Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
File: zX8aXqfR0w1axu1LjqyJsezI-dY.mft (raw, json)
Hash identifier: U+kM1f0CKzsrnPt4TcIT9BYw33FcPF9HiiToME23kSk=
Subject key identifier: 78:A9:FA:09:E9:C3:31:6A:4C:F8:C3:F3:7B:F0:B7:B0:AB:8E:98:C3
Authority key identifier: CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
Certificate issuer: /CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Certificate serial: 01A0DE05ACE377CAFC213AC662506993766D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
Manifest number: 1B
Signing time: Sat 26 Sep 2026 14:01:48 +0000
Manifest this update: Sat 26 Sep 2026 14:01:48 +0000
Manifest next update: Sun 27 Sep 2026 14:01:48 +0000
Files and hashes: 1: LAlwfScrj210Zj_YjjVP1IMy-Ts.asa (hash: TDEsF7QpfzwbNHSJA9Ww5ZKSL4vcaKQcJiaTOoq+ljk=)
2: zX8aXqfR0w1axu1LjqyJsezI-dY.crl (hash: GFX4MOeZNwOK9VNQqwzrB1+ZbRY15zr0ZcgxubNnZ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:ac:e3:77:ca:fc:21:3a:c6:62:50:69:93:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Validity
Not Before: Sep 26 14:01:48 2026 GMT
Not After : Sep 27 14:01:48 2026 GMT
Subject: CN=78a9fa09e9c3316a4cf8c3f37bf0b7b0ab8e98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:c7:d5:f9:b5:7e:51:89:c5:5d:f9:5b:11:
13:f6:56:34:73:67:31:1b:ff:ef:e0:9f:8b:1d:f0:
22:dc:e2:85:31:88:52:bb:4a:f6:b7:e4:dc:88:99:
5f:b6:00:1e:c2:a2:25:fe:91:e5:0d:8a:4c:a7:8c:
99:35:61:8a:bc:87:38:4e:43:15:55:4f:e7:7f:22:
b6:dc:33:81:96:dc:cf:9b:f4:85:31:2a:c4:90:69:
a7:f4:b1:68:e5:56:bc:77:eb:0c:06:5f:45:a7:9d:
01:64:85:35:4f:aa:e5:0f:7f:1e:e7:1c:8d:12:c8:
24:e5:a8:7a:95:a6:e4:87:24:06:37:43:b7:7f:f8:
75:b1:e9:6f:29:e8:9b:c9:11:a8:c0:2a:4a:e1:9d:
fb:62:df:76:ef:92:85:00:f8:d9:ed:1f:98:fa:85:
8d:8f:75:59:8c:ab:ca:84:5e:9a:ba:ab:57:fc:c5:
73:26:86:ed:62:84:dc:18:fc:dd:68:48:a7:88:31:
79:a7:8a:f1:c6:97:f1:d5:6c:8a:e6:cf:dd:79:63:
30:5f:8a:79:e2:9c:b4:22:86:28:d4:cc:2c:5c:d7:
7a:6c:e8:4a:c3:97:7d:83:58:1e:25:6f:b6:88:80:
d9:a3:cb:37:bb:c6:2e:9a:47:33:7e:8a:f8:ad:0a:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:FA:09:E9:C3:31:6A:4C:F8:C3:F3:7B:F0:B7:B0:AB:8E:98:C3
X509v3 Authority Key Identifier:
keyid:CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:91:b2:cc:ac:d9:59:7d:68:8b:56:3f:9a:f2:40:4a:b2:2b:
57:b2:35:af:d1:1e:ee:06:1b:42:2e:37:2a:c5:35:a9:97:52:
08:ac:7b:82:81:2e:b9:a7:8e:0a:c7:d6:9c:6b:48:31:b6:af:
3d:94:f6:bf:e5:0f:b9:cd:1a:8d:6a:1a:87:fe:0f:5d:32:67:
db:57:0a:03:9b:5e:48:80:6f:9f:a7:6d:73:6b:ca:75:3a:f2:
64:f5:4e:33:7c:ea:85:12:c8:3d:99:ea:27:e7:06:39:36:c6:
c4:17:8c:80:a7:07:20:ae:79:9e:19:f3:f6:9d:4b:76:98:2e:
c4:aa:1f:7c:a9:28:61:70:40:2e:f0:21:01:05:54:e2:e7:6b:
f6:40:0f:21:d6:ea:81:38:ca:bb:d9:43:4b:26:02:dc:cf:6b:
6f:74:0f:f0:2c:eb:ce:86:a5:5e:70:02:9c:71:f7:d2:63:a1:
fd:12:22:cd:c2:59:d8:8b:21:7d:1e:e0:9b:13:56:ab:96:89:
e0:46:2c:1f:4d:06:74:f5:dd:b2:68:8a:16:b3:21:fb:9b:b7:
4b:bd:5a:87:4e:7b:f9:68:be:10:39:24:04:5d:1c:4b:d0:91:
eb:79:c3:92:e7:67:f3:49:4a:8c:3a:26:ac:1e:ed:5b:13:8d:
c8:ee:22:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBazjd8r8ITrGYlBpk3ZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2YxYTVlYTdkMWQzMGQ1YWM2ZWQ0YjhlYWM4OWIxZWNj
OGY5ZDYwHhcNMjYwOTI2MTQwMTQ4WhcNMjYwOTI3MTQwMTQ4WjAzMTEwLwYDVQQD
Eyg3OGE5ZmEwOWU5YzMzMTZhNGNmOGMzZjM3YmYwYjdiMGFiOGU5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/H1fm1flGJxV35WxET9lY0c2cx
G//v4J+LHfAi3OKFMYhSu0r2t+TciJlftgAewqIl/pHlDYpMp4yZNWGKvIc4TkMV
VU/nfyK23DOBltzPm/SFMSrEkGmn9LFo5Va8d+sMBl9Fp50BZIU1T6rlD38e5xyN
Esgk5ah6labkhyQGN0O3f/h1selvKeibyRGowCpK4Z37Yt9275KFAPjZ7R+Y+oWN
j3VZjKvKhF6auqtX/MVzJobtYoTcGPzdaEiniDF5p4rxxpfx1WyK5s/deWMwX4p5
4py0IoYo1MwsXNd6bOhKw5d9g1geJW+2iIDZo8s3u8Yumkczfor4rQqf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHip+gnpwzFqTPjD83vwt7CrjpjDMB8GA1UdIwQY
MBaAFM1/Gl6n0dMNWsbtS46sibHsyPnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85YmY0OTgtOGMzMS00NmVmLTk4NDAt
MzVjMDM1ZmU5ZDQ4LzEvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85YmY0OTgtOGMzMS00NmVmLTk4NDAtMzVjMDM1ZmU5ZDQ4
LzEvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJGyzKzZ
WX1oi1Y/mvJASrIrV7I1r9Ee7gYbQi43KsU1qZdSCKx7goEuuaeOCsfWnGtIMbav
PZT2v+UPuc0ajWoah/4PXTJn21cKA5teSIBvn6dtc2vKdTryZPVOM3zqhRLIPZnq
J+cGOTbGxBeMgKcHIK55nhnz9p1LdpguxKoffKkoYXBALvAhAQVU4udr9kAPIdbq
gTjKu9lDSyYC3M9rb3QP8CzrzoalXnACnHH30mOh/RIizcJZ2IshfR7gmxNWq5aJ
4EYsH00GdPXdsmiKFrMh+5u3S71ah057+Wi+EDkkBF0cS9CR63nDkudn80lKjDom
rB7tWxONyO4iJg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:30 2026 by rpki-client