Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: Hcak1IrRdeXul7yghknzf5Fdm1h8TtSpxEq6tnPsoAY=
Subject key identifier: 3C:BD:29:29:67:CF:BA:DB:F4:FD:69:8A:FB:9C:07:FF:B1:AE:81:30
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 01A0CB594A8E1DB77E8D57DAB6293A709280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 1057
Signing time: Tue 22 Sep 2026 23:00:21 +0000
Manifest this update: Tue 22 Sep 2026 23:00:21 +0000
Manifest next update: Wed 23 Sep 2026 23:00:21 +0000
Files and hashes: 1: pKievJotd0Vwu1YJE0cQcf-DltY.roa (hash: h+T203a1jd44mMy05CeC2wpUpgb3MOkiNaLP9bVt08U=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: ctO6GUjYcapTiH+3t/IsQZF4++X4IgbD5epPesuH0UU=)
3: zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa (hash: s24/aX3H/IMCq17F9HBTclHDEpfjAqO3H7tgCV+Qz94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:4a:8e:1d:b7:7e:8d:57:da:b6:29:3a:70:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Sep 22 23:00:21 2026 GMT
Not After : Sep 23 23:00:21 2026 GMT
Subject: CN=3cbd292967cfbadbf4fd698afb9c07ffb1ae8130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:a3:34:c9:59:21:10:2b:57:35:4a:d2:3e:
0a:b8:1a:0a:4b:13:f2:7c:3d:68:00:48:5c:ef:2e:
ff:14:40:28:72:e4:3b:cb:aa:c4:4d:a4:84:43:cb:
1e:3f:14:8d:ac:95:b6:61:a9:b0:e0:d2:80:77:23:
9d:2c:28:9e:af:f8:fc:82:dc:24:d2:84:0e:7f:8b:
b9:29:82:0e:85:33:98:d8:f5:b3:c6:14:52:19:a0:
a3:80:19:d8:9b:3b:a7:cb:6c:af:b4:ff:21:f2:24:
5b:3a:e9:da:c3:7c:47:c3:28:41:74:08:dd:c1:00:
dc:64:b4:ff:39:bb:25:77:8e:f8:ce:72:09:ba:c9:
7f:0a:9e:b0:f2:19:1b:38:f9:00:24:33:a1:74:41:
12:7f:fd:aa:0d:07:33:06:d9:20:41:37:bc:b3:e9:
1c:34:8b:81:08:95:74:d5:e5:e1:25:06:87:86:20:
58:f7:4f:2b:06:73:0d:e0:5a:02:85:af:83:e8:4a:
9d:c9:30:12:28:c2:69:2d:37:c4:23:ed:9c:03:d4:
b0:1e:9a:f9:ba:ba:e7:7c:cd:da:b6:b7:fd:1c:8f:
35:af:3f:4f:29:9c:e9:88:8e:d8:5b:c5:d4:87:a2:
cc:71:9c:d1:36:63:b9:bf:45:a1:9b:96:39:13:d9:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:29:29:67:CF:BA:DB:F4:FD:69:8A:FB:9C:07:FF:B1:AE:81:30
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6b:69:70:20:69:c5:6d:3f:2e:e0:8e:8d:d3:5d:37:ba:54:
41:5a:3e:8b:54:66:1a:40:6e:6e:44:73:7d:7a:05:a7:1e:51:
4f:47:4f:50:5c:44:e0:a7:d5:c8:f6:b0:09:42:a5:32:0a:82:
45:77:b5:58:8e:46:9c:a9:ad:b3:b8:43:b4:03:3f:ec:00:bc:
b3:dd:0c:23:d6:51:8a:58:42:ed:4a:f5:b2:b1:fb:98:b8:f8:
bd:a1:9e:1e:9c:32:f7:de:04:e7:88:1a:88:09:1e:15:ed:63:
74:94:cb:cb:26:d0:b0:c9:ac:35:52:38:03:e0:b4:10:4f:5e:
f5:7c:42:db:98:f9:c0:a5:ee:6d:32:dc:94:14:72:49:a3:c0:
7c:76:77:a6:00:df:13:7a:45:64:7f:c8:89:de:d1:bc:b3:5d:
1c:6b:c3:2a:79:55:4a:dd:4f:01:cf:9f:09:e1:c9:59:53:f5:
66:a6:73:66:20:77:96:ac:51:01:b7:a7:50:35:31:0c:59:e6:
e0:2d:4e:b9:b9:3a:42:ed:5f:36:24:d2:d6:37:d5:74:77:e0:
b0:8d:e9:64:90:e2:85:21:71:79:60:33:30:b2:f1:70:e5:03:
2a:b5:e6:09:80:0a:c4:15:ce:7b:10:77:35:ea:a3:aa:e7:3f:
2f:df:a3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWUqOHbd+jVfatik6cJKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjg0M2NlMTUyMjlhODAyM2Q5N2ZhMjdhMzdlNTkyNzhi
MmJmZDcwHhcNMjYwOTIyMjMwMDIxWhcNMjYwOTIzMjMwMDIxWjAzMTEwLwYDVQQD
EygzY2JkMjkyOTY3Y2ZiYWRiZjRmZDY5OGFmYjljMDdmZmIxYWU4MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4WjNMlZIRArVzVK0j4KuBoKSxPy
fD1oAEhc7y7/FEAocuQ7y6rETaSEQ8sePxSNrJW2Yamw4NKAdyOdLCier/j8gtwk
0oQOf4u5KYIOhTOY2PWzxhRSGaCjgBnYmzuny2yvtP8h8iRbOunaw3xHwyhBdAjd
wQDcZLT/Obsld474znIJusl/Cp6w8hkbOPkAJDOhdEESf/2qDQczBtkgQTe8s+kc
NIuBCJV01eXhJQaHhiBY908rBnMN4FoCha+D6EqdyTASKMJpLTfEI+2cA9SwHpr5
urrnfM3atrf9HI81rz9PKZzpiI7YW8XUh6LMcZzRNmO5v0Whm5Y5E9n53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy9KSlnz7rb9P1pivucB/+xroEwMB8GA1UdIwQY
MBaAFM9oQ84VIpqAI9l/ono35ZJ4sr/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2Mt
NjRjZDE5NGY3ZjRmLzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2MtNjRjZDE5NGY3ZjRm
LzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGtpcCBp
xW0/LuCOjdNdN7pUQVo+i1RmGkBubkRzfXoFpx5RT0dPUFxE4KfVyPawCUKlMgqC
RXe1WI5GnKmts7hDtAM/7AC8s90MI9ZRilhC7Ur1srH7mLj4vaGeHpwy994E54ga
iAkeFe1jdJTLyybQsMmsNVI4A+C0EE9e9XxC25j5wKXubTLclBRySaPAfHZ3pgDf
E3pFZH/Iid7RvLNdHGvDKnlVSt1PAc+fCeHJWVP1ZqZzZiB3lqxRAbenUDUxDFnm
4C1Oubk6Qu1fNiTS1jfVdHfgsI3pZJDihSFxeWAzMLLxcOUDKrXmCYAKxBXOexB3
Neqjquc/L9+j1A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:38:16 2026 by rpki-client