Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: uoTNr+M6EXfkxukQkxh8VqwzffxrUT3yU2f036/C8aQ=
Subject key identifier: 89:80:BB:3E:CE:C1:3A:1F:9B:8B:79:50:75:4C:18:8F:6B:17:14:41
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019FAB9AC6AF05FD29F5BC6BA82261A5F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1725
Signing time: Wed 29 Jul 2026 02:01:14 +0000
Manifest this update: Wed 29 Jul 2026 02:01:14 +0000
Manifest next update: Thu 30 Jul 2026 02:01:14 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: HPB5TmON/A+XX/kqMx68EH1CwApAaidICy/Qsx49458=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c6:af:05:fd:29:f5:bc:6b:a8:22:61:a5:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jul 29 02:01:14 2026 GMT
Not After : Jul 30 02:01:14 2026 GMT
Subject: CN=8980bb3ecec13a1f9b8b7950754c188f6b171441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:86:51:03:1a:5e:06:98:89:da:15:d2:45:
ec:b7:14:06:79:00:6d:97:d5:9a:43:29:4f:86:91:
ef:65:b7:ee:28:69:ae:9d:c9:d7:8b:22:60:78:02:
7e:a8:07:e1:22:00:c0:04:57:c7:15:4f:f9:a3:43:
58:a5:a9:c5:b9:97:cb:ad:71:3a:30:ea:06:99:04:
a0:b9:fb:33:e3:25:da:9d:83:e1:1f:dd:14:4f:2b:
16:ee:bb:e4:a2:af:aa:fc:65:2f:ac:d1:c9:8c:95:
89:56:2c:f2:23:14:38:59:06:6b:b9:02:15:35:c6:
6b:58:9f:be:fe:fb:91:06:7a:41:12:6c:d2:c5:81:
0f:ce:31:bf:94:67:af:23:90:13:7d:a2:e0:b4:ed:
dc:55:23:c3:d8:59:49:5a:20:92:28:ab:2b:94:0b:
17:26:7b:cb:cf:a0:4b:09:09:72:57:44:0a:e0:d5:
05:ad:a0:c6:a5:25:0a:ba:b3:d7:a5:10:dc:81:bf:
97:e7:50:72:9a:e8:54:98:00:f4:36:f8:66:45:07:
22:f3:df:df:1f:5a:c9:89:2a:d1:aa:97:70:60:e0:
89:89:22:45:5c:e8:27:00:d8:70:d7:9a:b8:43:6f:
8a:f3:7d:85:05:03:2d:ba:3a:86:8f:ca:05:8d:71:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:BB:3E:CE:C1:3A:1F:9B:8B:79:50:75:4C:18:8F:6B:17:14:41
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:53:d5:bd:8b:29:87:bc:fa:17:c4:71:e4:e7:a8:9a:c3:ef:
a3:87:27:1c:18:bb:0e:ab:25:a7:94:b7:f2:78:4c:f1:ab:70:
3d:10:b4:0d:d6:75:3d:ca:48:4c:fe:30:da:ea:fc:e3:67:0f:
93:75:28:3d:80:ed:d6:3a:1d:31:7d:0e:a2:a4:07:d6:f0:da:
7b:b2:af:3e:38:6d:3d:0e:60:85:b1:e7:4f:ce:0c:d1:84:65:
65:8b:c9:29:fe:c2:5a:95:14:16:43:e6:eb:aa:7a:67:58:a1:
fc:43:73:9a:89:9f:a8:ec:5c:70:01:16:21:4e:60:2c:3b:3c:
e7:28:82:12:38:20:bb:f5:32:87:52:f0:0a:f2:19:9c:ac:ce:
be:b7:2f:60:aa:51:da:43:23:02:95:5d:f4:87:84:7c:ed:ff:
ea:35:fb:9c:a2:31:f8:46:bb:ba:ce:29:d8:e7:e0:51:6e:59:
27:0e:5d:88:2b:38:32:8e:c2:27:fb:d2:f6:2b:83:90:59:d9:
59:85:dc:57:2c:e2:66:79:8e:79:18:bf:87:98:7c:0b:e3:7e:
c2:de:8e:c8:08:16:9b:2e:21:17:bc:3b:a2:af:b9:58:c9:f8:
e2:87:f8:95:b7:d6:e6:a3:31:9b:f4:ee:21:6c:16:05:46:76:
dd:6e:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:46 2026 by rpki-client