Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: VGdPe0ltNKinXCdRL31RMKmQnqvUcKi+212hcH6HTao=
Subject key identifier: FC:5F:46:75:2F:70:4B:BE:3E:EA:43:B9:1A:CF:92:42:BF:70:4B:F5
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019D2997812AF7B78AD76F909468588189B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 1120
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: CFyelad1lswwt7JD0xiy+jpvc5CZoQtUzskVl/X/IU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:81:2a:f7:b7:8a:d7:6f:90:94:68:58:81:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=fc5f46752f704bbe3eea43b91acf9242bf704bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:d8:10:dd:3e:36:3f:bd:96:4d:59:bb:28:
cc:2a:ca:16:3f:c4:4f:fb:ae:a2:2c:73:b9:2e:7c:
4a:bb:ec:b7:ad:36:5b:78:18:ac:d3:31:02:3b:cb:
0c:e5:d1:29:a2:ba:0c:ca:36:e6:b9:6f:87:09:6e:
c0:b4:50:d0:8d:97:1f:d9:d1:36:87:37:46:42:d1:
75:6b:ea:2f:01:6d:f8:05:ad:b6:74:32:3e:9a:d4:
0e:84:cb:3f:48:b8:38:a4:c8:e0:4c:ee:94:f5:fb:
ee:63:6d:6a:27:f4:27:95:e6:b5:c5:69:77:7d:d1:
1a:ef:9d:bc:89:78:57:b2:2c:61:36:b9:8f:25:ca:
ae:1b:92:41:92:50:28:5f:5f:57:ff:83:08:84:d4:
47:f2:ef:f6:bc:47:a1:f1:b3:1c:1f:0c:fb:8b:34:
f5:72:84:0f:e8:9f:59:ff:fc:8c:fd:8f:f6:7c:51:
b4:af:97:72:24:b9:c2:23:8b:16:c1:d7:51:77:10:
f9:95:4c:92:a5:06:f4:5a:33:60:9f:1a:26:67:df:
d2:b1:38:df:a9:85:89:84:06:25:08:c8:c3:dd:ee:
f6:76:63:8c:98:c6:49:12:ed:a6:ca:c0:95:6b:16:
de:68:14:b5:fb:0c:2c:48:cb:bc:92:7e:43:57:bd:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:46:75:2F:70:4B:BE:3E:EA:43:B9:1A:CF:92:42:BF:70:4B:F5
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:59:e5:75:9b:38:66:9b:ed:2c:55:45:1a:4f:d6:f9:f5:5c:
0e:42:f5:fe:73:0b:ab:48:37:5a:30:0a:f5:e6:11:2d:98:14:
93:42:3c:24:50:0b:39:5a:bd:f5:f2:e8:e2:7b:45:9a:00:34:
4b:73:c5:78:d2:29:d3:a6:37:a6:e0:04:b5:32:fa:1c:8f:b1:
3b:62:93:95:3a:de:c8:5e:eb:1f:61:a7:7a:c9:de:dd:52:41:
d9:f5:a5:bc:a3:42:82:dd:01:e7:62:e2:1a:9f:ca:c2:ac:33:
04:3c:1c:4b:a1:ff:ce:65:4c:77:0e:f5:a9:63:81:a6:b4:6a:
87:5a:b4:85:3d:6e:37:39:d9:1e:bc:7c:4f:82:92:a2:ef:e9:
03:3c:b4:85:1d:5d:f3:31:5a:32:0c:3d:42:a4:46:17:03:53:
5a:f5:b9:61:e1:da:8c:14:d2:84:07:e1:32:8c:e0:34:6b:0f:
80:c9:63:60:ac:9f:d3:a5:42:87:a6:fb:05:13:30:21:be:dc:
b2:fb:37:a3:37:9f:35:da:9a:de:dd:09:47:23:82:0b:6d:a4:
c4:e5:b2:3e:6c:fb:c8:e7:ed:ab:6e:e4:8d:61:aa:2f:fe:14:
e6:bb:35:b9:da:ac:3a:1d:49:1e:5b:02:8c:00:14:9d:c0:c8:
c8:08:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:07 2026 by rpki-client