Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: cf59OvnFF1qTBZUnpHFni0b5FEtZ86k2XSMJvFXiy5Y=
Subject key identifier: F5:87:8F:6F:98:45:78:40:38:58:50:83:A7:7E:59:2F:5A:AD:73:17
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 01A0E02B00FCA741769CBFD983D1EC2509E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 1A07
Signing time: Sun 27 Sep 2026 00:01:49 +0000
Manifest this update: Sun 27 Sep 2026 00:01:49 +0000
Manifest next update: Mon 28 Sep 2026 00:01:49 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: dwY7/lD8KFP6yffKg5uiqtBj10AB0Dr7GSQ0YGksONc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2b:00:fc:a7:41:76:9c:bf:d9:83:d1:ec:25:09:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Sep 27 00:01:49 2026 GMT
Not After : Sep 28 00:01:49 2026 GMT
Subject: CN=f5878f6f9845784038585083a77e592f5aad7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:0e:fc:7d:57:7b:c0:15:7a:79:00:db:b8:
e5:7b:ed:22:d3:85:e1:47:09:56:08:a4:83:0a:5e:
65:25:3e:97:e2:3f:31:1e:76:99:78:2d:cf:a7:82:
55:01:7e:2a:35:36:40:87:82:58:5c:4f:0d:64:70:
9e:a3:e4:98:70:a7:dc:ca:2f:57:b5:ab:2a:e5:28:
56:a1:dc:af:79:de:76:45:c7:44:e1:71:1e:6b:b3:
0d:79:20:46:6b:22:90:f5:d1:1c:df:6a:36:85:11:
28:f2:41:cb:6f:40:c6:b5:ff:3c:a0:65:dc:3c:87:
c8:91:da:ae:81:02:e0:f2:c3:52:9b:93:b6:8b:74:
6d:de:15:52:62:98:74:d3:21:63:bf:d1:a5:90:14:
86:14:20:ae:45:9b:1e:a6:29:4e:7f:c4:67:49:cd:
59:5d:47:df:04:0c:c2:70:78:1b:7e:9d:34:4a:ff:
d7:73:bd:f9:41:6e:36:7f:de:89:7a:bb:4a:d9:f8:
61:3f:93:97:b5:77:b2:c3:d5:8c:a3:bc:38:6b:96:
3e:0e:d8:f9:ee:cc:1b:92:db:7e:89:d2:bf:1e:45:
ec:fc:ba:d8:c5:50:61:ab:22:bf:55:79:35:87:64:
ab:76:77:d9:0b:4d:64:14:39:26:0f:9e:9d:3e:68:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:8F:6F:98:45:78:40:38:58:50:83:A7:7E:59:2F:5A:AD:73:17
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:73:88:59:be:63:2c:06:88:e4:b3:2e:d1:6c:d5:67:b7:
62:83:1b:95:01:2a:79:fd:23:c5:ae:d9:a5:24:c8:2c:13:4b:
f4:5a:a4:dc:48:10:40:b5:97:2d:b1:36:34:d1:31:11:b1:ed:
d5:52:1f:5f:47:b6:f3:60:10:49:1f:db:58:26:9f:4e:1c:d9:
da:a6:a7:a8:ab:6d:6b:2c:f9:5f:a7:df:28:04:ce:65:60:59:
23:67:54:7e:7f:f3:e2:f1:c6:ab:0a:04:38:a2:ff:15:91:0b:
19:d0:9c:6f:8c:31:65:68:93:04:fa:09:37:0c:90:6b:db:18:
bb:08:95:7f:ca:e3:92:be:b6:6d:bd:fa:9a:49:cf:51:a3:81:
2b:d6:52:05:93:ea:12:79:99:bc:bc:9f:09:ec:1c:a5:35:1f:
38:39:44:b1:ca:14:83:47:15:fc:45:4c:f8:2e:b2:d6:d1:a2:
de:9a:19:87:7d:55:c8:92:b7:c8:12:1f:c9:c6:67:f8:44:1a:
86:db:23:73:4d:ac:10:c5:30:0f:e0:fc:3f:c0:98:38:66:cf:
a3:be:14:f6:a4:bf:a3:d0:69:c6:46:64:e6:fe:eb:75:35:0f:
6d:c1:ad:9b:c2:4d:36:ca:cc:e6:66:11:9d:a0:33:57:75:d6:
09:49:7f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKwD8p0F2nL/Zg9HsJQnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm
YjgwMWYwHhcNMjYwOTI3MDAwMTQ5WhcNMjYwOTI4MDAwMTQ5WjAzMTEwLwYDVQQD
EyhmNTg3OGY2Zjk4NDU3ODQwMzg1ODUwODNhNzdlNTkyZjVhYWQ3MzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk0O/H1Xe8AVenkA27jle+0i04Xh
RwlWCKSDCl5lJT6X4j8xHnaZeC3Pp4JVAX4qNTZAh4JYXE8NZHCeo+SYcKfcyi9X
tasq5ShWodyved52RcdE4XEea7MNeSBGayKQ9dEc32o2hREo8kHLb0DGtf88oGXc
PIfIkdqugQLg8sNSm5O2i3Rt3hVSYph00yFjv9GlkBSGFCCuRZsepilOf8RnSc1Z
XUffBAzCcHgbfp00Sv/Xc735QW42f96JertK2fhhP5OXtXeyw9WMo7w4a5Y+Dtj5
7swbktt+idK/HkXs/LrYxVBhqyK/VXk1h2SrdnfZC01kFDkmD56dPmhUlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWHj2+YRXhAOFhQg6d+WS9arXMXMB8GA1UdIwQY
MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt
OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi
LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALExziFm+
YywGiOSzLtFs1We3YoMblQEqef0jxa7ZpSTILBNL9Fqk3EgQQLWXLbE2NNExEbHt
1VIfX0e282AQSR/bWCafThzZ2qanqKttayz5X6ffKATOZWBZI2dUfn/z4vHGqwoE
OKL/FZELGdCcb4wxZWiTBPoJNwyQa9sYuwiVf8rjkr62bb36mknPUaOBK9ZSBZPq
EnmZvLyfCewcpTUfODlEscoUg0cV/EVM+C6y1tGi3poZh31VyJK3yBIfycZn+EQa
htsjc02sEMUwD+D8P8CYOGbPo74U9qS/o9BpxkZk5v7rdTUPbcGtm8JNNsrM5mYR
naAzV3XWCUl/Ug==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:08 2026 by rpki-client