Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: vS/zeA+EYXpRBdmNxAhnRbgQ2NZI+EHursUvuoxUmwk=
Subject key identifier: 41:2D:BB:A2:2D:52:24:A0:F5:B2:1F:C7:50:B3:5E:82:C4:49:D5:DD
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 01A0EA40045E87B63D2A57E67F72EA9D58C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 23:00:58 +0000
Manifest this update: Mon 28 Sep 2026 23:00:58 +0000
Manifest next update: Tue 29 Sep 2026 23:00:58 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: FXYZEsviYuzkUif+vIbQhywzSUpsZH2LA7i69132F/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:04:5e:87:b6:3d:2a:57:e6:7f:72:ea:9d:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Sep 28 23:00:58 2026 GMT
Not After : Sep 29 23:00:58 2026 GMT
Subject: CN=412dbba22d5224a0f5b21fc750b35e82c449d5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:7a:4e:61:e2:8e:9d:c8:4b:90:c5:eb:15:
b6:c7:7c:06:81:85:c4:29:39:c0:4e:0b:69:a8:68:
cb:1f:f2:07:40:d0:ac:46:d5:b4:c7:1e:60:6a:55:
9f:67:38:fe:7c:80:67:64:6f:2a:28:51:e8:69:f0:
b5:f7:7a:df:86:e8:6b:94:0c:ac:78:11:d2:91:6b:
67:e2:bc:df:4a:a3:b8:55:54:e3:90:8e:f0:c8:42:
49:c9:44:33:1c:4e:f3:dc:ad:4e:94:fc:0d:f5:5f:
b4:71:d2:86:49:5e:77:10:73:b7:47:dd:69:ca:8e:
1a:06:d7:97:41:81:a8:0f:40:8e:30:20:5a:ac:e0:
7f:b5:b1:84:5b:35:28:e8:d7:05:06:2d:d6:3d:40:
c9:d6:dd:1d:b7:28:a4:c1:01:11:a1:7a:e5:04:ee:
36:c7:19:40:19:05:b8:60:7d:1a:ba:a4:67:80:61:
c0:44:d0:98:24:2f:dc:31:f0:b9:28:82:9a:50:5a:
79:ea:18:60:03:28:65:c9:c6:cb:d7:91:1b:54:91:
0f:01:1e:93:e7:c6:72:52:fb:08:63:c6:6e:ae:c2:
ae:76:a5:14:69:4e:1e:60:ed:84:17:a6:63:d9:57:
be:4f:de:ec:ad:17:10:e4:6a:59:dd:db:99:01:1f:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:BB:A2:2D:52:24:A0:F5:B2:1F:C7:50:B3:5E:82:C4:49:D5:DD
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:98:1e:16:83:80:31:70:92:34:f2:c8:23:ba:eb:70:ae:dd:
38:15:3f:ec:f4:1c:47:60:76:be:87:fa:52:15:48:63:25:84:
7e:c4:c5:08:b9:9e:a5:b6:80:d3:51:5c:75:7c:fa:4a:5e:fc:
6c:51:67:17:00:cb:e4:26:05:2a:1c:4d:dd:e8:5c:92:32:ec:
a7:7d:6d:19:9f:98:aa:99:77:23:19:e5:2a:6a:13:a8:62:de:
9b:ae:e3:2e:60:61:8f:e3:37:38:ca:7f:ad:a0:58:f5:af:6c:
bc:99:a6:ac:a9:21:9d:76:11:0c:5c:47:92:18:7a:ac:67:10:
e4:2f:30:85:f4:a1:3a:ee:c2:bd:74:03:a5:7a:3f:42:15:4b:
ac:f5:29:3a:22:3e:1a:15:7b:4f:78:80:4f:ad:d5:db:a8:64:
bb:60:df:02:b7:e4:be:7d:b8:99:c1:1b:cc:ec:31:74:9b:67:
7b:8e:77:e3:df:9e:a3:d1:07:6c:0b:84:24:32:32:21:a5:52:
23:fe:ef:32:7a:af:7e:22:fb:77:b7:64:8d:fa:a0:cf:23:88:
46:e7:57:3d:6b:c4:13:4d:93:35:cf:96:28:40:55:cd:e9:11:
1f:1f:1d:9e:c6:ab:23:d4:fd:13:c9:66:dd:ff:5a:ce:01:5d:
e2:c2:46:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQAReh7Y9Klfmf3LqnVjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5
MTJkZTYwHhcNMjYwOTI4MjMwMDU4WhcNMjYwOTI5MjMwMDU4WjAzMTEwLwYDVQQD
Eyg0MTJkYmJhMjJkNTIyNGEwZjViMjFmYzc1MGIzNWU4MmM0NDlkNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxh6TmHijp3IS5DF6xW2x3wGgYXE
KTnATgtpqGjLH/IHQNCsRtW0xx5galWfZzj+fIBnZG8qKFHoafC193rfhuhrlAys
eBHSkWtn4rzfSqO4VVTjkI7wyEJJyUQzHE7z3K1OlPwN9V+0cdKGSV53EHO3R91p
yo4aBteXQYGoD0COMCBarOB/tbGEWzUo6NcFBi3WPUDJ1t0dtyikwQERoXrlBO42
xxlAGQW4YH0auqRngGHARNCYJC/cMfC5KIKaUFp56hhgAyhlycbL15EbVJEPAR6T
58ZyUvsIY8ZursKudqUUaU4eYO2EF6Zj2Ve+T97srRcQ5GpZ3duZAR9rPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEtu6ItUiSg9bIfx1CzXoLESdXdMB8GA1UdIwQY
MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt
OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2
LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJgeFoOA
MXCSNPLII7rrcK7dOBU/7PQcR2B2vof6UhVIYyWEfsTFCLmepbaA01FcdXz6Sl78
bFFnFwDL5CYFKhxN3ehckjLsp31tGZ+Yqpl3IxnlKmoTqGLem67jLmBhj+M3OMp/
raBY9a9svJmmrKkhnXYRDFxHkhh6rGcQ5C8whfShOu7CvXQDpXo/QhVLrPUpOiI+
GhV7T3iAT63V26hku2DfArfkvn24mcEbzOwxdJtne45349+eo9EHbAuEJDIyIaVS
I/7vMnqvfiL7d7dkjfqgzyOIRudXPWvEE02TNc+WKEBVzekRHx8dnsarI9T9E8lm
3f9azgFd4sJG6w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:36:44 2026 by rpki-client