Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier: hloFQ1y3L5zsd1ByQD4hnCaPYuxlgsLtoXA0ovQ1O5o=
Subject key identifier: AB:35:19:13:83:64:38:00:B7:59:6A:F8:94:46:5C:7F:C5:8A:7F:C1
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 019D9AABB23192A7B0A801D50D0F1EFF277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number: 140C
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: v-pMKzPNfy5rtd72CjyjHSP_0fI.roa (hash: EF0zddsGgRS422TMKGAJaOiCyP7MY9L2A1NyAEExYsA=)
2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: 3the7YpVJLT5WzVswrVtxIsnstMzHABJ+lTVSM+l7Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b2:31:92:a7:b0:a8:01:d5:0d:0f:1e:ff:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=ab35191383643800b7596af894465c7fc58a7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:c9:e1:07:bf:29:d2:02:9f:ae:77:b8:a5:
b4:5e:02:09:b2:f8:3d:6f:07:55:6c:59:e6:29:8c:
4a:69:f4:ab:a8:1d:0a:80:da:8f:c8:a4:59:1e:e4:
2f:40:57:93:f6:17:76:da:7f:42:84:28:16:f3:61:
fa:fb:05:03:ae:c8:5c:b3:cc:cb:10:b2:a9:0a:23:
70:f4:fa:95:50:e1:cc:09:e6:78:98:08:5d:3c:75:
c8:46:bd:15:50:45:44:a8:62:dd:41:5b:61:1a:ea:
ba:a9:96:9c:4f:3e:7f:6b:5d:8f:99:59:55:66:f3:
89:95:12:53:c2:47:a8:ac:f5:13:1c:f1:b0:da:64:
9b:39:4d:93:0e:61:60:1e:ea:bb:e8:be:65:0c:c5:
5a:bc:5f:81:49:e0:c6:3f:ed:0d:47:12:a6:68:5e:
e0:6a:2b:07:e9:4e:79:8c:d9:0f:9b:59:a9:e5:8a:
e4:f3:1a:46:49:c7:7d:4d:1f:21:85:40:55:b3:99:
c9:2e:f7:1d:fe:cd:3a:67:3b:79:cc:8c:09:cb:3f:
c1:3e:94:93:dc:03:de:3d:b8:e5:38:48:ee:30:7a:
fd:88:dd:56:de:75:91:04:9c:0b:e9:4c:ba:2c:bc:
cc:c3:ff:77:6e:42:f6:6c:bd:aa:aa:be:e1:ac:f4:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:19:13:83:64:38:00:B7:59:6A:F8:94:46:5C:7F:C5:8A:7F:C1
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:1c:ac:3b:f7:8c:38:1d:32:67:65:2c:af:45:f1:ff:18:
15:2b:0d:89:22:48:6e:63:61:e6:8c:40:9f:cc:ef:15:85:1b:
95:5d:81:b7:96:6b:a5:89:11:f1:41:79:3b:d9:5b:c1:24:e9:
f5:41:c6:73:b3:0f:f5:b5:8e:e0:68:fd:63:54:4c:9e:15:f7:
1a:88:b6:8e:7d:6b:fb:31:01:9d:44:ab:64:a2:f8:6c:da:e1:
6f:e6:66:6e:55:45:a0:6d:e3:5a:c6:38:43:21:03:31:86:33:
e5:76:cf:44:59:7c:f4:58:63:57:be:61:64:bf:db:8e:97:49:
9e:f6:49:1d:d8:c6:1d:cf:19:f7:5a:81:df:b6:41:95:3e:e3:
96:0c:b8:59:91:b4:58:1d:ef:11:0a:7d:2a:41:02:4a:e4:cb:
b6:1d:0a:00:9a:f3:e8:bf:26:69:1c:1b:a5:91:de:d2:b0:80:
22:e7:f8:bb:e9:b7:e0:03:e5:ff:5b:90:a7:1b:e6:30:57:83:
9c:aa:81:63:7c:f3:04:9f:ec:2b:1a:5b:fe:b5:34:0e:e7:87:
54:cb:4e:4a:f2:d0:75:19:10:28:94:78:9b:ce:9a:a6:cc:b5:
78:ec:39:f4:8f:d0:82:9d:7e:32:06:84:14:f8:82:04:df:ba:
fc:a3:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:47 2026 by rpki-client