Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: /qtQxMltx3RcTaiyW8WnZ7yEggxp5P01ZXsZHHRzdco=
Subject key identifier: 68:55:A9:BC:8D:2F:19:E1:C4:72:22:AD:3A:75:6B:E1:BA:A1:2E:01
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019E1FB60943E45B287032E1AD349EFF8D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0FCA
Signing time: Wed 13 May 2026 05:01:24 +0000
Manifest this update: Wed 13 May 2026 05:01:24 +0000
Manifest next update: Thu 14 May 2026 05:01:24 +0000
Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 2jRVRGbMIb0LQnvxTrVRrVOm0xZjj+vTt7hYECs6qVE=)
2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:09:43:e4:5b:28:70:32:e1:ad:34:9e:ff:8d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: May 13 05:01:24 2026 GMT
Not After : May 14 05:01:24 2026 GMT
Subject: CN=6855a9bc8d2f19e1c47222ad3a756be1baa12e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:4f:10:b2:c5:e4:68:d4:74:7c:c4:7e:22:
4d:62:12:72:71:e4:22:62:c5:a6:09:62:8c:9f:91:
24:8b:41:85:1b:cb:6b:77:bb:72:b2:46:d9:d3:6e:
19:01:49:05:3b:67:fe:82:b5:cf:90:76:d9:d3:d6:
e9:51:34:52:46:73:62:9a:ce:80:34:1e:a4:14:ef:
60:29:10:85:ae:f4:58:36:e0:3c:4c:96:14:af:0c:
b3:27:d8:d8:76:72:11:28:22:76:78:44:46:4d:b5:
5f:4f:a7:1f:6a:18:03:10:43:3d:c3:d1:3c:42:c0:
6d:76:ea:4b:49:46:fc:c5:11:35:d6:f3:02:c0:d2:
70:69:0d:fc:00:b3:4f:d2:ca:61:ae:6c:ea:04:4a:
01:8e:a3:3a:8e:ca:1f:48:95:4c:f7:f6:60:14:54:
ef:0e:f5:a5:6f:a7:12:b4:3c:df:c7:18:e3:15:9d:
aa:46:d3:1b:65:58:8f:60:de:34:6f:c9:17:78:3e:
dd:c2:6f:8c:f1:a3:64:e8:16:f7:55:ed:18:10:1d:
03:40:13:eb:83:4c:fc:a4:cb:ed:10:52:a2:cc:82:
df:2f:67:57:22:b0:7d:17:43:21:31:65:8b:a6:81:
46:50:a2:35:31:8c:89:1d:38:21:c7:d6:2e:4b:59:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:A9:BC:8D:2F:19:E1:C4:72:22:AD:3A:75:6B:E1:BA:A1:2E:01
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f8:2e:ca:8b:af:e9:4e:69:b1:ab:1c:f5:ba:ce:76:bd:9a:
e9:e2:32:97:58:fa:ad:fd:a6:01:77:a1:7f:84:a3:03:70:a6:
4f:cf:0b:4d:ab:dd:9f:09:fc:54:65:1d:51:6c:c6:4f:f1:90:
b2:88:0f:15:a0:34:be:22:3e:9c:60:b4:a4:6b:bd:97:d3:db:
16:2b:fe:7d:1a:02:38:7f:d0:69:4c:e0:04:fa:c7:68:0c:6f:
21:5c:c9:9a:ba:ae:49:79:f5:9c:d4:4c:55:1c:4b:58:3f:a7:
1e:8e:ef:ef:f3:1a:d4:fe:27:bd:19:bb:a7:68:2f:dc:33:d5:
59:5e:0f:36:8d:2f:aa:62:86:47:9f:85:e5:e6:2d:b3:ec:eb:
c9:af:a4:d1:2e:c7:70:30:f5:50:95:a8:96:4b:ab:71:d9:e7:
c5:9a:20:97:44:4e:bb:80:33:0e:77:86:13:64:bf:02:a6:4d:
32:5e:5e:df:d0:3c:46:56:15:07:4f:1b:2c:c1:54:dd:8a:70:
c7:57:18:db:0c:03:62:b6:ad:55:c2:58:c1:ab:62:24:35:05:
89:9a:8a:db:a3:04:60:fd:73:be:ad:50:7f:4a:59:39:f6:46:
db:0d:0e:23:b4:c1:ff:0b:39:b9:db:30:0f:16:b6:be:cb:22:
37:3b:f5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftglD5FsocDLhrTSe/40xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjYwNTEzMDUwMTI0WhcNMjYwNTE0MDUwMTI0WjAzMTEwLwYDVQQD
Eyg2ODU1YTliYzhkMmYxOWUxYzQ3MjIyYWQzYTc1NmJlMWJhYTEyZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd9PELLF5GjUdHzEfiJNYhJyceQi
YsWmCWKMn5Eki0GFG8trd7tyskbZ024ZAUkFO2f+grXPkHbZ09bpUTRSRnNims6A
NB6kFO9gKRCFrvRYNuA8TJYUrwyzJ9jYdnIRKCJ2eERGTbVfT6cfahgDEEM9w9E8
QsBtdupLSUb8xRE11vMCwNJwaQ38ALNP0sphrmzqBEoBjqM6jsofSJVM9/ZgFFTv
DvWlb6cStDzfxxjjFZ2qRtMbZViPYN40b8kXeD7dwm+M8aNk6Bb3Ve0YEB0DQBPr
g0z8pMvtEFKizILfL2dXIrB9F0MhMWWLpoFGUKI1MYyJHTghx9YuS1likQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhVqbyNLxnhxHIirTp1a+G6oS4BMB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/guyouv
6U5psasc9brOdr2a6eIyl1j6rf2mAXehf4SjA3CmT88LTavdnwn8VGUdUWzGT/GQ
sogPFaA0viI+nGC0pGu9l9PbFiv+fRoCOH/QaUzgBPrHaAxvIVzJmrquSXn1nNRM
VRxLWD+nHo7v7/Ma1P4nvRm7p2gv3DPVWV4PNo0vqmKGR5+F5eYts+zrya+k0S7H
cDD1UJWolkurcdnnxZogl0ROu4AzDneGE2S/AqZNMl5e39A8RlYVB08bLMFU3Ypw
x1cY2wwDYratVcJYwatiJDUFiZqK26MEYP1zvq1Qf0pZOfZG2w0OI7TB/ws5udsw
Dxa2vssiNzv1Hw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:14 2026 by rpki-client