Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: LazGC6fSKWYDOaqSyC6ftuiBoXs9y1DxlsERtvuN0R4=
Subject key identifier: 9C:B2:8B:2F:34:78:A6:D6:5F:A2:9E:66:80:A0:98:50:0D:CE:2A:65
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019E1FED07CACE360D620B87601739F123C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1658
Signing time: Wed 13 May 2026 06:01:28 +0000
Manifest this update: Wed 13 May 2026 06:01:28 +0000
Manifest next update: Thu 14 May 2026 06:01:28 +0000
Files and hashes: 1: 5j0DYJ8tE3D8ZHcMBTnLp3LnwbM.roa (hash: ZKe7y3FpgqlYqhPli/g6wuEsSFAiYtHSgZ/mUuG0xcY=)
2: BNRF3iFBib6uH8-zEGx9zfO4cH8.roa (hash: 4yacbd98T/BVCl2ct+o0CMmFJRidAbOdWI6U10zor0Y=)
3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: 2smNGq768mpL7eaKfGbccjfxfxlq6Y79wk43P+O20JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:07:ca:ce:36:0d:62:0b:87:60:17:39:f1:23:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: May 13 06:01:28 2026 GMT
Not After : May 14 06:01:28 2026 GMT
Subject: CN=9cb28b2f3478a6d65fa29e6680a098500dce2a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:6c:76:81:5d:1f:e4:bf:96:4a:89:82:98:
7c:c2:9d:e5:87:35:75:85:06:62:1a:bc:0f:b7:69:
8c:6f:48:63:0b:f3:6c:b2:8e:68:1a:8b:1f:ba:6b:
0a:69:63:41:b9:d3:42:86:98:7c:4e:da:89:51:ac:
be:1f:24:d8:82:d9:8b:ea:fb:0e:79:ab:91:61:10:
da:ce:b0:fc:eb:55:7e:7a:a8:91:9f:77:59:02:6a:
2d:e3:74:9a:f1:98:68:e2:62:d2:42:d5:9b:ff:c0:
e8:a6:78:c0:6e:b4:6b:44:d5:98:6e:fb:ad:80:4f:
4c:7d:3b:b0:52:29:55:ab:31:07:ee:13:81:4b:2c:
67:4b:5f:93:fd:21:e6:20:d9:9a:7a:4a:fd:69:b7:
bd:bf:f0:21:c4:8b:0c:b3:11:de:f4:3f:09:56:3b:
f7:0b:e6:87:d8:d0:54:19:ac:ed:ee:39:01:b7:c5:
c3:60:18:e6:93:39:b6:33:6d:9d:05:cd:37:1a:58:
02:bc:09:e6:73:f5:ac:fd:6f:b3:fd:05:57:cb:ca:
fe:00:27:5b:3e:76:c0:69:ef:4f:5a:1c:6c:be:d9:
30:94:e3:ec:bb:50:ba:4c:19:36:2e:8b:1a:9e:4a:
39:ad:c0:4c:46:97:90:c7:47:0b:9e:99:3d:10:9f:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:8B:2F:34:78:A6:D6:5F:A2:9E:66:80:A0:98:50:0D:CE:2A:65
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:32:35:b3:5e:a8:f1:dc:36:e3:b7:37:94:32:3d:00:b6:ef:
cd:00:b4:31:d8:6f:58:0a:3c:6f:7f:0b:66:ab:5e:e6:c8:a4:
47:a3:41:ab:69:c4:1e:70:d3:8b:87:7f:21:ca:7e:d6:94:72:
87:e3:c5:ff:1a:eb:ad:5c:55:72:01:4b:ff:f8:44:b1:08:c3:
ec:09:f0:59:f7:cc:a1:8d:5c:a2:51:03:ae:31:8c:df:10:1f:
30:00:b7:0d:35:f2:ef:ff:6b:32:37:43:ef:28:83:71:c3:19:
3b:90:20:c3:3e:6f:eb:72:30:db:7b:0f:95:53:dc:6a:fa:f9:
7a:d8:49:e6:ea:0a:ea:67:db:e2:5f:02:5b:ee:8c:a0:2d:e2:
bd:b7:dc:61:d0:03:0f:b7:d1:ad:4e:23:4c:f4:7b:c1:7d:96:
cb:e8:78:e5:01:37:3d:c4:0a:d0:3b:25:d6:21:b1:06:b9:4f:
78:b7:19:8e:17:5c:5f:c4:e7:29:e8:6d:14:ea:7a:84:7e:b2:
12:81:5c:b6:f9:a9:42:65:ec:5e:ef:a3:ba:20:f2:a2:9c:63:
f4:fd:73:05:51:51:97:09:2d:d0:b7:5d:20:65:88:6c:44:bc:
3c:26:e4:a4:67:50:ad:5e:f8:d2:76:85:62:6c:17:46:b5:b1:
b2:57:d8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7QfKzjYNYguHYBc58SPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjYwNTEzMDYwMTI4WhcNMjYwNTE0MDYwMTI4WjAzMTEwLwYDVQQD
Eyg5Y2IyOGIyZjM0NzhhNmQ2NWZhMjllNjY4MGEwOTg1MDBkY2UyYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyxsdoFdH+S/lkqJgph8wp3lhzV1
hQZiGrwPt2mMb0hjC/Nsso5oGosfumsKaWNBudNChph8TtqJUay+HyTYgtmL6vsO
eauRYRDazrD861V+eqiRn3dZAmot43Sa8Zho4mLSQtWb/8DopnjAbrRrRNWYbvut
gE9MfTuwUilVqzEH7hOBSyxnS1+T/SHmINmaekr9abe9v/AhxIsMsxHe9D8JVjv3
C+aH2NBUGazt7jkBt8XDYBjmkzm2M22dBc03GlgCvAnmc/Ws/W+z/QVXy8r+ACdb
PnbAae9PWhxsvtkwlOPsu1C6TBk2Losanko5rcBMRpeQx0cLnpk9EJ8WzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyyiy80eKbWX6KeZoCgmFANziplMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjI1s16o
8dw247c3lDI9ALbvzQC0MdhvWAo8b38LZqte5sikR6NBq2nEHnDTi4d/Icp+1pRy
h+PF/xrrrVxVcgFL//hEsQjD7AnwWffMoY1colEDrjGM3xAfMAC3DTXy7/9rMjdD
7yiDccMZO5Agwz5v63Iw23sPlVPcavr5ethJ5uoK6mfb4l8CW+6MoC3ivbfcYdAD
D7fRrU4jTPR7wX2Wy+h45QE3PcQK0Dsl1iGxBrlPeLcZjhdcX8TnKehtFOp6hH6y
EoFctvmpQmXsXu+juiDyopxj9P1zBVFRlwkt0LddIGWIbES8PCbkpGdQrV740naF
YmwXRrWxslfYSA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:22:37 2026 by rpki-client