Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: Rrr66pCe8SNnDLvv8BojLsBNP3fb9YPezI49tnI2+B0=
Subject key identifier: C4:49:F8:8D:BB:B3:C6:5B:AC:61:B0:F7:97:61:70:A3:58:DD:38:FF
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019CAB3495F5BEEB3E873AAD671AB585213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1597
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: BNRF3iFBib6uH8-zEGx9zfO4cH8.roa (hash: 4yacbd98T/BVCl2ct+o0CMmFJRidAbOdWI6U10zor0Y=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: rNFz9FIg8XM/jAFZlOWaoDbn+2b2ppfnjtuxuViyZW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:95:f5:be:eb:3e:87:3a:ad:67:1a:b5:85:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=c449f88dbbb3c65bac61b0f7976170a358dd38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:c8:b0:35:ff:64:ca:8a:d6:5e:e1:7d:d3:
25:a8:6d:eb:6f:b7:c3:37:33:a4:98:96:f2:2b:24:
2d:e0:06:13:b2:9f:64:b4:df:c5:4e:01:a7:44:82:
b6:34:e0:ed:b6:45:f2:d9:15:e9:97:b5:82:cf:77:
dc:d6:58:6d:9e:9a:59:dd:12:a4:3f:76:e8:52:65:
e1:da:a1:9c:08:b2:f8:7d:dd:93:c5:aa:da:c7:bf:
12:4b:e3:98:f7:83:40:b8:8c:85:88:51:48:25:ca:
1d:dc:12:b7:0a:12:40:b2:74:09:0f:ed:1f:09:01:
ad:81:71:fe:41:d4:64:23:1f:09:27:a2:cc:29:99:
54:6c:74:13:d1:78:e0:9e:eb:ab:9b:94:cf:29:0b:
88:76:6f:8c:8b:79:cb:73:e0:76:81:13:06:08:76:
ac:7e:95:50:4c:6c:86:e9:bb:f4:16:6d:7b:77:29:
7e:a7:5a:81:f8:c3:28:fd:f9:5c:0d:2f:fb:70:72:
f7:3d:3f:ec:6b:9b:87:93:a3:41:88:d2:86:b4:8f:
ef:d5:15:d2:16:c1:82:c1:c5:34:20:1a:46:91:48:
fa:28:05:3f:95:e8:69:a6:da:b6:47:fa:93:76:9d:
3c:65:ad:77:98:23:1f:99:29:80:76:88:f0:85:ed:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:F8:8D:BB:B3:C6:5B:AC:61:B0:F7:97:61:70:A3:58:DD:38:FF
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:83:1c:ac:d6:d6:30:58:df:91:2d:79:db:6d:ec:3b:32:
1d:24:76:75:4b:54:7c:1d:f2:48:f7:0b:fc:dc:4c:e3:0a:bc:
db:db:03:d7:2d:8f:eb:c4:90:63:6b:b0:55:22:a6:22:0f:b6:
ba:92:ce:c1:95:98:53:56:02:91:4a:db:0b:54:7f:2a:fa:8c:
88:0e:55:a2:a6:91:8f:34:3b:97:0d:ae:22:59:b5:27:95:d1:
34:3d:3c:69:0f:12:83:fe:04:6b:aa:b8:24:3a:40:18:1c:8a:
0e:30:68:2c:8c:5a:88:5b:8c:5f:98:8f:75:f7:f3:09:e5:06:
f1:2c:52:3f:10:64:72:9f:2c:fc:f4:5c:ef:a9:46:3f:4d:21:
bf:91:47:f1:27:91:ca:90:52:70:5b:92:4a:6a:7a:eb:da:99:
35:4a:3c:de:05:a5:9c:c8:d1:65:8e:bc:1e:d5:6e:15:ff:0e:
c4:f6:18:90:46:51:49:7e:ad:10:9f:57:0b:c5:db:96:e0:f9:
a0:b1:2a:87:92:32:7e:56:70:51:50:b4:e1:e0:32:1b:c8:0e:
aa:d2:32:cc:30:a6:67:d2:3c:38:a5:b8:d2:8b:25:28:5f:62:
8c:90:8d:a8:a7:cb:6c:23:11:ae:1b:ed:d5:31:b7:79:e9:31:
de:32:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:37 2026 by rpki-client