Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: yFSqkWEFiNgfAGw+lldhgFUaM0ns21Mx3xbcrF6iqG0=
Subject key identifier: D5:B3:66:F0:7F:77:58:B2:C0:1F:5F:B7:74:48:73:09:08:7A:1B:7A
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 01A0D9F20FFE647A510029084D9FFE422387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 1309
Signing time: Fri 25 Sep 2026 19:01:54 +0000
Manifest this update: Fri 25 Sep 2026 19:01:54 +0000
Manifest next update: Sat 26 Sep 2026 19:01:54 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: Zx8PAXi6yM1paLekidYZtXvHpU3kEWZgwfM2e8uyW/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:0f:fe:64:7a:51:00:29:08:4d:9f:fe:42:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Sep 25 19:01:54 2026 GMT
Not After : Sep 26 19:01:54 2026 GMT
Subject: CN=d5b366f07f7758b2c01f5fb774487309087a1b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:17:d5:8e:02:44:bb:10:58:b1:1a:7b:8e:
68:12:58:d1:65:ca:cb:06:33:c0:ab:79:f4:96:28:
a8:9f:f6:85:dd:d6:ee:57:7a:6b:20:ed:ef:f5:f2:
f8:f2:0b:00:12:4b:b9:28:65:ad:79:5a:a9:5f:09:
65:87:a8:6f:74:c0:66:5e:6d:7c:fb:cf:06:9b:5d:
9a:22:90:b9:e8:16:2f:e3:ca:43:2c:41:16:3b:0e:
5c:7e:a6:ba:ff:d1:ec:2b:17:f1:fd:59:79:fa:be:
2f:be:48:e1:0e:3c:b1:dc:5d:c1:fa:b4:2e:84:b7:
20:de:77:40:bf:b8:7a:24:03:34:38:a2:d4:8c:41:
c5:e6:05:51:48:07:df:44:d9:fe:6e:21:17:4a:98:
11:1a:aa:bc:48:ab:f1:c1:c2:7b:6a:2e:82:5c:78:
ce:64:c5:d2:7f:bb:54:e6:67:61:37:78:65:dd:9c:
f7:72:d7:91:0d:d3:ca:2f:37:48:c6:3d:9d:eb:5a:
81:44:7f:c9:9e:f8:8f:a3:c7:44:7d:36:6c:8f:6a:
fc:4c:7e:5b:58:d9:ff:00:9d:0b:c2:2e:2b:50:02:
a8:95:10:2b:41:34:c7:52:a4:ef:24:fb:fa:4c:e8:
80:77:84:ce:88:b6:1c:12:e1:d9:1a:55:ed:00:13:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:66:F0:7F:77:58:B2:C0:1F:5F:B7:74:48:73:09:08:7A:1B:7A
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a7:cc:f5:bc:2e:40:2c:ae:b2:d7:b1:f5:06:b4:5f:c0:f4:
53:18:c5:93:07:cd:ac:2d:51:ea:d9:f5:ec:76:9e:ba:ee:11:
92:7a:48:89:72:4c:cd:b4:0b:40:15:a1:bb:ec:79:92:0a:20:
46:d9:0f:ca:2c:57:5b:e2:0e:d0:7b:60:7b:3b:21:a5:20:7b:
a8:8a:1a:79:a5:2e:8b:4c:d6:37:31:d0:17:cb:b7:64:d5:6c:
29:e1:f3:67:ce:d6:bb:68:47:57:c1:dd:44:23:88:68:68:f2:
41:b9:32:48:48:3c:b1:da:01:3e:93:64:3e:28:86:05:1f:e3:
6c:37:2d:96:92:66:c6:02:b3:3c:18:18:64:83:6e:94:03:5b:
70:1e:8d:3b:d9:92:b6:8d:c7:98:7b:92:40:80:0a:d1:1e:e3:
fe:e6:6a:aa:a4:10:5c:8e:dd:3b:af:87:8a:c6:3d:64:46:66:
3b:bd:31:5e:e4:ab:1c:a3:02:57:6c:7b:bd:0a:97:27:ef:03:
2f:e2:ba:33:46:b0:45:b2:e5:cd:a0:6b:40:28:fb:ff:4b:15:
46:ed:65:15:ed:75:47:cb:0f:de:58:1b:24:d3:24:1f:80:00:
79:39:fc:db:4a:ac:61:9d:5b:3e:73:7d:88:4f:08:ee:ac:1c:
2b:fb:cf:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8g/+ZHpRACkITZ/+QiOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjYwOTI1MTkwMTU0WhcNMjYwOTI2MTkwMTU0WjAzMTEwLwYDVQQD
EyhkNWIzNjZmMDdmNzc1OGIyYzAxZjVmYjc3NDQ4NzMwOTA4N2ExYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc4X1Y4CRLsQWLEae45oEljRZcrL
BjPAq3n0liion/aF3dbuV3prIO3v9fL48gsAEku5KGWteVqpXwllh6hvdMBmXm18
+88Gm12aIpC56BYv48pDLEEWOw5cfqa6/9HsKxfx/Vl5+r4vvkjhDjyx3F3B+rQu
hLcg3ndAv7h6JAM0OKLUjEHF5gVRSAffRNn+biEXSpgRGqq8SKvxwcJ7ai6CXHjO
ZMXSf7tU5mdhN3hl3Zz3cteRDdPKLzdIxj2d61qBRH/JnviPo8dEfTZsj2r8TH5b
WNn/AJ0Lwi4rUAKolRArQTTHUqTvJPv6TOiAd4TOiLYcEuHZGlXtABNe9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWzZvB/d1iywB9ft3RIcwkIeht6MB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqfM9bwu
QCyustex9Qa0X8D0UxjFkwfNrC1R6tn17Haeuu4RknpIiXJMzbQLQBWhu+x5kgog
RtkPyixXW+IO0HtgezshpSB7qIoaeaUui0zWNzHQF8u3ZNVsKeHzZ87Wu2hHV8Hd
RCOIaGjyQbkySEg8sdoBPpNkPiiGBR/jbDctlpJmxgKzPBgYZINulANbcB6NO9mS
to3HmHuSQIAK0R7j/uZqqqQQXI7dO6+HisY9ZEZmO70xXuSrHKMCV2x7vQqXJ+8D
L+K6M0awRbLlzaBrQCj7/0sVRu1lFe11R8sP3lgbJNMkH4AAeTn820qsYZ1bPnN9
iE8I7qwcK/vPjQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:38 2026 by rpki-client