Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: wpomKk1jM/bdYuyW/x0TaNoES5ztajsVHm8VhNikbIk=
Subject key identifier: A0:4F:31:B0:13:C7:85:EB:2D:D5:B8:89:8A:AE:9E:8B:24:8F:69:6D
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019D9A74DCBC5AA818EFD213A1C8B1C14365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0F85
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 0xCNm0j+9c6AEOkorAIF07toFCXgSjSq7DLCl/lYyHo=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:dc:bc:5a:a8:18:ef:d2:13:a1:c8:b1:c1:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=a04f31b013c785eb2dd5b8898aae9e8b248f696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:33:1a:5b:ee:7e:a0:5d:f3:6d:ef:f3:ac:
a4:cc:27:05:fd:d1:3b:c2:ee:ec:1f:58:fc:62:78:
7b:a1:d6:7c:ce:30:1c:45:ca:c5:09:5c:47:37:12:
af:95:d3:19:c4:f8:49:53:00:97:78:4d:ef:cb:a9:
ef:68:58:e0:e6:12:f6:bc:5b:70:4c:a3:3c:57:1e:
9d:4a:e6:57:af:3e:20:2a:87:b6:38:e6:a0:ab:64:
82:cb:12:31:f5:f1:11:49:c7:b1:66:5c:77:42:93:
25:42:77:38:9b:26:8a:f1:67:54:d2:d3:67:5a:40:
c7:54:72:1b:54:63:4a:f9:00:a9:8e:4b:b0:c4:7e:
a7:4e:14:e5:ba:c5:0f:b4:a2:59:f4:9a:21:4b:62:
2d:0e:f8:ca:71:d8:42:34:00:3c:bd:29:71:90:67:
b7:37:90:fa:ab:b8:ff:e5:a1:10:20:0b:48:78:5b:
53:0b:41:0c:2b:00:d0:b8:1e:73:c5:84:ee:1f:9a:
f4:e0:bb:0c:02:b6:46:0b:74:cd:d1:ff:74:7d:55:
d0:41:b0:af:22:b9:26:ef:6b:e1:19:46:a6:2b:d0:
fb:f5:cd:bb:4d:ca:32:40:86:6a:8c:41:4b:da:d3:
78:b4:9f:cf:5c:af:30:cc:7c:0e:af:e0:62:16:59:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:31:B0:13:C7:85:EB:2D:D5:B8:89:8A:AE:9E:8B:24:8F:69:6D
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b3:27:1f:ac:7c:31:6f:05:2a:16:fd:a5:ed:37:72:22:7e:
cb:b6:dd:90:6a:f3:44:02:0e:68:63:4b:4e:9b:a9:c5:e9:9d:
5f:43:2c:e2:2c:b6:47:19:7e:b6:eb:b3:98:5d:cb:16:45:11:
c3:c7:e1:c3:3d:45:b3:3b:4b:56:19:a9:3d:3a:ae:69:09:04:
9a:c6:79:f7:d0:17:bf:77:c7:a3:e4:e2:c3:86:51:03:62:0d:
95:4e:36:88:fe:d3:32:aa:5a:7f:f5:36:d3:6f:a9:dd:f0:b0:
0d:3a:b7:a9:d8:06:72:5a:10:9c:db:7b:27:58:e2:6e:5f:b9:
6e:18:80:e2:cf:44:19:b9:8d:b0:1a:40:1e:e6:c6:9c:62:11:
b4:f5:34:ce:1d:3a:57:9f:d4:35:f0:22:a3:c5:47:92:6b:6d:
f4:dd:04:af:96:34:53:71:36:46:24:17:22:f4:f7:6f:02:39:
27:29:0d:19:e9:7d:d9:29:1b:f9:88:db:e8:b5:d1:4e:e1:f1:
ec:16:15:5b:a5:8c:35:64:25:13:8b:cc:60:e5:23:54:fe:19:
84:c6:af:78:f7:cd:6e:a6:14:5f:9e:89:85:1b:c1:0b:33:2f:
73:3d:a1:e8:9a:ce:c8:52:49:a0:d5:6f:9f:2f:6f:29:c6:f0:
37:d2:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:25 2026 by rpki-client