Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: NEq/xwImnzxxEmclXeXbh8OyuwpyL9Z04AGTFMSFqWg=
Subject key identifier: A0:25:A6:31:F1:5C:DE:DD:FE:63:A7:73:D7:94:60:9A:ED:F0:94:7B
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019D2D05C91C2B3524F2A6BA46C492FED4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 03CB
Signing time: Fri 27 Mar 2026 02:00:46 +0000
Manifest this update: Fri 27 Mar 2026 02:00:46 +0000
Manifest next update: Sat 28 Mar 2026 02:00:46 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: NZtiZf/VY6PAnQ9rF3qDaf19Q4uKH02kXi1gIvkDIoI=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:c9:1c:2b:35:24:f2:a6:ba:46:c4:92:fe:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 27 02:00:46 2026 GMT
Not After : Mar 28 02:00:46 2026 GMT
Subject: CN=a025a631f15cdeddfe63a773d794609aedf0947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:6b:35:83:04:4c:95:66:c1:c2:0b:dd:02:
d0:01:b2:3c:3e:ed:56:c2:b4:76:ef:00:b2:c7:b1:
a5:b8:48:d6:99:7d:f9:59:bf:5f:dd:8a:cc:3e:79:
d6:a9:05:bf:dd:4a:43:c8:0e:0c:ad:6c:38:da:4a:
e4:12:87:b2:b0:9d:ec:ed:5f:1e:26:27:d7:f3:07:
5c:ee:3b:34:ae:ea:c4:14:c4:a0:b1:08:b3:7f:f1:
70:be:57:00:6b:a9:e5:21:04:aa:9b:25:b0:46:bb:
c5:1c:6f:39:5e:5d:a5:7f:3c:f6:6e:83:db:ec:08:
3e:69:fc:a3:2b:07:a3:f5:1e:a7:fb:f1:7c:59:37:
c7:0e:94:da:46:4e:0d:02:55:01:33:8d:3c:71:d5:
02:b3:cd:0c:b2:f8:b2:50:21:b6:2a:68:7c:3d:5b:
60:3f:9b:0b:ef:35:fd:f1:b3:e8:a3:94:80:3a:18:
a6:9d:ca:36:1b:54:58:ee:1b:cc:4c:87:b5:b8:f0:
a3:33:30:45:b4:3f:26:64:57:4c:b1:59:22:31:6a:
e0:9e:18:28:49:bc:5d:c6:91:16:69:cb:03:e4:65:
26:6b:d8:d1:41:71:9e:20:f5:c3:30:d7:56:ac:fd:
58:a0:75:9b:25:ba:94:a9:cf:7b:f0:76:1a:5a:f9:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:25:A6:31:F1:5C:DE:DD:FE:63:A7:73:D7:94:60:9A:ED:F0:94:7B
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:5c:f4:a5:04:3d:95:13:48:0c:0c:68:65:e1:fe:be:3b:
ac:b7:d9:0e:c7:6f:5e:34:3b:19:8d:b2:53:25:4f:a7:b7:7d:
99:2f:7f:2d:76:77:0e:a6:d5:5d:bc:1c:9c:6e:a4:7e:8f:9a:
11:05:b8:ae:33:b3:73:55:d7:c1:41:bd:1a:d5:80:c0:e5:60:
a9:4e:39:64:84:e2:02:5b:64:18:29:da:57:e3:15:27:75:62:
b5:7f:b9:ec:12:cd:19:6b:2a:b3:c9:9c:24:ae:c7:de:bc:a2:
37:8b:cb:fc:f2:b0:0a:af:96:62:d6:48:c5:7f:21:b9:35:4c:
4c:b9:e6:55:99:44:95:ba:7c:ca:13:d1:c3:e6:cf:9b:97:cb:
38:13:5e:0e:97:78:91:32:3e:d1:64:11:f4:c4:62:23:8b:1e:
24:21:63:f1:e0:1a:27:de:a1:d3:2b:47:bf:2e:29:e6:4b:48:
99:81:7a:85:d6:8e:00:08:02:57:fa:03:7e:2d:86:77:c2:19:
71:33:95:f4:91:e7:88:a5:5b:3e:22:7a:4b:c3:ca:d0:fd:b4:
06:a4:17:ea:62:71:c1:ec:1b:d7:b1:73:a0:0f:fe:06:d6:fc:
c3:0d:cd:93:ca:a2:07:6c:4d:c2:04:04:64:c4:39:ed:8f:01:
0b:8e:ba:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tBckcKzUk8qa6RsSS/tSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjYwMzI3MDIwMDQ2WhcNMjYwMzI4MDIwMDQ2WjAzMTEwLwYDVQQD
EyhhMDI1YTYzMWYxNWNkZWRkZmU2M2E3NzNkNzk0NjA5YWVkZjA5NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsltrNYMETJVmwcIL3QLQAbI8Pu1W
wrR27wCyx7GluEjWmX35Wb9f3YrMPnnWqQW/3UpDyA4MrWw42krkEoeysJ3s7V8e
JifX8wdc7js0rurEFMSgsQizf/FwvlcAa6nlIQSqmyWwRrvFHG85Xl2lfzz2boPb
7Ag+afyjKwej9R6n+/F8WTfHDpTaRk4NAlUBM408cdUCs80MsviyUCG2Kmh8PVtg
P5sL7zX98bPoo5SAOhimnco2G1RY7hvMTIe1uPCjMzBFtD8mZFdMsVkiMWrgnhgo
SbxdxpEWacsD5GUma9jRQXGeIPXDMNdWrP1YoHWbJbqUqc978HYaWvmtYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAlpjHxXN7d/mOnc9eUYJrt8JR7MB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHpc9KUE
PZUTSAwMaGXh/r47rLfZDsdvXjQ7GY2yUyVPp7d9mS9/LXZ3DqbVXbwcnG6kfo+a
EQW4rjOzc1XXwUG9GtWAwOVgqU45ZITiAltkGCnaV+MVJ3VitX+57BLNGWsqs8mc
JK7H3ryiN4vL/PKwCq+WYtZIxX8huTVMTLnmVZlElbp8yhPRw+bPm5fLOBNeDpd4
kTI+0WQR9MRiI4seJCFj8eAaJ96h0ytHvy4p5ktImYF6hdaOAAgCV/oDfi2Gd8IZ
cTOV9JHniKVbPiJ6S8PK0P20BqQX6mJxwewb17FzoA/+Btb8ww3Nk8qiB2xNwgQE
ZMQ57Y8BC4663A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:34 2026 by rpki-client