Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: DWh3slrM0O7xXzn5ErxhGrCrdnx+C2tZ+sNZkbQxBg0=
Subject key identifier: 76:75:BD:7A:08:91:9D:E3:64:92:63:16:B3:BE:30:7C:C1:34:09:0C
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019CAAFD515B28B4B25BD6A31304FE9B4DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0F09
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 1LOCi+lQY1z/hCp8HrBlULx/YzGJHZ8wl7uCJnoIc78=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:51:5b:28:b4:b2:5b:d6:a3:13:04:fe:9b:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=7675bd7a08919de364926316b3be307cc134090c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:4b:cc:63:fa:27:c7:c0:38:90:28:22:59:
9e:8d:99:f4:84:ef:19:de:00:35:16:35:f9:1d:e5:
88:c7:be:42:cb:13:3f:e8:25:62:7a:c9:58:08:08:
42:82:42:1f:14:2e:94:c1:df:1f:9c:7d:b9:49:02:
06:4c:ab:6b:94:eb:64:55:58:51:01:8e:20:a6:0e:
c1:27:56:a9:b2:bd:e5:9d:da:b6:78:6b:1e:98:85:
39:35:93:92:41:26:12:75:a0:76:a7:6d:25:f7:60:
69:66:95:45:6d:54:f8:62:f7:3c:b4:28:c9:26:e2:
9d:1f:e5:56:be:4d:2b:fd:eb:23:d3:f9:1e:6d:d8:
58:17:1d:56:6d:67:25:1b:fd:e7:20:34:7d:d3:52:
de:1c:c5:71:8a:d7:0e:c8:1b:88:a9:67:a8:f1:d1:
c3:99:b8:4e:91:ef:cc:3c:e5:66:06:8a:20:1c:5b:
29:3f:fd:5f:b0:93:fb:7a:b1:b0:ba:33:04:32:48:
0c:2a:b6:36:5a:2f:4f:52:75:ad:67:ca:bc:f7:02:
1f:f7:87:5a:3f:b5:f0:6c:b2:3b:12:54:ef:e9:1f:
c9:b4:2f:5d:01:cc:89:49:57:49:13:1d:1e:df:3a:
c6:39:af:4c:c4:58:4e:67:4e:6b:37:7e:36:68:7b:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:BD:7A:08:91:9D:E3:64:92:63:16:B3:BE:30:7C:C1:34:09:0C
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:8f:40:01:37:aa:02:b3:2b:af:d8:60:d5:53:86:76:dd:
0a:5f:db:12:15:19:fe:dc:ae:a4:55:ed:e6:49:a6:21:7d:b3:
5a:48:ff:d8:2a:d8:21:53:da:8c:9f:44:b1:4c:65:11:1d:bd:
04:47:98:77:f4:a3:d6:1b:49:fb:20:ff:1c:37:e7:7f:ae:3e:
87:07:be:60:63:dd:b6:61:ec:ea:06:ab:dc:e0:88:eb:e2:1d:
97:e7:f7:9b:72:f6:99:66:73:16:9a:9e:73:e7:19:ff:53:44:
2e:13:08:05:10:4c:15:37:9f:3b:64:a9:32:70:f6:b5:ea:d4:
60:2e:3c:f8:70:d6:da:2d:29:b9:9d:af:51:15:e7:84:4c:23:
8c:78:29:a5:9d:00:c1:86:85:fa:94:a0:7c:04:19:3f:8f:06:
2e:09:3a:8a:6e:be:08:00:1b:9f:2d:c9:0d:20:51:df:0b:58:
b5:85:72:89:ea:18:db:41:31:49:0f:c6:b6:0d:65:dd:b1:73:
45:bd:3a:78:49:7c:2a:f7:03:65:11:48:47:17:1c:74:bd:9b:
67:c1:53:af:f9:ea:67:e3:e1:b6:ef:36:f9:26:8b:fd:a9:7e:
03:19:38:d6:b2:96:ab:6d:81:d7:ce:4c:67:93:06:96:32:f9:
3a:ad:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:04 2026 by rpki-client