Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: FkYMt9fMSkqpQu+fGO3wPn49vmW8+Lh4ciYBnvSyIyw=
Subject key identifier: 3F:67:A6:A4:4E:61:47:BC:CE:80:67:7A:1B:04:40:92:AC:10:D6:A9
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 01A0D6B92FCAF5CFEDD886C98D5AC8802399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0970
Signing time: Fri 25 Sep 2026 04:00:55 +0000
Manifest this update: Fri 25 Sep 2026 04:00:55 +0000
Manifest next update: Sat 26 Sep 2026 04:00:55 +0000
Files and hashes: 1: lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa (hash: zJ6sva32oUPzoGiW7df7lb3v0bTwrSUf3PIERJ7PhOM=)
2: pchuRg1QLyIFpwfwBa8mUvFC7YI.roa (hash: mgPigocKfj7ADfA3gO1GOzZIymW9WRZZ/OqjW5DV1fM=)
3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: y9sAt9TmblsgjMbu9vhWH9FTx8YJoHKyvnvIFskKf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:2f:ca:f5:cf:ed:d8:86:c9:8d:5a:c8:80:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Sep 25 04:00:55 2026 GMT
Not After : Sep 26 04:00:55 2026 GMT
Subject: CN=3f67a6a44e6147bcce80677a1b044092ac10d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:11:14:62:bc:36:bb:1c:5d:bd:0d:d7:08:
e7:ee:de:b0:c4:cc:42:21:19:c7:b5:9b:4f:71:2a:
ff:8c:01:5d:91:c0:35:17:8e:16:28:2d:88:85:98:
83:63:44:ad:71:17:25:06:0d:0c:73:81:3f:c8:0d:
a0:62:c7:bd:67:5c:70:f1:c3:f6:49:e9:17:6c:07:
9e:d6:1c:70:9f:cb:87:3e:06:6d:a9:74:22:3e:f4:
01:1c:ad:bd:0a:b5:f8:f5:00:e9:0f:f2:7d:b2:75:
2d:0b:1a:73:07:09:fd:57:6e:69:e0:7d:e4:85:01:
f4:36:38:1f:bf:97:b3:8e:e8:c8:04:fd:1a:6f:82:
fb:20:35:55:7f:02:1a:51:54:64:79:55:d6:57:c8:
ad:a0:a7:43:49:2c:8d:15:1a:37:50:36:f4:89:99:
35:43:77:bf:e7:ac:26:f7:c5:4a:58:02:e5:c5:28:
c1:be:33:d2:f5:e2:a9:3a:84:d9:85:de:d1:97:2b:
71:5c:13:84:cb:33:ab:92:9f:10:2e:f6:5e:b4:9f:
82:63:f5:a9:59:b4:9d:89:bf:47:63:cc:8a:cc:7e:
94:f8:27:c6:0b:ea:09:30:70:ed:6c:f7:f6:72:1a:
7c:48:fc:5c:25:2c:08:3c:5b:2b:8c:cf:ec:53:84:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:A6:A4:4E:61:47:BC:CE:80:67:7A:1B:04:40:92:AC:10:D6:A9
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:03:19:d9:25:d3:89:56:6a:f6:a7:d5:61:6f:81:91:ef:
af:a8:11:e5:43:e9:93:2e:59:be:62:f9:81:21:f4:1f:1b:bc:
a9:24:56:61:47:41:87:91:74:c0:75:39:b4:f3:5b:99:e4:e2:
e5:0a:10:81:1c:12:f9:6f:56:f2:18:bd:00:ea:a5:90:ed:ef:
0e:4e:f6:1f:29:f1:86:ef:f0:6f:13:b8:3e:87:99:82:14:59:
8b:ff:f1:57:96:5a:56:77:88:8a:98:26:e4:dc:bb:82:1c:4a:
d7:db:b2:6c:af:17:f5:85:4f:6a:59:1a:33:2d:69:8a:70:21:
5f:3c:36:f2:9d:a9:ed:1d:5a:dd:5c:cd:12:9a:6f:a5:e5:2d:
4a:b9:31:50:ab:9e:36:87:df:be:4c:cd:2d:87:8d:ca:80:e1:
28:a8:ab:f2:ce:78:c8:8e:37:a9:8f:50:59:8d:2e:57:9c:3a:
ea:b0:33:a7:21:da:1c:0a:60:2c:84:34:d2:86:c9:2e:e9:5c:
c3:77:28:1f:ff:d2:32:98:31:16:3d:9b:79:5d:99:f6:84:d7:
c4:b3:60:ed:1f:d7:4e:5c:de:cb:95:1e:c2:06:ab:b0:b1:3e:
7d:fb:81:c2:aa:40:8f:f1:51:3e:42:c7:20:a1:74:9e:ef:9c:
22:ee:19:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuS/K9c/t2IbJjVrIgCOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm
MmRjNzcwHhcNMjYwOTI1MDQwMDU1WhcNMjYwOTI2MDQwMDU1WjAzMTEwLwYDVQQD
EygzZjY3YTZhNDRlNjE0N2JjY2U4MDY3N2ExYjA0NDA5MmFjMTBkNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXMRFGK8NrscXb0N1wjn7t6wxMxC
IRnHtZtPcSr/jAFdkcA1F44WKC2IhZiDY0StcRclBg0Mc4E/yA2gYse9Z1xw8cP2
SekXbAee1hxwn8uHPgZtqXQiPvQBHK29CrX49QDpD/J9snUtCxpzBwn9V25p4H3k
hQH0Njgfv5ezjujIBP0ab4L7IDVVfwIaUVRkeVXWV8itoKdDSSyNFRo3UDb0iZk1
Q3e/56wm98VKWALlxSjBvjPS9eKpOoTZhd7RlytxXBOEyzOrkp8QLvZetJ+CY/Wp
WbSdib9HY8yKzH6U+CfGC+oJMHDtbPf2chp8SPxcJSwIPFsrjM/sU4SysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9npqROYUe8zoBnehsEQJKsENapMB8GA1UdIwQY
MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut
ZDJkYjczZmYzMWJjLzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj
LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhskDGdkl
04lWavan1WFvgZHvr6gR5UPpky5ZvmL5gSH0Hxu8qSRWYUdBh5F0wHU5tPNbmeTi
5QoQgRwS+W9W8hi9AOqlkO3vDk72Hynxhu/wbxO4PoeZghRZi//xV5ZaVneIipgm
5Ny7ghxK19uybK8X9YVPalkaMy1pinAhXzw28p2p7R1a3VzNEppvpeUtSrkxUKue
NoffvkzNLYeNyoDhKKir8s54yI43qY9QWY0uV5w66rAzpyHaHApgLIQ00obJLulc
w3coH//SMpgxFj2beV2Z9oTXxLNg7R/XTlzey5UewgarsLE+ffuBwqpAj/FRPkLH
IKF0nu+cIu4ZBA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:00:05 2026 by rpki-client