Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: Qd5jcrdtnKuq4Jn6jfc3UsmxBn9eSzE1Rpp+wj9FORw=
Subject key identifier: 63:FB:09:1B:C4:E3:9B:1A:A1:1D:B2:0D:F3:7B:51:CA:05:B4:4A:F9
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01A0E098F8AB1BF1A1D1F1EA20602058CC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 1137
Signing time: Sun 27 Sep 2026 02:01:56 +0000
Manifest this update: Sun 27 Sep 2026 02:01:56 +0000
Manifest next update: Mon 28 Sep 2026 02:01:56 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 5xmNMYIDCSNxPi/Kd+AZlKAcepvIUmDwKOS4GuH6t40=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:f8:ab:1b:f1:a1:d1:f1:ea:20:60:20:58:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Sep 27 02:01:56 2026 GMT
Not After : Sep 28 02:01:56 2026 GMT
Subject: CN=63fb091bc4e39b1aa11db20df37b51ca05b44af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:2b:30:d9:a4:1d:13:cd:35:53:b7:08:a0:
43:06:d8:9e:43:40:2c:21:f4:99:4c:8d:90:2d:0a:
7f:77:4a:e9:bc:f0:57:68:d9:50:b4:0d:ea:df:f9:
90:f4:97:f5:77:47:45:38:53:48:70:9b:c2:8a:48:
47:b5:52:16:2c:74:64:9b:61:74:f6:97:7d:20:f7:
ed:4d:35:a9:04:87:dd:e7:fc:89:8a:2e:69:e4:74:
64:2e:c7:8d:a5:d4:a3:cc:1b:df:f6:ec:7e:0f:0e:
d2:17:e6:28:ff:67:4f:41:4e:e5:37:dc:ba:6c:30:
d1:fa:f6:50:61:c7:f5:39:cd:6b:28:35:71:bd:dd:
9d:60:f4:b7:4e:cc:68:2f:52:41:1c:36:5f:1a:49:
42:96:04:b9:7c:70:18:c9:ae:0f:aa:98:b6:9a:6b:
1a:eb:cb:58:9f:9a:d9:e3:a1:11:e0:0f:33:2b:c7:
ca:b8:51:94:4a:3f:61:e4:2e:06:d9:0c:70:7b:60:
f9:12:53:11:88:c3:14:a2:7a:e9:dc:93:69:6a:13:
07:df:a2:16:31:ed:4e:c2:85:be:8e:e3:94:ce:f0:
5c:bd:77:49:d0:de:bd:80:70:9a:20:28:b5:22:69:
99:87:78:22:0c:3d:6c:23:bc:49:21:be:1e:34:cd:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:09:1B:C4:E3:9B:1A:A1:1D:B2:0D:F3:7B:51:CA:05:B4:4A:F9
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:af:0b:e3:3b:b5:0a:00:26:68:96:9a:d1:d2:92:04:5e:
ad:a1:25:20:d7:d2:e4:91:29:cc:82:ae:3e:bd:9f:eb:3b:29:
03:ca:dc:b4:e7:2b:5e:4b:1a:0a:9f:ec:3c:04:54:95:2d:13:
49:43:b5:bc:fc:11:f3:a6:cd:00:2b:c0:f6:88:80:9d:fb:86:
4b:26:48:36:2b:ff:f6:f5:83:b1:2f:89:50:2e:55:b1:68:b1:
dc:cf:23:a7:40:a5:bb:57:68:39:a9:85:87:86:29:12:40:1e:
ac:09:04:82:3a:0b:b0:f3:30:cd:e6:4f:07:6e:18:35:3a:d5:
12:ad:c9:cd:9a:24:7e:61:0a:58:49:16:30:a1:07:09:7d:fb:
17:77:cb:03:26:79:73:3c:db:c0:1d:52:80:e6:2d:9c:8c:4f:
bf:d5:0b:b9:b5:e0:14:ee:92:5f:af:fc:88:7b:a4:a9:31:cf:
c3:3d:21:0e:5b:e1:de:73:74:5a:27:d2:50:cb:bb:82:b9:10:
83:69:91:cf:d4:71:40:74:82:ab:e7:59:3d:33:91:e3:7c:40:
52:6f:c0:8f:f4:a2:c6:8f:db:18:c3:fd:16:94:98:33:80:dd:
cb:af:31:66:44:9a:4c:69:c3:6e:70:c1:96:22:4b:4e:14:97:
77:bd:3d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmPirG/Gh0fHqIGAgWMx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjYwOTI3MDIwMTU2WhcNMjYwOTI4MDIwMTU2WjAzMTEwLwYDVQQD
Eyg2M2ZiMDkxYmM0ZTM5YjFhYTExZGIyMGRmMzdiNTFjYTA1YjQ0YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pMrMNmkHRPNNVO3CKBDBtieQ0As
IfSZTI2QLQp/d0rpvPBXaNlQtA3q3/mQ9Jf1d0dFOFNIcJvCikhHtVIWLHRkm2F0
9pd9IPftTTWpBIfd5/yJii5p5HRkLseNpdSjzBvf9ux+Dw7SF+Yo/2dPQU7lN9y6
bDDR+vZQYcf1Oc1rKDVxvd2dYPS3TsxoL1JBHDZfGklClgS5fHAYya4Pqpi2mmsa
68tYn5rZ46ER4A8zK8fKuFGUSj9h5C4G2Qxwe2D5ElMRiMMUonrp3JNpahMH36IW
Me1OwoW+juOUzvBcvXdJ0N69gHCaICi1ImmZh3giDD1sI7xJIb4eNM30RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP7CRvE45saoR2yDfN7UcoFtEr5MB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXqvC+M7
tQoAJmiWmtHSkgReraElINfS5JEpzIKuPr2f6zspA8rctOcrXksaCp/sPARUlS0T
SUO1vPwR86bNACvA9oiAnfuGSyZINiv/9vWDsS+JUC5VsWix3M8jp0Clu1doOamF
h4YpEkAerAkEgjoLsPMwzeZPB24YNTrVEq3JzZokfmEKWEkWMKEHCX37F3fLAyZ5
czzbwB1SgOYtnIxPv9ULubXgFO6SX6/8iHukqTHPwz0hDlvh3nN0WifSUMu7grkQ
g2mRz9RxQHSCq+dZPTOR43xAUm/Aj/Sixo/bGMP9FpSYM4Ddy68xZkSaTGnDbnDB
liJLThSXd709vw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:52:11 2026 by rpki-client