Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: y5nDNbkunLCxfoDSEp+J1Pzuph2HqYBeaDmKksLCaE8=
Subject key identifier: 4E:AC:E3:58:4C:14:EF:AA:EA:BD:6F:AC:64:B2:3E:23:02:1C:AD:C2
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019ED34F485A610800506DADF8C49D8D19EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 1027
Signing time: Wed 17 Jun 2026 02:00:48 +0000
Manifest this update: Wed 17 Jun 2026 02:00:48 +0000
Manifest next update: Thu 18 Jun 2026 02:00:48 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 4HFzynKqc0qnvZ09rj0CBlhiAT7A73ZrQ6m0iZmkjqI=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:48:5a:61:08:00:50:6d:ad:f8:c4:9d:8d:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jun 17 02:00:48 2026 GMT
Not After : Jun 18 02:00:48 2026 GMT
Subject: CN=4eace3584c14efaaeabd6fac64b23e23021cadc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:87:dc:c8:21:07:bd:7d:e4:91:01:94:e7:
89:79:4a:76:2e:04:a5:b0:76:9f:61:1d:88:ef:fa:
50:40:00:5c:56:00:6b:e0:7c:7d:86:65:43:5d:63:
12:f3:4d:62:83:5a:d1:99:e6:cd:be:dc:bd:68:26:
cf:89:2d:8c:66:fb:92:7a:25:05:fb:cf:eb:92:b6:
e7:e5:01:cd:b2:db:17:5b:d0:26:fd:9a:29:d3:b5:
e9:02:a6:db:01:8f:a8:0b:13:ed:03:52:f0:c6:56:
8e:68:af:35:ee:6f:01:fb:b0:7d:94:15:8f:88:ad:
e2:d8:27:c1:18:a7:97:1c:f7:d4:b3:ac:7f:a0:cf:
e8:c7:2b:96:89:9d:dc:06:a2:06:bf:b4:84:16:1a:
63:3b:c1:ca:f3:87:06:cc:29:75:71:3e:24:c7:c5:
e0:e6:ed:cb:3b:94:46:2a:fe:c8:4d:e3:c1:db:41:
85:e5:25:06:0f:6e:a7:dd:bb:e9:ea:2c:98:dd:b5:
99:9b:d1:e6:5a:12:cd:b1:90:60:e1:0e:b4:6a:ea:
ed:7b:f5:bf:7a:31:84:9a:ff:5b:15:54:52:2a:f1:
0a:62:a5:f7:df:99:72:c2:4f:33:b8:50:c6:aa:cc:
f1:5c:a3:0f:c9:2a:c5:36:b8:c4:30:9b:05:bc:c8:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:E3:58:4C:14:EF:AA:EA:BD:6F:AC:64:B2:3E:23:02:1C:AD:C2
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ff:53:c6:ac:1a:20:41:31:db:6f:92:8c:1b:34:f0:ae:9e:
88:13:64:51:bb:a2:88:92:c1:f8:1c:0c:96:09:47:ae:9a:fd:
ed:bb:0d:d6:11:c7:81:a2:8b:c7:95:42:95:43:32:3c:ba:af:
69:67:a0:35:64:bf:f7:4e:25:79:05:ae:d2:18:5f:78:3a:31:
b2:a4:5e:1e:a1:fb:25:03:ee:fc:64:73:b7:91:de:53:b1:2b:
7e:df:36:78:1e:2f:b4:b3:4b:c9:eb:62:14:13:00:79:52:e7:
94:54:ac:38:1b:bc:db:3c:3e:a4:ec:83:4a:e4:c2:32:7a:2b:
ee:2e:00:0f:8e:0a:58:1b:7d:de:e3:e9:ab:39:63:3a:91:32:
d4:9a:f8:25:81:36:ad:8e:90:4b:0a:87:83:0b:67:85:e9:a4:
6e:99:7b:24:56:6a:b8:ea:06:24:c8:b0:d7:17:9a:d7:5a:20:
b6:cb:2e:43:f8:b3:3b:34:eb:fa:be:e2:37:d4:e3:eb:1b:eb:
fe:5d:33:3b:ab:75:72:33:3e:1e:e0:0b:e3:85:47:e6:a6:3a:
13:a8:88:52:06:64:0d:f7:46:d0:a3:4c:bd:6b:b3:81:18:9b:
3b:03:ea:95:df:e5:56:1d:f7:67:c3:6a:26:bb:13:fb:e0:3b:
8e:72:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:40:37 2026 by rpki-client