Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: vi/2VYAGLjGxyLecxAJpijsJVZAw6WouDyweic8eoT8=
Subject key identifier: F3:D8:83:A6:D8:3B:BF:19:BB:01:70:F7:8A:AD:61:BA:92:C2:49:C3
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019D99CFE43C3347C6EAC93DE1DDBE1FF6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 1137
Signing time: Fri 17 Apr 2026 05:00:31 +0000
Manifest this update: Fri 17 Apr 2026 05:00:31 +0000
Manifest next update: Sat 18 Apr 2026 05:00:31 +0000
Files and hashes: 1: 0qRIj8FpE8X1N6x5GSHkeAwZpXQ.roa (hash: S2EFxoimo0CCE2MEzDNtzpx1Z0cgiW5Og80JDexN1gg=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: hKUK2ZkXRolU3arkURCSUMeUC0zmvwBSPb//W7CR+oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e4:3c:33:47:c6:ea:c9:3d:e1:dd:be:1f:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Apr 17 05:00:31 2026 GMT
Not After : Apr 18 05:00:31 2026 GMT
Subject: CN=f3d883a6d83bbf19bb0170f78aad61ba92c249c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:ee:05:06:d9:e0:32:df:a9:d1:96:f1:9e:
0a:75:bb:45:96:ff:be:82:e5:a0:41:30:a8:fd:83:
69:4e:48:33:f4:56:3b:21:2f:97:ea:2e:65:17:c8:
31:c4:3f:fe:9e:42:58:97:3b:bd:c2:b3:9d:9c:e7:
21:fe:49:8f:ab:f2:3a:c9:ce:84:24:a5:4d:2d:54:
f5:12:b9:2a:eb:05:c5:b6:ce:43:72:56:b2:d7:c7:
c9:fa:cc:9b:50:a7:a9:8c:7d:df:27:40:3f:7e:c7:
2f:3e:d5:96:9d:9c:ed:27:4f:56:46:5f:b7:75:c3:
57:fc:30:7e:f1:a1:68:d7:04:cb:70:cb:66:3d:3b:
f0:03:b2:a1:12:86:32:46:a3:8a:a9:53:c9:27:e9:
ee:f0:3c:bf:4d:34:e8:c7:a1:09:58:47:24:26:66:
04:c3:ae:b9:69:80:8f:6e:38:9a:1f:1e:e1:b0:2b:
99:37:b6:89:58:6d:a7:fd:25:05:99:a8:15:4e:04:
06:a9:8b:82:2b:06:41:4e:fa:6a:ab:5a:b8:14:1e:
e9:be:99:2e:5b:fd:1a:ef:f1:0b:11:f4:52:cc:59:
17:e6:30:7e:f5:44:41:18:9b:85:6b:37:44:7c:52:
f4:9f:f3:ec:44:83:d3:7d:d7:a7:3a:74:dc:46:c3:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:83:A6:D8:3B:BF:19:BB:01:70:F7:8A:AD:61:BA:92:C2:49:C3
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:25:ca:e6:46:96:0e:66:c3:f4:69:9c:76:39:7b:61:d7:
34:55:26:36:1b:61:15:62:93:80:33:cf:ed:82:db:cd:8f:79:
5e:5e:7f:de:29:a7:12:11:0d:46:fc:eb:20:b1:3e:c4:3f:e4:
47:c2:5a:f3:91:91:7b:c4:51:df:df:2d:29:1a:78:94:e6:8c:
05:25:a3:e6:ef:9c:a7:6b:97:0d:c0:1a:04:91:18:6d:a5:36:
dd:a1:bc:0d:fd:22:81:13:27:3b:7f:07:eb:34:ed:ee:97:3f:
31:6a:81:ad:42:11:09:fa:02:3f:9e:92:af:03:b0:f3:55:74:
e6:e9:8e:d1:40:68:c6:21:62:c3:59:72:11:7b:dd:0a:04:5a:
b0:dd:b6:25:79:89:0a:c6:00:a3:d9:2e:73:75:9a:fa:d7:bf:
04:cf:1d:38:4e:8c:71:b4:89:d4:d2:28:dc:79:6e:c6:fe:63:
0b:6c:87:8b:80:02:29:37:65:be:87:db:8e:e0:79:d9:44:25:
94:71:30:63:1b:e6:38:b0:25:94:97:69:88:f5:6c:80:17:60:
85:47:a4:89:cf:b2:cf:16:86:11:67:76:4c:e9:e5:22:ed:84:
00:ee:73:a1:6e:d2:01:67:0d:2c:71:dd:6b:ab:02:0b:13:14:
4a:18:ee:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz+Q8M0fG6sk94d2+H/bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm
N2U3NzcwHhcNMjYwNDE3MDUwMDMxWhcNMjYwNDE4MDUwMDMxWjAzMTEwLwYDVQQD
EyhmM2Q4ODNhNmQ4M2JiZjE5YmIwMTcwZjc4YWFkNjFiYTkyYzI0OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDHuBQbZ4DLfqdGW8Z4KdbtFlv++
guWgQTCo/YNpTkgz9FY7IS+X6i5lF8gxxD/+nkJYlzu9wrOdnOch/kmPq/I6yc6E
JKVNLVT1Erkq6wXFts5Dclay18fJ+sybUKepjH3fJ0A/fscvPtWWnZztJ09WRl+3
dcNX/DB+8aFo1wTLcMtmPTvwA7KhEoYyRqOKqVPJJ+nu8Dy/TTTox6EJWEckJmYE
w665aYCPbjiaHx7hsCuZN7aJWG2n/SUFmagVTgQGqYuCKwZBTvpqq1q4FB7pvpku
W/0a7/ELEfRSzFkX5jB+9URBGJuFazdEfFL0n/PsRIPTfdenOnTcRsNrYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPYg6bYO78ZuwFw94qtYbqSwknDMB8GA1UdIwQY
MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt
YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy
LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/clyuZG
lg5mw/RpnHY5e2HXNFUmNhthFWKTgDPP7YLbzY95Xl5/3imnEhENRvzrILE+xD/k
R8Ja85GRe8RR398tKRp4lOaMBSWj5u+cp2uXDcAaBJEYbaU23aG8Df0igRMnO38H
6zTt7pc/MWqBrUIRCfoCP56SrwOw81V05umO0UBoxiFiw1lyEXvdCgRasN22JXmJ
CsYAo9kuc3Wa+te/BM8dOE6McbSJ1NIo3Hluxv5jC2yHi4ACKTdlvofbjuB52UQl
lHEwYxvmOLAllJdpiPVsgBdghUekic+yzxaGEWd2TOnlIu2EAO5zoW7SAWcNLHHd
a6sCCxMUShjuBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:14 2026 by rpki-client