Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: KlsDZwqnlheE5kFTkwIEtZjDJm8Mrrw0xaZcmH9nf7I=
Subject key identifier: C9:64:11:09:A0:BD:4D:FF:C2:73:C6:AC:2C:8D:75:05:B5:FD:71:15
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019D2884D842DA46A8CF7746A0A49C91692E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0F4A
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: APm7KmIUjs5zOjpMrP3IX5noxNReO55R21XLgd1oDBo=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d8:42:da:46:a8:cf:77:46:a0:a4:9c:91:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=c9641109a0bd4dffc273c6ac2c8d7505b5fd7115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:69:ec:78:77:94:e9:cc:96:43:54:9a:5e:
ff:d4:d7:33:4f:ed:dd:2b:4b:48:84:38:88:5a:64:
a9:c9:f7:c6:68:ab:f0:0d:09:3a:dd:53:cb:87:9f:
b3:03:04:1c:25:a5:7e:18:8d:41:b9:0e:f4:3a:17:
8c:30:63:9e:6d:b7:32:75:f3:67:7f:ed:12:cf:46:
34:69:b2:90:1e:31:80:32:06:fb:6a:8e:e1:c3:6d:
1b:f6:dc:a7:08:f7:06:f2:25:47:f3:4e:27:b2:2c:
c0:01:4c:bf:40:fc:12:9c:eb:26:b6:10:2e:21:40:
46:9c:f6:5e:ec:f1:64:fe:25:53:9d:51:63:f5:0d:
fb:19:14:6a:02:19:c7:4e:0b:9a:d8:ba:4f:17:0b:
84:7f:0d:5a:fc:48:18:02:41:dd:ac:ad:c8:2b:fa:
14:01:7b:b9:81:e2:ed:f7:d8:f8:e3:70:98:3b:17:
ad:78:8b:56:2a:7a:63:45:89:69:69:15:8b:b7:e4:
42:e9:1d:de:84:f3:7d:72:32:8c:32:1c:79:d9:c2:
f3:1a:dd:80:d6:2a:36:2a:99:fa:67:71:26:63:1e:
55:e6:cc:64:05:f0:bb:d1:c5:af:d2:21:37:ff:74:
88:dd:47:5c:52:cf:31:17:43:60:84:ac:f2:9c:6f:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:11:09:A0:BD:4D:FF:C2:73:C6:AC:2C:8D:75:05:B5:FD:71:15
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:55:7f:f6:99:29:6c:e7:09:08:4c:ad:48:72:a1:2a:e6:
e7:6a:da:9c:30:a4:6f:f2:1d:bd:67:dc:64:11:08:1a:0e:96:
5a:47:77:c9:eb:03:e9:a3:2e:44:f3:7a:1c:e3:90:74:04:52:
6b:e4:7b:6a:26:eb:07:21:fa:d6:3b:01:af:f7:89:71:ba:42:
27:5b:ea:2f:36:45:c7:80:03:6b:b4:1d:0c:d4:19:92:be:32:
f6:65:98:a3:64:7a:b0:11:63:a8:39:28:14:10:10:67:8c:27:
8d:eb:05:5e:37:a8:30:3f:f8:df:40:3d:e1:62:bf:9f:da:ea:
da:85:e3:4a:ed:d5:61:7a:8f:10:bb:ca:38:48:46:6a:8e:64:
fd:ee:0a:ac:fd:42:aa:9e:63:82:c6:43:db:20:13:ad:14:6c:
49:c9:3a:7b:44:61:75:cf:ac:86:5b:d9:4e:72:6b:06:e5:bd:
fd:c9:df:f1:30:01:24:90:da:17:d2:b4:d4:93:aa:e7:69:3c:
c1:ec:6b:81:3b:46:3f:5c:16:10:13:87:b6:d1:d7:28:1b:f7:
30:74:d8:ff:23:6c:a9:4e:9e:67:18:41:43:df:64:fc:2d:25:
69:0e:94:ca:3b:ab:2c:c5:9d:54:66:0f:64:3c:11:bf:eb:94:
98:4c:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:28 2026 by rpki-client