Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: hQPDh2VDTcbuydfdsk+TRtQN4XwWFVX7mDPS94Q4ZmA=
Subject key identifier: 02:7E:13:BC:10:43:20:94:99:81:F8:A0:9C:26:72:22:11:23:13:B4
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 01A0D011D9F6A73742208DD8C109898E73D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0388
Signing time: Wed 23 Sep 2026 21:00:25 +0000
Manifest this update: Wed 23 Sep 2026 21:00:25 +0000
Manifest next update: Thu 24 Sep 2026 21:00:25 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: TVH+ilOgaxqCEo9nmzuRxmVgJC6gfZRqODzcrbMzZTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:d9:f6:a7:37:42:20:8d:d8:c1:09:89:8e:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Sep 23 21:00:25 2026 GMT
Not After : Sep 24 21:00:25 2026 GMT
Subject: CN=027e13bc104320949981f8a09c267222112313b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:f3:f1:74:31:18:97:cb:2d:10:94:33:68:
21:0a:0f:99:c4:85:96:cd:c2:b6:71:c9:fe:d0:9f:
22:e4:73:68:9f:27:bf:fb:c8:73:90:18:c1:95:63:
0c:5e:e2:e9:dc:23:72:a4:32:76:56:d1:d9:5f:79:
4a:af:c8:1f:84:c2:2d:d8:ab:4f:57:cb:d9:20:f7:
1a:e1:fc:58:1a:7a:98:d4:d2:9f:af:ad:c9:b4:eb:
ff:9a:2d:75:da:ff:01:7c:e3:91:59:ae:f8:ef:8f:
77:52:14:89:a2:f8:a4:2f:15:4a:7f:82:5f:ca:cb:
14:80:4f:72:f3:72:97:0f:c5:8b:f5:9a:78:bc:c7:
40:59:31:86:19:f6:0b:2c:71:12:0b:0d:1d:cd:4c:
c6:55:a4:d9:3a:77:cf:77:af:c8:ad:72:4e:e5:69:
b6:58:24:4c:c1:32:41:df:bd:aa:6b:e7:39:da:ea:
77:96:fa:d9:1d:78:ba:6b:2e:35:75:02:91:29:6b:
58:fd:03:cb:7b:06:9a:95:cd:d8:e5:fc:96:db:fd:
e6:ab:36:db:f8:10:0b:91:a0:97:34:d1:45:c6:a2:
02:28:fd:08:3c:93:ab:1d:bb:f4:14:98:c0:09:08:
01:24:41:36:6a:ad:94:b4:ac:c7:d1:44:b8:e7:e4:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:13:BC:10:43:20:94:99:81:F8:A0:9C:26:72:22:11:23:13:B4
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ad:7a:b1:b1:b3:0a:f1:80:0a:3d:79:0c:76:15:7f:e9:98:
82:3a:c0:fe:e2:a6:c1:be:71:cf:fa:b1:d4:72:f9:5f:52:88:
b9:9e:6e:2a:30:87:62:a9:50:56:83:79:1f:99:85:e1:4d:c7:
a3:0f:4a:6d:9f:fd:40:04:6b:47:75:78:f6:7e:eb:ae:85:ea:
93:5a:55:49:d6:0d:ec:67:de:41:09:57:08:6c:33:33:05:38:
5f:18:79:9b:66:a5:71:f2:31:0c:df:ec:04:67:61:c0:0c:a9:
9c:69:bc:e3:b7:df:05:05:dd:36:ee:3b:2c:e3:7b:e8:86:bc:
f9:21:b7:94:bf:86:e3:f7:7f:45:99:6b:29:e0:53:a1:e3:d9:
00:cd:9a:cc:f0:bd:b2:72:5b:61:3b:36:78:09:ff:ee:7b:fc:
05:2b:60:b3:64:e7:7b:fa:89:92:8e:0a:29:03:c6:1d:5c:7d:
dd:ba:4d:09:93:88:76:40:46:79:ed:9a:21:ab:d9:a5:b7:73:
c1:74:0d:a4:29:0e:c2:8b:70:db:56:45:d6:3b:43:31:c5:f8:
bc:dc:01:36:5e:19:ff:23:5b:2d:b7:4d:98:0d:e8:d9:19:86:
61:5c:71:0b:6f:5e:10:80:76:2b:3c:4d:19:78:1a:07:21:9b:
e6:1f:56:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEdn2pzdCII3YwQmJjnPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDAxODVmNTUyY2Q5NzUyNzZjMDM0NjRmNTBjN2E1ZDM1
MTU2NGMwHhcNMjYwOTIzMjEwMDI1WhcNMjYwOTI0MjEwMDI1WjAzMTEwLwYDVQQD
EygwMjdlMTNiYzEwNDMyMDk0OTk4MWY4YTA5YzI2NzIyMjExMjMxM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/z8XQxGJfLLRCUM2ghCg+ZxIWW
zcK2ccn+0J8i5HNonye/+8hzkBjBlWMMXuLp3CNypDJ2VtHZX3lKr8gfhMIt2KtP
V8vZIPca4fxYGnqY1NKfr63JtOv/mi112v8BfOORWa747493UhSJovikLxVKf4Jf
yssUgE9y83KXD8WL9Zp4vMdAWTGGGfYLLHESCw0dzUzGVaTZOnfPd6/IrXJO5Wm2
WCRMwTJB372qa+c52up3lvrZHXi6ay41dQKRKWtY/QPLewaalc3Y5fyW2/3mqzbb
+BALkaCXNNFFxqICKP0IPJOrHbv0FJjACQgBJEE2aq2UtKzH0US45+RqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ+E7wQQyCUmYH4oJwmciIRIxO0MB8GA1UdIwQY
MBaAFM9AGF9VLNl1J2wDRk9Qx6XTUVZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzct
OTE5ZWVmYmE0OGI1LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzctOTE5ZWVmYmE0OGI1
LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq16sbGz
CvGACj15DHYVf+mYgjrA/uKmwb5xz/qx1HL5X1KIuZ5uKjCHYqlQVoN5H5mF4U3H
ow9KbZ/9QARrR3V49n7rroXqk1pVSdYN7GfeQQlXCGwzMwU4Xxh5m2alcfIxDN/s
BGdhwAypnGm847ffBQXdNu47LON76Ia8+SG3lL+G4/d/RZlrKeBToePZAM2azPC9
snJbYTs2eAn/7nv8BStgs2Tne/qJko4KKQPGHVx93bpNCZOIdkBGee2aIavZpbdz
wXQNpCkOwotw21ZF1jtDMcX4vNwBNl4Z/yNbLbdNmA3o2RmGYVxxC29eEIB2KzxN
GXgaByGb5h9WxQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:30 2026 by rpki-client