Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: 7ed2c+Rf/h0Ou6eaySzCcuIH3YTqj2oKINzr3L2v8ws=
Subject key identifier: 98:11:99:76:9C:2C:D7:66:44:33:FB:47:D4:AC:FC:EB:33:40:41:DC
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019F927FEEEAA3F291529CE3517AF47B3871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1718
Signing time: Fri 24 Jul 2026 05:01:25 +0000
Manifest this update: Fri 24 Jul 2026 05:01:25 +0000
Manifest next update: Sat 25 Jul 2026 05:01:25 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: JUHvCFgJbJdi4nCKADv/t6Bv9A66FiMjAcFm5ZTHLgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:ee:ea:a3:f2:91:52:9c:e3:51:7a:f4:7b:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jul 24 05:01:25 2026 GMT
Not After : Jul 25 05:01:25 2026 GMT
Subject: CN=981199769c2cd7664433fb47d4acfceb334041dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:24:6b:ab:91:67:a0:9d:09:16:6f:00:bf:
0e:29:97:d5:15:02:a1:c9:44:7e:a5:d3:3d:36:2e:
e7:61:c2:53:57:fc:db:e8:e2:e5:ab:cc:9b:34:cd:
09:4c:a3:bc:45:8e:be:79:62:f9:e0:7e:73:bb:ed:
aa:2e:77:d5:d5:75:f2:93:34:d3:b4:68:b1:46:e4:
43:80:18:89:5f:b5:93:bf:20:f5:5a:44:ae:2f:35:
5e:dc:f3:f8:ce:d7:1e:ef:25:ed:16:02:8a:e0:a2:
c7:e2:66:7e:ab:97:4e:98:97:1f:02:a1:6f:95:f6:
eb:47:8f:50:33:11:1c:13:59:9c:4a:06:9d:56:55:
05:cf:fd:56:e0:1b:0b:80:ed:2a:73:43:d4:ef:11:
a4:9f:f3:c4:96:fe:37:45:f1:a9:b5:f3:37:d3:30:
1f:de:2c:38:56:cb:da:dd:82:46:82:63:2f:b3:24:
7d:6e:e7:2b:66:ec:d9:49:dc:79:bc:62:16:13:64:
ce:71:fc:55:3c:3a:5a:c7:a4:0b:ec:9e:93:d5:67:
f3:12:b8:6d:81:15:1f:b4:87:95:38:5f:14:5e:32:
9e:8f:31:a0:1b:3f:85:25:10:bc:b6:49:6e:ea:a3:
46:56:eb:9a:e5:ba:8e:80:12:b6:a4:05:44:ad:06:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:99:76:9C:2C:D7:66:44:33:FB:47:D4:AC:FC:EB:33:40:41:DC
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:97:e8:c0:37:1c:98:5c:e5:37:64:50:4b:ff:98:00:02:
d5:25:3c:c7:2d:b4:7a:ab:3f:4c:fc:be:00:d6:b9:d7:dd:b7:
51:2e:03:b2:0c:ef:ba:9f:b4:fa:a3:3a:fa:bc:bb:59:a0:a1:
4d:85:e1:88:39:32:61:9c:f8:82:b2:77:1d:59:2a:f8:ef:dd:
9a:59:e9:06:11:e6:17:f4:3a:45:77:96:a8:87:1f:84:ce:b3:
49:2e:85:6e:12:86:90:27:75:80:38:7c:29:b2:24:cd:b3:ce:
ed:87:ef:2a:63:7f:88:70:39:f8:a3:8c:08:3a:7a:c9:4d:b0:
3a:24:f5:f7:e6:be:eb:2e:a7:4d:30:80:97:89:66:57:55:3d:
95:93:0e:31:b3:09:84:3b:7c:e7:74:ae:d7:7e:11:51:e1:c3:
8c:14:54:4d:89:9a:eb:f3:af:34:c5:33:d8:5d:3e:4d:cc:d4:
c9:a8:9a:63:cc:5b:78:4d:46:3f:73:ac:c8:02:5d:4c:e8:88:
bd:a9:d0:e0:4b:e0:76:7b:ef:5f:c3:df:47:07:44:7f:53:d3:
0a:52:d2:01:8b:46:57:72:f2:48:9e:6f:7c:bc:7f:15:3f:5c:
01:81:9d:93:1c:20:f5:42:28:a7:09:5e:2a:3a:cd:03:d3:53:
37:c3:41:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf+7qo/KRUpzjUXr0ezhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjYwNzI0MDUwMTI1WhcNMjYwNzI1MDUwMTI1WjAzMTEwLwYDVQQD
Eyg5ODExOTk3NjljMmNkNzY2NDQzM2ZiNDdkNGFjZmNlYjMzNDA0MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO8ka6uRZ6CdCRZvAL8OKZfVFQKh
yUR+pdM9Ni7nYcJTV/zb6OLlq8ybNM0JTKO8RY6+eWL54H5zu+2qLnfV1XXykzTT
tGixRuRDgBiJX7WTvyD1WkSuLzVe3PP4ztce7yXtFgKK4KLH4mZ+q5dOmJcfAqFv
lfbrR49QMxEcE1mcSgadVlUFz/1W4BsLgO0qc0PU7xGkn/PElv43RfGptfM30zAf
3iw4Vsva3YJGgmMvsyR9bucrZuzZSdx5vGIWE2TOcfxVPDpax6QL7J6T1WfzErht
gRUftIeVOF8UXjKejzGgGz+FJRC8tklu6qNGVuua5bqOgBK2pAVErQYKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgRmXacLNdmRDP7R9Ss/OszQEHcMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu+X6MA3
HJhc5TdkUEv/mAAC1SU8xy20eqs/TPy+ANa51923US4Dsgzvup+0+qM6+ry7WaCh
TYXhiDkyYZz4grJ3HVkq+O/dmlnpBhHmF/Q6RXeWqIcfhM6zSS6FbhKGkCd1gDh8
KbIkzbPO7YfvKmN/iHA5+KOMCDp6yU2wOiT19+a+6y6nTTCAl4lmV1U9lZMOMbMJ
hDt853Su134RUeHDjBRUTYma6/OvNMUz2F0+TczUyaiaY8xbeE1GP3OsyAJdTOiI
vanQ4EvgdnvvX8PfRwdEf1PTClLSAYtGV3LySJ5vfLx/FT9cAYGdkxwg9UIopwle
KjrNA9NTN8NBBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:31 2026 by rpki-client