Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: W9+3HjAfYuWwEXK+vAo45vql183O3wlGapruvNMVQ8U=
Subject key identifier: 09:87:AB:13:85:F2:3A:20:E0:80:DC:8B:25:FD:64:A9:80:E1:28:B4
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 01A13334F168262458A2F03D024BB5F63121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 17F0
Signing time: Tue 13 Oct 2026 03:01:10 +0000
Manifest this update: Tue 13 Oct 2026 03:01:10 +0000
Manifest next update: Wed 14 Oct 2026 03:01:10 +0000
Files and hashes: 1: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: ZuEewklxvehBtiv2ljJvqEIvJU/5BaonbEFZwnTlRXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:34:f1:68:26:24:58:a2:f0:3d:02:4b:b5:f6:31:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Oct 13 03:01:10 2026 GMT
Not After : Oct 14 03:01:10 2026 GMT
Subject: CN=0987ab1385f23a20e080dc8b25fd64a980e128b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:21:31:14:4a:c3:9b:96:a1:83:88:f3:3f:
a3:4c:7d:ab:80:60:fa:11:36:9a:79:9e:8c:08:f6:
6f:8f:28:b9:db:44:9a:87:38:5b:4e:89:2e:0f:a6:
96:ad:05:af:60:aa:58:8c:d0:a2:82:68:37:b3:da:
fd:a9:be:94:6b:f7:f9:51:00:aa:23:3d:bb:16:95:
83:42:f8:4d:a5:7a:9b:0f:5d:bc:ac:db:33:59:82:
50:91:6f:f2:77:d6:eb:ca:15:08:9f:b3:b4:5b:27:
26:0d:27:c7:f2:b6:66:04:0f:a6:5f:f0:27:8d:18:
4f:de:f4:a4:94:95:8b:a1:33:fd:e8:f9:7b:06:31:
d1:52:bb:f9:0e:5c:10:5b:fb:39:96:47:0e:73:2a:
24:0c:0f:8d:79:3d:83:f2:5c:96:37:30:f9:c8:30:
36:d4:c6:da:5d:80:38:78:83:4e:c8:84:cb:95:b8:
34:39:32:7d:44:ad:03:5d:17:b4:3b:22:5d:5b:fc:
ae:d0:04:c0:bb:c9:65:b6:46:1b:45:b2:47:3d:dd:
d1:b1:d7:df:bb:53:13:eb:24:43:20:bd:09:c2:07:
8d:4d:4f:cd:2c:97:b9:28:de:28:b8:10:de:86:61:
6e:6e:02:f6:53:ba:22:c4:e1:7d:6c:4d:2f:01:c4:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:AB:13:85:F2:3A:20:E0:80:DC:8B:25:FD:64:A9:80:E1:28:B4
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:12:34:8d:4b:aa:18:d6:05:79:25:6d:b4:c1:38:1d:75:73:
55:ff:56:6e:fe:8f:a0:d2:cc:11:13:cb:06:c9:b1:07:c1:41:
dd:7b:63:7e:23:97:f0:fb:15:d6:3c:27:7e:4f:c4:2d:09:a5:
2f:43:ab:da:4f:91:6e:19:a7:cb:66:eb:e6:02:1b:0b:62:3f:
31:18:92:68:a4:9e:ab:93:c9:62:b5:95:65:6d:b9:72:2a:20:
4f:ef:1f:67:1b:79:c1:ba:32:f9:d7:c0:24:b8:33:00:dc:5f:
17:15:58:8f:e8:9d:1c:86:aa:cf:16:be:09:d7:5d:87:75:eb:
7f:18:87:55:a8:1e:04:38:86:64:7d:7a:0b:0f:61:3b:84:50:
33:e3:ad:a4:81:2e:78:d8:5c:5d:e2:33:70:f5:ec:5e:c2:1c:
a1:de:65:00:9f:89:0b:b7:4f:ff:1f:87:39:18:4b:da:5e:38:
43:49:97:45:8f:a1:e1:39:63:70:1b:36:c2:0b:41:89:56:32:
eb:bf:8a:c7:51:a1:f2:78:d6:ef:41:de:4f:52:68:6e:58:b4:
6c:5a:20:83:37:db:e2:25:1a:64:c2:e2:a8:00:d4:e8:8d:91:
c8:5c:80:53:27:27:d9:84:83:87:da:4c:12:2c:53:66:0f:c6:
ba:84:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:29:44 2026 by rpki-client