
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: I+S2DwySc9+u9XelKf3eLAGrlH1xTa9igpKjkjrqt/M=
Subject key identifier: E0:97:C8:7E:77:E8:DB:C7:4E:40:41:40:0E:56:D3:79:DA:71:AF:A7
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01A0D3159E95E35EAFED686AEE0B43049B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 1130
Signing time: Thu 24 Sep 2026 11:03:24 +0000
Manifest this update: Thu 24 Sep 2026 11:03:24 +0000
Manifest next update: Fri 25 Sep 2026 11:03:24 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: qQz7B5nRE5u5QSK+oL/jlfNuKl4f4q3PXgWzvG79jeM=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:9e:95:e3:5e:af:ed:68:6a:ee:0b:43:04:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Sep 24 11:03:24 2026 GMT
Not After : Sep 25 11:03:24 2026 GMT
Subject: CN=e097c87e77e8dbc74e4041400e56d379da71afa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:bd:d7:1c:12:af:91:31:99:85:fe:55:28:
78:4a:23:7d:88:bc:5a:82:97:d3:7c:7d:9f:7c:2b:
17:86:40:e2:cb:01:de:ec:cc:d3:bc:46:a8:f4:bf:
9d:df:07:1d:51:ac:db:ce:7f:42:d8:49:16:b6:81:
31:91:29:d3:0e:12:52:0c:d6:0e:8c:db:c9:fd:de:
d3:90:19:fe:d4:d6:32:14:ca:3d:ad:0e:6e:e3:1b:
90:f4:61:14:5a:d6:5f:cd:c0:fa:01:b5:51:73:61:
54:91:da:5f:27:00:32:6e:9b:10:0c:4d:bf:80:8e:
21:da:96:da:37:a8:1c:e0:73:01:55:ca:1a:dd:d7:
63:2c:f0:dc:51:e4:3c:aa:1e:f9:e1:99:1d:9a:c5:
72:82:c9:6b:bd:6c:ec:15:2c:c0:4f:31:b9:3b:88:
59:78:51:d5:49:b6:87:e2:2f:11:cd:42:b4:44:7a:
72:0f:1d:bc:04:95:1a:82:ed:b4:cb:fe:5c:45:93:
53:67:eb:78:1e:91:34:a2:e1:ca:c6:8e:1c:ed:0b:
74:9f:1f:3c:62:53:88:94:56:68:7b:b0:42:85:76:
38:e8:5f:10:fa:5a:5d:45:55:ad:76:e3:6f:ad:b3:
33:58:ca:ec:ef:58:95:c8:57:29:ec:57:ab:cf:7c:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:C8:7E:77:E8:DB:C7:4E:40:41:40:0E:56:D3:79:DA:71:AF:A7
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:35:7e:ea:95:3a:52:76:a4:b2:fd:de:0c:96:fe:f1:6b:97:
b1:d6:68:30:87:6f:1d:3e:0d:d1:be:e4:2b:16:da:45:5e:3f:
92:e1:23:66:07:40:ea:62:f4:97:ed:14:bc:eb:0e:dc:90:bb:
23:1b:be:a2:c1:39:28:6e:bd:ca:ce:97:ba:5c:50:7b:3e:13:
1a:c8:90:bc:04:69:a0:84:58:24:04:50:97:31:0f:b9:9e:16:
55:68:3e:89:f3:75:47:7f:f7:db:c9:12:7c:a6:22:a7:d4:8b:
34:7f:99:23:2f:a3:1f:27:65:38:99:3e:b4:77:1b:28:df:63:
f5:ec:40:24:ab:14:f9:1a:ff:32:6f:26:c8:52:2a:c2:9a:8c:
c4:eb:75:3b:79:ee:a1:16:a5:ff:31:82:99:9e:0f:5b:d6:2e:
b3:93:d4:0b:c2:18:66:5e:8e:31:33:2f:e6:e9:03:f6:88:16:
e6:9a:97:34:de:5a:10:c0:a6:e6:f4:01:ec:53:67:c6:b1:2a:
d1:52:f1:b3:74:68:3d:f2:0c:41:7f:4d:3b:93:b2:dc:d5:01:
59:35:62:ca:2a:ef:d8:f2:c7:d7:3c:dd:25:cb:5b:3f:fc:02:
40:8f:49:72:6f:e0:d4:81:2c:44:34:b6:37:e9:2e:d4:61:00:
7f:10:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:23 2026 by rpki-client