Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: 4dVAwKYxJO8rCp5uBAuh5Ebb7ZLrKVeYNQjUtug1RHU=
Subject key identifier: C9:B4:61:4E:CC:D0:3E:65:8B:3D:5A:87:F7:32:19:E4:90:3A:E9:C1
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 01A108B8854D51CEBA917E2BF94BE0EFB608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 17DA
Signing time: Sun 04 Oct 2026 21:01:12 +0000
Manifest this update: Sun 04 Oct 2026 21:01:12 +0000
Manifest next update: Mon 05 Oct 2026 21:01:12 +0000
Files and hashes: 1: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (hash: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: xl9+3Y/HXHkxOXPXYMNG4IdlaUlYpK1Dur1Dwuz0WB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:85:4d:51:ce:ba:91:7e:2b:f9:4b:e0:ef:b6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Oct 4 21:01:12 2026 GMT
Not After : Oct 5 21:01:12 2026 GMT
Subject: CN=c9b4614eccd03e658b3d5a87f73219e4903ae9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:72:d5:ee:24:86:12:e3:34:b0:7d:77:52:
e1:b8:79:b9:95:65:65:d0:aa:97:ea:20:0b:48:de:
7f:61:39:0d:5b:6b:3a:61:63:30:e1:ab:f0:a2:8c:
5c:14:f2:1d:3d:56:c4:44:65:98:b5:c2:94:94:58:
9e:d4:5d:45:70:90:d7:3f:25:c7:aa:24:d1:f9:46:
19:04:ef:49:b9:32:93:d1:e0:e6:0d:0f:2e:b9:6e:
7e:04:c3:2d:80:c3:6c:c0:c3:ca:7d:ae:f0:c6:58:
ef:db:f9:24:d0:63:27:d2:ee:3e:c1:b7:d0:01:b6:
2e:03:7d:5b:ed:ac:14:ca:73:96:5d:71:98:5a:51:
61:e8:0d:84:03:dd:de:cc:a5:5b:5d:b3:eb:bc:39:
12:ee:cc:f4:8a:dc:0d:c0:66:ad:c2:f1:69:33:69:
7d:df:39:25:83:c2:a9:33:10:16:c9:4f:c2:69:be:
a9:13:c6:c3:df:8e:97:a4:d7:9b:a3:57:51:da:1d:
4c:e2:54:43:7c:d5:f7:96:88:c2:ec:5e:6f:8b:1b:
46:18:b0:ed:ee:48:d9:57:ce:3d:fe:66:f0:73:70:
ee:d6:27:80:c6:10:52:82:1b:0f:10:54:67:c4:2d:
e1:5a:61:ba:29:35:d0:49:96:b1:b7:9c:3f:5f:81:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:61:4E:CC:D0:3E:65:8B:3D:5A:87:F7:32:19:E4:90:3A:E9:C1
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d2:31:7b:44:3e:c4:2f:d7:d2:8c:55:11:ec:0d:46:80:aa:
65:df:4a:4b:fe:85:3f:5f:c6:a0:a2:aa:e7:96:48:b3:eb:a8:
63:d9:7a:ef:b4:58:ed:77:fe:6e:4f:e7:08:da:8a:07:20:d3:
36:1b:db:6b:dc:75:23:da:10:ed:9f:37:0e:49:ed:1f:9f:89:
24:48:bb:7d:8d:33:de:bf:22:da:08:9c:eb:24:0e:84:96:69:
f5:a2:a9:95:8a:6e:41:8d:8e:af:7e:0d:4c:44:d1:13:13:25:
0a:3e:e7:39:c4:a1:7e:9b:ae:dc:6f:b3:ca:fa:98:92:58:5c:
40:6e:c4:74:fa:1d:e0:b3:54:6d:3f:50:a7:10:5f:05:41:dc:
9a:50:cf:5b:eb:41:6c:f2:f1:a0:cb:7f:fe:92:4a:83:ff:8d:
bc:5a:de:84:30:e8:e0:f4:d7:c6:32:a8:76:8d:54:56:c0:ac:
5b:64:d6:fa:23:c0:8f:2d:58:66:a6:22:f5:d2:08:31:fa:e8:
58:98:ff:fe:29:1c:e5:a5:64:e4:26:cf:72:88:32:d2:e3:3f:
db:84:d5:6f:88:9a:e7:38:d3:cf:b9:49:52:e7:aa:71:db:e2:
f4:88:7b:05:b6:21:20:1f:b8:3d:f4:c8:e2:8c:e0:d8:98:4e:
43:b3:30:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIuIVNUc66kX4r+Uvg77YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjYxMDA0MjEwMTEyWhcNMjYxMDA1MjEwMTEyWjAzMTEwLwYDVQQD
EyhjOWI0NjE0ZWNjZDAzZTY1OGIzZDVhODdmNzMyMTllNDkwM2FlOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ly1e4khhLjNLB9d1LhuHm5lWVl
0KqX6iALSN5/YTkNW2s6YWMw4avwooxcFPIdPVbERGWYtcKUlFie1F1FcJDXPyXH
qiTR+UYZBO9JuTKT0eDmDQ8uuW5+BMMtgMNswMPKfa7wxljv2/kk0GMn0u4+wbfQ
AbYuA31b7awUynOWXXGYWlFh6A2EA93ezKVbXbPrvDkS7sz0itwNwGatwvFpM2l9
3zklg8KpMxAWyU/Cab6pE8bD346XpNebo1dR2h1M4lRDfNX3lojC7F5vixtGGLDt
7kjZV849/mbwc3Du1ieAxhBSghsPEFRnxC3hWmG6KTXQSZaxt5w/X4EcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm0YU7M0D5liz1ah/cyGeSQOunBMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtIxe0Q+
xC/X0oxVEewNRoCqZd9KS/6FP1/GoKKq55ZIs+uoY9l677RY7Xf+bk/nCNqKByDT
Nhvba9x1I9oQ7Z83DkntH5+JJEi7fY0z3r8i2gic6yQOhJZp9aKplYpuQY2Or34N
TETRExMlCj7nOcShfpuu3G+zyvqYklhcQG7EdPod4LNUbT9QpxBfBUHcmlDPW+tB
bPLxoMt//pJKg/+NvFrehDDo4PTXxjKodo1UVsCsW2TW+iPAjy1YZqYi9dIIMfro
WJj//ikc5aVk5CbPcogy0uM/24TVb4ia5zjTz7lJUueqcdvi9Ih7BbYhIB+4PfTI
4ozg2JhOQ7Mwmg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:44:02 2026 by rpki-client