Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: Z9ufkfAQPE+LaCqhux3RLz2AcpYZzJSG4InsnoKrzSw=
Subject key identifier: 08:A5:1C:35:D3:34:AB:44:CA:52:1C:9A:64:11:0A:F6:AA:A2:0A:F0
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 01A0D124FB7A6FF624A92EAAD75510489C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 06D3
Signing time: Thu 24 Sep 2026 02:00:56 +0000
Manifest this update: Thu 24 Sep 2026 02:00:56 +0000
Manifest next update: Fri 25 Sep 2026 02:00:56 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: Ei05LjaiZw6G55Uf4yOwSzoNVEvCx3h07iw67Dg7KHY=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:fb:7a:6f:f6:24:a9:2e:aa:d7:55:10:48:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Sep 24 02:00:56 2026 GMT
Not After : Sep 25 02:00:56 2026 GMT
Subject: CN=08a51c35d334ab44ca521c9a64110af6aaa20af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:ee:9d:95:60:d2:29:b9:90:60:71:1f:79:
bc:e6:66:18:42:1a:4d:8e:25:90:bd:c0:c7:e7:65:
90:ae:6b:ee:e0:35:af:47:38:83:c3:76:de:59:f7:
cc:d2:18:b3:64:da:ba:c9:13:67:66:f4:c9:7a:78:
ba:5c:40:cc:a5:8e:cf:ad:ba:1f:45:29:32:4e:38:
b7:97:74:cf:d2:0d:40:c9:1e:89:ad:0a:7d:e3:50:
70:22:17:e0:d8:85:a2:a4:d0:de:e3:c2:fe:47:a6:
03:ef:2b:18:5c:16:0d:bb:19:98:a3:64:71:87:07:
1c:70:5c:c3:9a:d8:e7:40:20:65:a0:90:ae:e2:2e:
32:c1:91:3d:9c:3d:34:2e:b3:c8:b9:2b:87:ee:60:
4b:99:2a:e7:43:4b:6d:4f:ae:37:ac:72:dc:19:18:
b7:04:8b:52:ac:4a:a3:d3:39:f3:ff:71:d4:18:37:
98:f3:76:12:13:ba:90:ae:29:11:d2:f4:e9:14:40:
48:6a:06:78:f5:6e:4d:0a:c9:1f:ba:76:37:77:f6:
ba:f1:64:0f:84:34:f8:f6:35:d9:2c:a3:95:96:be:
2d:b7:81:ee:a3:03:0b:90:67:c4:de:a0:6e:7b:15:
58:ad:23:18:fe:9d:0f:45:84:2c:d2:44:49:61:9e:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:1C:35:D3:34:AB:44:CA:52:1C:9A:64:11:0A:F6:AA:A2:0A:F0
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:63:57:3f:e9:a7:84:6b:9f:4b:6c:3f:a4:91:17:ee:9a:4e:
da:41:4c:c5:4f:1c:66:ee:83:28:69:0c:15:61:0d:14:af:64:
6e:ae:0f:66:26:f2:d2:01:2c:30:ed:37:4b:85:52:de:f8:97:
32:fc:45:62:b3:2c:4a:6f:5b:3d:e7:4c:5c:18:b2:e8:08:8d:
12:e9:ec:a7:51:0f:ce:80:1c:ba:32:b8:36:cf:d4:76:48:2c:
18:55:64:1b:50:58:0b:c2:bd:18:02:70:05:36:a4:eb:9e:7e:
f4:96:c4:2b:96:29:89:b2:84:2a:1c:66:7a:88:50:72:97:7c:
26:5d:04:d6:d3:65:b9:19:f0:45:10:94:76:e0:b8:5e:83:05:
73:23:59:5d:73:22:b2:29:e9:48:10:7b:fe:4d:0a:36:71:f6:
42:ab:9b:01:41:04:50:01:48:2a:5c:87:4e:69:71:59:93:9f:
4a:5c:c8:a2:65:cf:ae:19:9a:f3:f8:87:34:c6:6d:8d:bb:fe:
f1:e8:c1:43:58:04:dd:1f:07:74:fd:36:ad:fb:45:ab:2e:87:
95:fa:1b:bc:57:54:74:37:ce:16:f6:60:01:8d:a4:e0:69:b8:
e1:45:32:66:be:76:50:cb:aa:d9:21:d6:a1:cb:9a:dd:04:c5:
f7:4a:d8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJPt6b/YkqS6q11UQSJxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjYwOTI0MDIwMDU2WhcNMjYwOTI1MDIwMDU2WjAzMTEwLwYDVQQD
EygwOGE1MWMzNWQzMzRhYjQ0Y2E1MjFjOWE2NDExMGFmNmFhYTIwYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+zunZVg0im5kGBxH3m85mYYQhpN
jiWQvcDH52WQrmvu4DWvRziDw3beWffM0hizZNq6yRNnZvTJeni6XEDMpY7Prbof
RSkyTji3l3TP0g1AyR6JrQp941BwIhfg2IWipNDe48L+R6YD7ysYXBYNuxmYo2Rx
hwcccFzDmtjnQCBloJCu4i4ywZE9nD00LrPIuSuH7mBLmSrnQ0ttT643rHLcGRi3
BItSrEqj0znz/3HUGDeY83YSE7qQrikR0vTpFEBIagZ49W5NCskfunY3d/a68WQP
hDT49jXZLKOVlr4tt4HuowMLkGfE3qBuexVYrSMY/p0PRYQs0kRJYZ4wCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAilHDXTNKtEylIcmmQRCvaqogrwMB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWNXP+mn
hGufS2w/pJEX7ppO2kFMxU8cZu6DKGkMFWENFK9kbq4PZiby0gEsMO03S4VS3viX
MvxFYrMsSm9bPedMXBiy6AiNEunsp1EPzoAcujK4Ns/UdkgsGFVkG1BYC8K9GAJw
BTak655+9JbEK5YpibKEKhxmeohQcpd8Jl0E1tNluRnwRRCUduC4XoMFcyNZXXMi
sinpSBB7/k0KNnH2QqubAUEEUAFIKlyHTmlxWZOfSlzIomXPrhma8/iHNMZtjbv+
8ejBQ1gE3R8HdP02rftFqy6HlfobvFdUdDfOFvZgAY2k4Gm44UUyZr52UMuq2SHW
ocua3QTF90rYUg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:28:48 2026 by rpki-client