Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: 7Tlc31+v7gyRdTPFlSJj8uk/qoCkChE2bu3GRQ+LdnE=
Subject key identifier: FD:D5:58:1C:98:BC:F9:4D:F1:ED:23:65:1C:E6:41:8F:D4:CD:3C:CB
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019DFB3C0118E3F723E7C2CCAC3F9A15F0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1645
Signing time: Wed 06 May 2026 03:01:46 +0000
Manifest this update: Wed 06 May 2026 03:01:46 +0000
Manifest next update: Thu 07 May 2026 03:01:46 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: BNRF3iFBib6uH8-zEGx9zfO4cH8.roa (hash: 4yacbd98T/BVCl2ct+o0CMmFJRidAbOdWI6U10zor0Y=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: xFOeE1wVRoXBK7FW4JOZEmtKs2byXF70pHXnT/SEyRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:3c:01:18:e3:f7:23:e7:c2:cc:ac:3f:9a:15:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: May 6 03:01:46 2026 GMT
Not After : May 7 03:01:46 2026 GMT
Subject: CN=fdd5581c98bcf94df1ed23651ce6418fd4cd3ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:e2:a7:a3:ad:4f:f0:fb:49:13:e5:47:f5:
52:eb:e2:56:62:af:4d:1b:a7:3e:b0:ea:1a:1d:8f:
35:0e:5c:f4:a2:ad:db:6f:f9:9c:e6:de:ab:91:13:
4e:8f:1b:cc:45:5e:98:57:a0:1b:fe:54:9c:2e:78:
64:f8:09:9a:72:5e:26:51:08:9d:9c:57:10:9f:83:
97:40:e7:4a:9f:d7:10:ad:db:e6:02:9f:f3:bd:8f:
21:32:84:05:bf:ea:e0:07:9e:a2:7f:cc:b7:69:70:
71:ea:bc:77:01:7a:8b:5e:d6:db:5b:28:e9:97:48:
29:6f:01:6a:f4:45:c5:d3:f2:b0:f0:f5:62:18:c3:
7a:7c:59:b8:73:97:52:00:f4:51:ce:4c:7a:67:42:
72:ff:88:0d:dd:11:f0:0c:46:f1:af:87:1f:19:0c:
d6:e6:9e:ba:89:58:f7:58:32:2a:14:52:b0:05:f5:
8d:7e:e0:98:33:10:34:74:f3:07:e3:4d:6d:ca:13:
80:e1:99:c1:11:6f:18:f9:c0:f1:d0:64:35:ed:61:
4d:d2:c6:b7:59:56:79:78:a6:71:63:fe:96:32:95:
39:eb:74:30:e2:30:7f:19:7f:68:cd:db:30:d0:ca:
a3:8a:c4:ed:7c:7a:b0:5a:5d:06:6e:a0:0c:c1:88:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:58:1C:98:BC:F9:4D:F1:ED:23:65:1C:E6:41:8F:D4:CD:3C:CB
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:09:07:a5:b2:e7:ef:6c:c0:45:72:7d:c5:79:b8:d4:68:
bc:d0:94:a3:e4:bc:5c:61:17:1f:51:83:3e:7c:95:04:7e:04:
44:5d:8c:35:54:f1:ca:69:9e:9a:74:1c:23:de:12:b6:b7:91:
c8:09:6b:2b:38:93:31:07:6b:1f:e2:67:90:14:2e:59:a4:14:
f4:75:b8:56:e7:86:1e:8d:25:d7:d9:d4:e9:30:ce:9a:dc:9e:
78:2c:29:c9:15:23:ab:b6:22:b7:49:e8:85:ff:0a:8e:7d:39:
eb:dc:1b:4c:8a:41:68:64:d1:75:06:e2:df:15:91:16:b2:43:
8b:24:b6:0d:f5:42:dd:fa:84:f7:12:da:bd:29:96:0a:1f:07:
5e:c7:79:26:28:98:9f:48:9c:97:32:b9:94:6e:b7:58:a9:41:
19:76:a0:dd:25:5b:23:f6:f0:83:71:45:f4:55:8e:e6:91:ba:
d5:54:61:71:84:cc:44:23:d1:8c:d9:ad:4d:97:d8:89:24:58:
76:8c:56:a5:c8:2a:8f:64:13:0a:ef:3f:aa:e9:7c:1e:fa:cb:
f2:69:46:c0:9e:0e:5c:23:5a:5a:a2:25:f2:8b:59:3f:8e:1f:
c8:82:c4:ab:a9:df:f7:c9:1c:22:8c:00:f8:58:c6:dc:f7:86:
17:c3:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:24:12 2026 by rpki-client