Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: CtjZNYWENZ+GKnb158CkSdxXhcZKFwvoyQ4L73A7JOY=
Subject key identifier: E5:67:65:3A:6F:7D:8A:B4:52:6F:E7:18:D3:1F:54:5D:E7:BD:6B:66
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019CACB54E19531F1CCE60E5E5FC45067AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 08B0
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: KmSBZaMp9zTTfUAoAl0H7ypLrktEOxyMgNxWmM/Ly7g=)
2: kBiWJKONqx_8EJPfrqy-KE44x6Q.roa (hash: SVLH+Gw9sGMbTjjOdTtaqUxTQmICEWWbtA+6NK4dItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4e:19:53:1f:1c:ce:60:e5:e5:fc:45:06:7a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=e567653a6f7d8ab4526fe718d31f545de7bd6b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:d1:e6:e2:80:5d:d1:f2:4b:06:b6:9e:00:
5d:c9:4c:cd:06:6e:cc:2f:9a:a1:b8:32:20:dc:a3:
34:73:6c:25:94:7a:c6:49:d6:7f:58:78:17:4a:26:
e0:28:18:59:14:a3:92:a9:6e:9b:97:e8:09:8e:a9:
4f:06:0b:90:e3:fd:4c:e7:b7:61:3f:9f:1f:85:47:
2d:5d:08:22:62:ae:74:80:bd:70:6c:82:0a:32:0c:
07:dd:39:c7:ea:0e:c1:1c:08:3f:fb:c1:88:6a:98:
49:a4:07:a3:e7:0a:e8:75:88:a9:bf:d1:0a:01:ea:
0e:97:42:2e:76:9e:17:4e:35:c1:3c:d9:c0:b4:f9:
13:5a:d5:d8:48:fa:05:f6:7e:30:e3:cf:e7:55:50:
27:bd:47:11:a0:ff:dc:f1:e1:11:49:fa:55:72:70:
1f:5b:a3:fa:f3:67:74:dc:22:b3:48:01:61:54:3c:
62:6c:89:87:02:60:0a:dc:0b:50:06:3f:f7:a1:ec:
96:75:ea:7a:02:81:d4:5a:7f:23:af:2d:d2:df:c4:
74:34:ba:14:95:b4:c2:94:fb:d8:a8:c2:f3:cf:e1:
94:38:0b:e3:67:d9:1b:14:de:bc:80:5d:83:c2:f7:
3e:b3:66:91:a5:b2:a5:b0:ba:99:74:f6:1b:c3:63:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:65:3A:6F:7D:8A:B4:52:6F:E7:18:D3:1F:54:5D:E7:BD:6B:66
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:e9:27:7f:d3:9b:37:a7:d5:e3:d3:d2:d1:ee:7a:22:0d:
7d:8a:6f:e4:de:f7:ec:30:bb:99:18:f6:77:6b:c6:cd:99:2c:
7f:13:0e:35:bd:db:2a:9c:b5:4c:4c:8e:3f:22:df:50:1a:31:
7d:35:6a:68:94:f3:7c:78:31:fe:3b:86:1b:62:43:c8:aa:78:
0b:9e:17:ef:c8:d9:44:e9:98:86:37:55:d3:d6:d2:7d:19:16:
12:23:5f:ae:07:f1:4d:15:b2:2b:79:b7:41:ca:e3:9a:ce:5a:
7f:5a:df:a8:b7:4d:07:1b:97:aa:70:31:2c:cf:cd:33:c7:88:
94:1b:1a:f4:b1:15:9a:4f:be:76:77:d3:11:4e:20:4c:08:68:
75:d8:69:ff:83:8a:e0:92:86:4b:82:1e:83:46:ad:16:26:9f:
da:47:f9:9a:a9:35:78:0b:5f:a1:04:38:44:f7:29:d7:8b:54:
3d:cf:86:04:3e:48:f4:1f:7e:bd:7f:d9:e9:38:ab:b0:5a:a3:
ca:ed:76:56:4d:17:2b:63:cf:05:bb:4b:9f:bd:c4:3b:54:b8:
1e:56:4a:7b:3a:d8:3d:57:4f:a1:99:21:a0:76:72:47:dd:bd:
03:03:c0:6d:1f:51:1f:a8:48:ac:69:f5:a4:a7:c9:68:4e:3d:
2c:8e:43:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystU4ZUx8czmDl5fxFBnrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjYwMzAyMDQwMTI4WhcNMjYwMzAzMDQwMTI4WjAzMTEwLwYDVQQD
EyhlNTY3NjUzYTZmN2Q4YWI0NTI2ZmU3MThkMzFmNTQ1ZGU3YmQ2YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG7R5uKAXdHySwa2ngBdyUzNBm7M
L5qhuDIg3KM0c2wllHrGSdZ/WHgXSibgKBhZFKOSqW6bl+gJjqlPBguQ4/1M57dh
P58fhUctXQgiYq50gL1wbIIKMgwH3TnH6g7BHAg/+8GIaphJpAej5wrodYipv9EK
AeoOl0Iudp4XTjXBPNnAtPkTWtXYSPoF9n4w48/nVVAnvUcRoP/c8eERSfpVcnAf
W6P682d03CKzSAFhVDxibImHAmAK3AtQBj/3oeyWdep6AoHUWn8jry3S38R0NLoU
lbTClPvYqMLzz+GUOAvjZ9kbFN68gF2Dwvc+s2aRpbKlsLqZdPYbw2P8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVnZTpvfYq0Um/nGNMfVF3nvWtmMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHrpJ3/T
mzen1ePT0tHueiINfYpv5N737DC7mRj2d2vGzZksfxMONb3bKpy1TEyOPyLfUBox
fTVqaJTzfHgx/juGG2JDyKp4C54X78jZROmYhjdV09bSfRkWEiNfrgfxTRWyK3m3
Qcrjms5af1rfqLdNBxuXqnAxLM/NM8eIlBsa9LEVmk++dnfTEU4gTAhoddhp/4OK
4JKGS4Ieg0atFiaf2kf5mqk1eAtfoQQ4RPcp14tUPc+GBD5I9B9+vX/Z6TirsFqj
yu12Vk0XK2PPBbtLn73EO1S4HlZKezrYPVdPoZkhoHZyR929AwPAbR9RH6hIrGn1
pKfJaE49LI5DYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:23 2026 by rpki-client