:BB:D2:84:75:F5:E1:4D:FF:2A:6D:87:CF:5A
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019EE69FC36EE1B688B34E5E8C7DF903D2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 16BF
Signing time: Sat 20 Jun 2026 20:01:30 +0000
Manifest this update: Sat 20 Jun 2026 20:01:30 +0000
Manifest next update: Sun 21 Jun 2026 20:01:30 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: VQGfYsSg1z3oOvUZAX5ByXMBVJv6LHYGcjE3vZ2RkrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:9f:c3:6e:e1:b6:88:b3:4e:5e:8c:7d:f9:03:d2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jun 20 20:01:30 2026 GMT
Not After : Jun 21 20:01:30 2026 GMT
Subject: CN=8c7b597da5b6b4bbd28475f5e14dff2a6d87cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:4f:35:2a:c9:fd:97:9a:b1:70:42:d9:f4:
26:92:70:3e:58:6d:f9:fc:e8:fb:5e:1a:62:4e:5d:
eb:9b:47:b3:3d:ea:b2:58:43:23:df:eb:44:0c:e0:
a8:0f:87:dc:7d:90:4b:d9:31:0b:a3:4c:41:bf:34:
2f:ea:96:99:f8:19:9f:84:e7:3b:fd:32:46:7a:04:
23:e0:49:8a:19:42:0e:4a:ce:8f:2c:cf:5d:74:0a:
de:5c:78:38:40:4c:90:a6:e7:d5:d7:91:50:d0:75:
59:79:3c:31:6d:a0:77:86:02:8a:22:bb:fa:0d:06:
e5:d3:22:18:36:04:84:e8:0b:9a:a8:c6:b9:00:a3:
cb:64:82:2f:b8:40:77:8c:e3:61:42:87:23:ff:98:
ef:f1:f5:a7:38:da:c4:23:e5:e3:1d:7c:04:5c:f8:
64:11:2a:28:5d:8b:7c:c7:01:92:83:05:3e:74:fb:
90:6e:90:56:c2:59:e9:96:fb:e1:56:fa:6f:e3:11:
c3:b0:fd:98:8e:67:aa:f5:23:a4:d7:d5:7a:0f:55:
52:8c:c5:8a:33:35:8d:c0:94:39:b0:e9:23:e3:5b:
6f:7e:4b:4a:09:96:d7:f9:e7:bb:7f:4a:13:2b:9e:
e6:ce:68:c3:2a:8f:2b:75:6e:87:8e:1f:10:95:b9:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:59:7D:A5:B6:B4:BB:D2:84:75:F5:E1:4D:FF:2A:6D:87:CF:5A
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7a:d6:f5:fa:68:ba:c6:ff:63:9d:4f:98:b2:1e:33:65:b8:
d3:af:b1:92:4b:90:5e:1d:bf:12:d2:a7:f5:38:38:b2:cc:8a:
50:8d:05:25:35:67:31:62:7f:ad:ca:f5:39:83:b8:86:fe:86:
44:6c:47:8e:2b:e3:82:98:da:71:bd:5f:65:fb:df:0a:f8:3b:
08:e6:90:44:6b:3a:c7:42:c3:b3:4d:3d:e2:e1:27:2d:aa:40:
50:1d:e0:09:a8:83:89:f9:79:88:ec:b8:a9:a5:66:63:45:b6:
82:73:f0:26:dd:03:50:22:0b:5f:fb:89:2f:f5:a1:77:95:42:
81:d3:19:9b:ce:1e:65:9f:10:35:c4:8c:26:62:b6:9e:8c:80:
91:e1:3d:40:b4:4b:ca:23:fb:76:ea:54:c2:a9:33:c5:59:0d:
3b:66:e6:38:fc:53:9b:48:e5:26:28:56:cb:80:09:30:af:ba:
57:33:85:6a:8f:4c:d9:59:8e:a8:a9:ec:d4:f8:83:f8:f0:96:
63:07:f2:36:9f:3b:1c:53:d2:07:63:09:a6:19:15:a6:ce:3f:
c5:14:69:9f:82:5d:e0:93:64:c8:4d:16:69:c3:5f:0e:f4:fa:
57:42:26:16:93:a2:16:a1:6e:3e:96:52:72:6f:ca:fc:8c:bd:
db:b4:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:09:00 2026 by rpki-client