Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
File: z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft (raw, json)
Hash identifier: gbh6duj6fsdBcDTmUymzQNn3CaU9E7+utl/pHUeSffM=
Subject key identifier: 07:E1:29:4C:ED:FC:F1:E1:96:F8:BE:E3:6D:12:2A:D8:7F:92:99:3E
Authority key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Certificate issuer: /CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Certificate serial: 01A0D9BAB10638951F5A81A5E32852EABBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:25 +0000
Manifest this update: Fri 25 Sep 2026 18:01:25 +0000
Manifest next update: Sat 26 Sep 2026 18:01:25 +0000
Files and hashes: 1: UpQaalpvFrofiBvJgDzD5ykV4Es.roa (hash: htOEHU0XKcxzfErxMNDU5sKxeT/b4gBnMaIIg36jS6Y=)
2: lvL4hmOHFOaf-c2I-4F7EqTFtJs.roa (hash: RhrM1BRru6RaIuVQmbqOxmE3Nat3kjidvWR1T36n9a8=)
3: z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl (hash: JsDmUdi1qC3tTYrnjyQSAsZVfu25vYqnB+xOU+lHK7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b1:06:38:95:1f:5a:81:a5:e3:28:52:ea:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Validity
Not Before: Sep 25 18:01:25 2026 GMT
Not After : Sep 26 18:01:25 2026 GMT
Subject: CN=07e1294cedfcf1e196f8bee36d122ad87f92993e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:88:3c:ee:04:f9:fd:40:9b:fc:1d:8b:06:
9d:88:c1:7a:aa:34:a8:ba:d0:a8:92:97:1a:2d:64:
7a:09:cb:a1:d9:ad:67:49:2c:3a:a7:f3:55:48:21:
f7:bf:8f:de:e1:54:11:04:68:8a:e6:62:4d:ce:e7:
cd:00:e6:53:dd:ea:04:c1:c0:c0:28:ec:64:ae:fd:
0b:53:f5:bc:de:16:ee:86:11:b3:1c:32:82:41:fc:
8d:95:b2:ae:92:94:53:45:f3:b8:33:95:9a:73:70:
cf:e5:35:18:63:6c:1e:61:9e:e0:ba:8b:91:c5:a9:
2d:f4:89:b7:c8:b6:4a:d5:d7:10:ac:ce:00:86:43:
e6:54:51:eb:43:ab:c1:2f:9c:28:aa:10:d3:90:30:
6c:d3:63:fe:9b:46:11:a8:bd:2d:ab:5f:77:ca:4d:
fa:aa:c6:c1:ab:3b:6b:c8:75:bf:cc:57:77:3d:46:
f8:dc:00:12:43:f8:d5:08:58:38:07:8e:a3:46:1d:
fc:3b:c4:21:fb:a7:08:3c:8a:bc:ed:fb:e6:4a:64:
49:d9:9c:14:7d:92:0a:00:48:31:51:74:68:09:b4:
df:b8:01:b5:66:80:0c:11:37:f9:40:97:32:ad:0e:
5d:0e:8b:bc:7a:12:27:1c:12:f8:8f:50:c3:a3:e8:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:29:4C:ED:FC:F1:E1:96:F8:BE:E3:6D:12:2A:D8:7F:92:99:3E
X509v3 Authority Key Identifier:
keyid:CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:48:49:a6:c1:88:60:4e:f4:ba:09:09:d1:3f:8b:97:64:
21:2c:f4:01:d3:7c:42:0b:81:51:e9:0d:ac:60:ec:47:2f:01:
db:b5:a5:f5:74:9c:ae:f5:2a:fc:7b:bd:2e:63:0a:0d:4c:66:
8b:61:d3:de:88:07:cb:de:55:cb:eb:29:2d:b2:3c:d4:76:03:
f1:e9:dc:04:ff:ca:eb:c3:23:23:76:2a:c0:b6:39:d1:9d:f7:
0b:b2:25:87:a2:8a:95:6a:88:10:dc:58:93:e3:6f:75:45:a4:
97:f0:28:d6:11:41:f4:1f:d9:5a:a3:90:a0:ee:e9:a4:f6:36:
ca:a0:af:54:97:89:3e:42:24:bf:4d:14:35:3a:9d:71:16:f3:
b9:00:07:b0:80:1f:4d:dd:47:42:44:e6:c4:a9:e0:56:d9:1e:
55:d2:3c:97:95:33:ae:b9:05:96:4d:d9:b0:3e:8a:42:fc:f0:
29:88:93:8f:5c:9f:ca:5b:fa:5a:87:ea:4b:92:a7:21:40:7d:
73:34:bd:dd:7c:99:78:f6:57:c3:dd:d5:43:e6:01:41:bf:5a:
e1:7d:8a:f2:07:69:c1:30:31:33:13:01:65:bb:48:3d:16:8a:
12:cf:37:15:f4:f5:8c:a3:ad:24:98:a0:f3:72:91:d6:fe:74:
77:8a:37:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZurEGOJUfWoGl4yhS6rugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjVjYWE0ZGRmZmJmZTNlMDY3ZmY4ZWM3N2UxNTBjOThh
ZjRmMzUwHhcNMjYwOTI1MTgwMTI1WhcNMjYwOTI2MTgwMTI1WjAzMTEwLwYDVQQD
EygwN2UxMjk0Y2VkZmNmMWUxOTZmOGJlZTM2ZDEyMmFkODdmOTI5OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZqIPO4E+f1Am/wdiwadiMF6qjSo
utCokpcaLWR6Ccuh2a1nSSw6p/NVSCH3v4/e4VQRBGiK5mJNzufNAOZT3eoEwcDA
KOxkrv0LU/W83hbuhhGzHDKCQfyNlbKukpRTRfO4M5Wac3DP5TUYY2weYZ7guouR
xakt9Im3yLZK1dcQrM4AhkPmVFHrQ6vBL5woqhDTkDBs02P+m0YRqL0tq193yk36
qsbBqztryHW/zFd3PUb43AASQ/jVCFg4B46jRh38O8Qh+6cIPIq87fvmSmRJ2ZwU
fZIKAEgxUXRoCbTfuAG1ZoAMETf5QJcyrQ5dDou8ehInHBL4j1DDo+iO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfhKUzt/PHhlvi+420SKth/kpk+MB8GA1UdIwQY
MBaAFM+1yqTd/7/j4Gf/jsd+FQyYr081MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt
ZDczZGM0YjQxY2UxLzEvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux
LzEvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+pISabB
iGBO9LoJCdE/i5dkISz0AdN8QguBUekNrGDsRy8B27Wl9XScrvUq/Hu9LmMKDUxm
i2HT3ogHy95Vy+spLbI81HYD8encBP/K68MjI3YqwLY50Z33C7Ilh6KKlWqIENxY
k+NvdUWkl/Ao1hFB9B/ZWqOQoO7ppPY2yqCvVJeJPkIkv00UNTqdcRbzuQAHsIAf
Td1HQkTmxKngVtkeVdI8l5UzrrkFlk3ZsD6KQvzwKYiTj1yfylv6WofqS5KnIUB9
czS93XyZePZXw93VQ+YBQb9a4X2K8gdpwTAxMxMBZbtIPRaKEs83FfT1jKOtJJig
83KR1v50d4o3Tg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:27:31 2026 by rpki-client