Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: gRjIPIE7oC8Ki6xLaACcrvOyrYyzBcejMBXa/ZmZaFc=
Subject key identifier: D3:E8:63:C4:F4:E6:72:3A:57:1E:01:7A:0F:0B:4A:EA:99:45:0F:BF
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019D9B19F8D10560F28D1AC3A50A705327F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0404
Signing time: Fri 17 Apr 2026 11:01:03 +0000
Manifest this update: Fri 17 Apr 2026 11:01:03 +0000
Manifest next update: Sat 18 Apr 2026 11:01:03 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: AaWccYlZaYN4eVpIs/dX0p06ivV/D0aWliA3vVWV0l0=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f8:d1:05:60:f2:8d:1a:c3:a5:0a:70:53:27:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Apr 17 11:01:03 2026 GMT
Not After : Apr 18 11:01:03 2026 GMT
Subject: CN=d3e863c4f4e6723a571e017a0f0b4aea99450fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:2a:81:30:75:3b:82:6f:85:cc:1c:12:85:
b5:28:41:47:ee:20:b9:44:a9:01:85:7f:ea:2c:70:
88:ee:93:b8:74:cc:c1:2d:06:28:b8:4e:bc:46:cc:
7d:2b:c4:16:02:01:a1:e5:eb:61:33:90:88:28:92:
5f:5d:5f:b6:4e:06:f8:fe:06:3c:81:8d:85:48:55:
c9:d1:90:d6:45:aa:54:03:de:6f:99:69:0e:23:6e:
51:0a:77:5f:ce:5a:b8:d8:3b:0a:29:19:7f:f2:d3:
8e:a3:10:8c:35:36:7d:ab:c7:7e:83:27:57:e7:52:
64:60:b9:f9:bd:6f:8c:9f:f1:9e:e0:c2:89:f4:fb:
8c:65:4d:2c:f3:5c:18:37:d3:9d:84:e1:af:78:35:
88:22:1b:f5:4c:a0:d2:3f:47:f2:96:b2:74:03:41:
eb:dc:21:f1:2c:a0:ec:68:d4:af:a8:42:4b:23:1c:
0f:c4:57:64:3c:07:3d:08:46:e3:85:1c:ba:9a:54:
7a:55:c9:3c:b5:52:0e:bf:73:62:44:f8:06:e1:f3:
6c:8a:44:2d:93:2b:31:f9:1f:72:01:2c:b1:df:0c:
6b:ec:97:b4:29:25:0c:dc:f8:2d:27:63:a8:a5:57:
f6:66:c6:74:39:63:2f:cc:74:07:f0:f0:78:cf:6d:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:63:C4:F4:E6:72:3A:57:1E:01:7A:0F:0B:4A:EA:99:45:0F:BF
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:6e:3a:6c:56:52:8c:ae:b7:ab:32:88:a9:b8:88:1c:da:
77:68:43:a6:71:60:60:54:e4:99:ec:cd:37:dd:e1:45:10:46:
50:02:ac:95:2d:bf:54:92:59:17:f4:53:95:6f:4a:55:66:75:
cc:db:c0:0d:b5:9a:40:84:91:b5:98:06:3b:73:f5:74:bc:80:
96:dd:26:4c:97:99:df:1e:9a:6d:ad:60:d2:4c:c7:84:89:ce:
3f:50:25:55:e2:c9:cf:bb:3a:a6:a0:08:dd:c8:0f:ed:e9:ac:
3d:5a:b6:e7:21:83:91:ec:5f:74:7b:08:28:7d:18:6b:6b:8f:
78:76:af:fa:21:e5:5a:20:24:f7:55:b3:42:37:c5:bf:01:f8:
92:9e:5b:cf:4d:28:6a:ea:1c:53:26:aa:d2:72:7f:fa:09:33:
67:7c:e7:20:5e:4c:01:8c:d2:55:9f:4a:ec:70:28:ad:0a:f8:
b2:5a:15:45:f8:b0:4a:2f:59:dd:7a:05:5c:dc:12:27:57:7b:
57:32:35:e5:74:b6:0c:bb:15:2f:08:a4:32:44:b8:2f:bd:9a:
6d:d9:c7:00:0c:4e:14:a8:e0:f7:ee:b8:d9:09:4b:95:a9:78:
53:6e:58:28:b6:3a:03:ee:8f:96:1a:5b:2f:f8:c0:f5:22:7b:
68:25:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:49 2026 by rpki-client