Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: SfG2ThOpMuVQulRPi2sV5rXfcYoNTWjlM9wjJpLi1ac=
Subject key identifier: 1F:20:42:2D:6B:3B:75:C9:AE:A2:B7:09:FB:96:62:99:C5:50:DA:B8
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019EE88E200AE793CB15E3EFC483139A7F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 16C0
Signing time: Sun 21 Jun 2026 05:01:28 +0000
Manifest this update: Sun 21 Jun 2026 05:01:28 +0000
Manifest next update: Mon 22 Jun 2026 05:01:28 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: T9momtZFxqPckXy4HTIan6bB/rVAyf/XKQOLmUyGXzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8e:20:0a:e7:93:cb:15:e3:ef:c4:83:13:9a:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jun 21 05:01:28 2026 GMT
Not After : Jun 22 05:01:28 2026 GMT
Subject: CN=1f20422d6b3b75c9aea2b709fb966299c550dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:28:d0:e9:24:4e:0e:df:36:c5:c0:31:34:
a8:c0:f4:c9:d6:db:24:9f:6d:68:56:45:76:cb:8d:
b1:d7:77:ca:4e:c3:32:80:35:aa:28:cc:9a:bd:10:
bf:f0:dd:fe:38:f4:73:d6:d3:d2:a7:d4:49:45:8b:
23:d2:da:b6:ff:a3:71:4d:81:f7:21:51:1d:60:ec:
01:2c:7b:7d:c7:7c:d4:a7:43:b2:ab:82:2a:60:97:
4d:9f:ae:dd:82:ff:5d:46:70:56:bc:3d:f9:a6:b9:
1a:63:bb:f2:2b:74:07:b5:f8:62:fa:71:6c:8d:04:
ec:a2:5f:62:6d:7a:c2:11:92:81:c5:37:bb:56:0c:
db:44:8f:a9:4f:85:e1:b4:6b:0b:30:45:83:e7:56:
dc:e5:64:84:c2:0a:8f:78:ec:75:c4:2d:d1:4a:37:
3e:be:00:f0:b7:f3:f5:76:a5:e3:d4:f4:33:94:da:
07:41:24:77:10:2e:79:ef:87:68:b6:67:7e:2f:8d:
10:bf:76:0a:b2:fd:74:e3:6c:6b:83:d0:f6:d2:78:
36:42:22:c6:40:2b:a4:12:28:dc:38:f7:eb:eb:1b:
1b:c3:2e:f7:3c:ca:41:4c:8e:59:57:52:17:e4:e0:
bc:35:5f:f6:1a:9f:fd:38:8b:d1:4e:b0:50:fc:04:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:42:2D:6B:3B:75:C9:AE:A2:B7:09:FB:96:62:99:C5:50:DA:B8
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:4b:63:8f:4a:51:0b:a9:92:43:5a:98:24:43:3e:09:9e:
b3:4d:00:9d:c5:ef:30:11:32:e9:6c:26:63:df:ea:11:87:50:
e3:00:6a:c0:4c:9e:60:57:63:37:e0:a9:c4:ee:ab:a5:16:d4:
a3:84:9f:15:79:43:cf:30:1c:2c:b2:73:12:a0:9b:38:4b:c4:
b4:8f:fb:a5:ea:0e:54:5d:33:7a:e9:67:bc:2b:04:e8:8e:5e:
0d:f7:ea:2e:36:61:30:2d:ca:86:45:22:c8:03:ae:3f:32:bf:
1a:bd:41:90:ea:26:d6:57:06:c9:e5:56:bb:f2:37:48:7b:90:
33:d7:b4:79:5f:62:75:3d:68:92:c4:bd:b0:29:5a:94:cd:e6:
24:a5:d5:8d:5e:5e:23:21:e4:bd:35:19:9b:9e:87:e5:8f:b0:
a6:ef:77:5c:a0:7d:22:37:ff:4d:5c:7c:24:a8:bb:e9:2f:76:
20:fb:71:c2:bc:e7:3a:da:f0:d7:9d:3c:d1:c8:40:52:db:d5:
8e:ac:3b:22:71:69:8a:87:68:e1:7f:ea:1c:8e:ca:e7:39:a1:
3b:a6:b8:3a:4c:95:a9:87:60:67:e3:2d:cd:89:46:af:9b:53:
96:1c:fe:fb:9e:99:5a:14:bd:e7:9f:02:f7:21:e3:65:fd:fb:
dc:57:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:15:51 2026 by rpki-client