Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: 68CMaUx3q/CPyps7I5dchUindW+9VpWlKvFy3mLjifg=
Subject key identifier: 35:3C:B2:AB:67:23:C2:D8:81:2D:3E:4E:FE:48:86:30:94:AB:28:40
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 01A10E83457367A501D17DB4DECD82C70264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 17DD
Signing time: Tue 06 Oct 2026 00:00:46 +0000
Manifest this update: Tue 06 Oct 2026 00:00:46 +0000
Manifest next update: Wed 07 Oct 2026 00:00:46 +0000
Files and hashes: 1: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: yLxr7dQqJ0J5ytH8FOzcqFgcaGftcY6H81RMUw1PMjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:83:45:73:67:a5:01:d1:7d:b4:de:cd:82:c7:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Oct 6 00:00:46 2026 GMT
Not After : Oct 7 00:00:46 2026 GMT
Subject: CN=353cb2ab6723c2d8812d3e4efe48863094ab2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:dd:b7:b2:28:84:b7:da:a9:15:d6:0d:87:
13:20:11:8a:63:9e:e4:be:68:e7:1b:a3:bc:65:21:
ab:09:93:4a:af:64:aa:52:48:b0:95:e9:b1:b8:2e:
9d:ae:06:34:b6:e2:b9:5a:84:b9:7f:50:1f:33:55:
ac:7b:16:45:10:6f:87:18:ad:50:64:73:1a:f9:7c:
5c:3c:ef:15:68:fa:36:c3:89:e0:29:28:95:1a:d9:
40:b0:21:dd:d6:b9:5f:01:2f:71:69:ae:b5:1b:21:
b5:99:69:e2:80:4c:63:ea:5e:5a:28:a2:ae:2a:a8:
e2:05:1c:6e:96:92:51:a0:98:f2:72:0b:d9:f1:cf:
f5:0a:e8:4e:a3:52:e3:95:cc:d2:87:8d:31:7f:ff:
cf:f2:e3:46:12:78:72:89:09:2d:dd:66:8d:02:ff:
e4:e0:5f:1b:71:b0:dc:c2:0e:32:93:a8:b9:a3:e7:
9d:dc:b1:c1:43:dc:e2:f8:7e:da:a2:b3:f0:d7:29:
45:30:9b:ec:3e:a6:8b:cd:0e:7c:fc:ba:f0:a6:0c:
fe:dc:b6:6a:d0:2f:89:a0:be:94:a8:6a:d4:d2:c2:
1b:4b:0a:ff:17:28:f3:a6:28:a8:b7:e1:2d:11:ba:
bd:c4:9d:5b:14:77:80:ab:fd:90:35:be:43:18:3c:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:B2:AB:67:23:C2:D8:81:2D:3E:4E:FE:48:86:30:94:AB:28:40
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:78:a8:b4:7c:6f:be:fb:8b:89:fd:ca:64:bf:d5:e6:53:82:
56:fd:74:62:e9:06:54:d4:7c:ec:60:d0:5e:0c:1e:33:91:c5:
2a:d5:3a:4e:35:bd:b6:bc:fc:3f:a8:e2:4b:bf:ef:03:c8:d1:
ba:c4:25:4d:ef:e5:d7:cc:13:71:8e:35:89:d4:b2:04:36:05:
e7:95:5b:5c:d1:fc:98:87:54:af:95:1d:75:d2:04:39:f9:5b:
c1:a5:ef:4b:fb:13:0d:a8:1a:49:de:f8:d8:fa:ad:ed:06:cf:
ba:f5:3e:a3:a4:ef:2c:e6:32:8e:dc:62:1e:3e:ba:23:9a:10:
bb:c7:47:37:7f:5c:fe:49:dc:82:76:91:18:a4:ce:44:de:53:
11:64:2d:b2:30:ce:44:e1:d3:11:ac:05:9d:28:ed:30:26:b6:
0c:12:f0:a1:c5:37:39:34:97:46:f6:6f:cf:b0:f5:f8:fa:fc:
0a:78:7b:8a:dd:ee:3a:3f:b0:00:ee:9b:1e:ba:54:e5:78:b9:
ed:fd:35:8f:ba:18:08:a6:04:33:d7:d3:0a:bc:42:9d:1e:d3:
c5:41:40:20:70:a7:fc:4a:19:c5:b2:83:25:c2:79:af:52:d1:
ab:7e:4f:ba:8e:49:6f:0e:f5:49:a4:4a:28:de:51:d2:5f:f1:
92:7b:e0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOg0VzZ6UB0X203s2CxwJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjYxMDA2MDAwMDQ2WhcNMjYxMDA3MDAwMDQ2WjAzMTEwLwYDVQQD
EygzNTNjYjJhYjY3MjNjMmQ4ODEyZDNlNGVmZTQ4ODYzMDk0YWIyODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5jdt7IohLfaqRXWDYcTIBGKY57k
vmjnG6O8ZSGrCZNKr2SqUkiwlemxuC6drgY0tuK5WoS5f1AfM1WsexZFEG+HGK1Q
ZHMa+XxcPO8VaPo2w4ngKSiVGtlAsCHd1rlfAS9xaa61GyG1mWnigExj6l5aKKKu
KqjiBRxulpJRoJjycgvZ8c/1CuhOo1LjlczSh40xf//P8uNGEnhyiQkt3WaNAv/k
4F8bcbDcwg4yk6i5o+ed3LHBQ9zi+H7aorPw1ylFMJvsPqaLzQ58/Lrwpgz+3LZq
0C+JoL6UqGrU0sIbSwr/Fyjzpiiot+EtEbq9xJ1bFHeAq/2QNb5DGDxA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU8sqtnI8LYgS0+Tv5IhjCUqyhAMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3iotHxv
vvuLif3KZL/V5lOCVv10YukGVNR87GDQXgweM5HFKtU6TjW9trz8P6jiS7/vA8jR
usQlTe/l18wTcY41idSyBDYF55VbXNH8mIdUr5UdddIEOflbwaXvS/sTDagaSd74
2Pqt7QbPuvU+o6TvLOYyjtxiHj66I5oQu8dHN39c/kncgnaRGKTORN5TEWQtsjDO
ROHTEawFnSjtMCa2DBLwocU3OTSXRvZvz7D1+Pr8Cnh7it3uOj+wAO6bHrpU5Xi5
7f01j7oYCKYEM9fTCrxCnR7TxUFAIHCn/EoZxbKDJcJ5r1LRq35Puo5Jbw71SaRK
KN5R0l/xknvgOQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 04:15:52 2026 by rpki-client