
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier: 1rn2VozCyeDLWj+Ql+LFvlZm2dKG51Bw0xdr4CdUjJA=
Subject key identifier: 60:20:87:D7:D8:D2:10:61:14:D2:B9:6F:BD:7A:08:C3:11:FA:1C:01
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A0D2A633754EB936FED51131D8ED87238A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number: 1B3E
Signing time: Thu 24 Sep 2026 09:01:42 +0000
Manifest this update: Thu 24 Sep 2026 09:01:42 +0000
Manifest next update: Fri 25 Sep 2026 09:01:42 +0000
Files and hashes: 1: 1oQjSm-kGBrxkRotrqHYaPNAYog.roa (hash: IIc8bR6RSqfXsFfLY0BAhVIj/jEYp+IGcje1VI5aU+I=)
2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
3: 8I44W1DgMr0nZPhdUlABXoaCQTo.roa (hash: iGplkgd68u15p9JflOukg3JqxoQvGifeOjxl+QKCbak=)
4: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
5: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
6: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
7: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
8: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
9: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
10: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
11: O7pk6VO55klOvKkz3zzX4xSdPAM.roa (hash: pbiMJJZNQXKaJSS/os0JkRqMwkpts4ezR6iIP1M95i4=)
12: ObrwvnuybuX-TCdIyJYF8yRpE7M.roa (hash: ctdZU3BusOf+SUNNRsV3E3G1Z+DU1MZt+5gYWTRs6a8=)
13: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
14: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: uDcSZstEYg+Ab++qmnKwWuybQgQ8LkOwQmsCSUd5jY8=)
16: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
17: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
18: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
19: ecEwq8kzjmUz4wAl5y9NY23nHP4.roa (hash: C9B98Hr14zxeLb9pyxpcpUi6RBAGhUr5GBAo9feKiQo=)
20: eqX4HCtONznBtdkM0Yv1tIipxwA.roa (hash: MDuAY2fOHyll6nWj4kl7aul/nqNWMDpsUW4/eoDcPJk=)
21: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
22: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
23: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
24: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
25: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
26: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (hash: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=)
27: msFoJS2lgnt0k3mYiMMf7W7m4XI.roa (hash: dakN/AD/BmQJDFFo8rBDUJU0AXGNYQnGLQfcB5HJcJc=)
28: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:33:75:4e:b9:36:fe:d5:11:31:d8:ed:87:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Sep 24 09:01:42 2026 GMT
Not After : Sep 25 09:01:42 2026 GMT
Subject: CN=602087d7d8d2106114d2b96fbd7a08c311fa1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:7a:6d:a7:cb:bc:c2:71:e2:81:11:e7:4b:
4d:ee:d1:a8:5f:9e:c8:67:88:4e:4a:e7:ee:ab:57:
9b:81:96:31:a3:9d:f7:5b:30:fb:1e:0f:d0:08:7e:
e1:b5:99:72:48:5e:04:d8:13:dd:d5:cd:de:a1:bd:
0f:0f:0f:34:b9:f9:64:24:f1:3e:08:56:4c:5a:71:
a7:73:b5:ec:b5:b9:84:4f:b9:71:6a:f2:ed:a1:07:
7a:44:46:aa:d4:36:8e:93:ab:7a:83:69:82:45:51:
1f:5a:87:f2:e3:3f:af:4c:77:3c:d3:3b:f2:16:f7:
56:6e:c8:50:79:c4:e6:e1:3f:37:ad:22:e4:48:c0:
9c:e6:4a:8a:01:e2:4f:c8:dd:b7:8e:dc:af:0a:9b:
0d:05:ce:c6:6d:aa:6a:af:99:93:79:31:ee:28:13:
25:74:92:45:f8:2d:44:db:fe:16:aa:24:8e:ca:44:
f5:13:1d:da:94:96:bc:b8:cf:45:59:d2:0d:b1:a1:
73:68:f8:af:c9:4d:5b:96:4a:eb:81:10:e0:98:d8:
6d:9f:22:59:7f:b5:77:a9:b7:0d:3b:c9:ae:6e:41:
50:63:92:a6:77:2a:ee:d5:55:c4:12:54:4f:5b:49:
fa:ee:59:63:09:b6:1b:92:73:c7:86:c6:19:a3:7b:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:87:D7:D8:D2:10:61:14:D2:B9:6F:BD:7A:08:C3:11:FA:1C:01
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:b0:b7:55:49:de:1f:98:1f:82:bc:00:a6:bd:0d:73:1c:
6f:e3:88:6b:f7:a3:57:cd:ba:2d:ad:fd:37:d8:37:0a:12:35:
ca:5b:b9:1a:d2:95:dd:7b:6b:da:35:a2:9e:3a:14:7a:77:bc:
31:6c:bc:25:8f:ad:1c:73:96:f9:ee:2f:58:74:ad:57:42:91:
38:20:a2:7c:8c:d6:ec:0e:6c:e0:47:3a:1f:d3:d5:f1:5f:56:
46:3e:78:c4:0e:34:04:73:ca:d2:cf:97:69:71:17:4f:67:41:
f9:74:e7:fa:5f:c5:53:57:41:20:ff:0d:a3:1f:5e:2f:43:c9:
63:69:89:d8:dd:22:4d:e1:15:ad:7a:79:0c:2d:0a:eb:64:06:
80:1a:73:70:99:ee:cd:2c:af:fd:b6:92:32:eb:87:8e:54:f4:
d4:7b:ef:4e:ad:ab:ad:70:22:7a:1e:22:78:a3:f3:05:5f:19:
b8:e5:9d:62:f2:00:10:85:1a:c3:60:f2:60:ec:6b:8c:f6:ad:
27:3b:92:7c:16:eb:33:ac:68:63:55:76:25:88:7d:da:f9:72:
25:2c:11:79:0a:d7:90:04:bf:d2:c3:c2:a2:07:e2:3a:5c:c6:
49:f1:3c:f9:27:c5:3b:40:36:47:32:88:0e:80:00:70:ac:67:
9e:3c:0c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpjN1Trk2/tURMdjthyOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwOTI0MDkwMTQyWhcNMjYwOTI1MDkwMTQyWjAzMTEwLwYDVQQD
Eyg2MDIwODdkN2Q4ZDIxMDYxMTRkMmI5NmZiZDdhMDhjMzExZmExYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgN6bafLvMJx4oER50tN7tGoX57I
Z4hOSufuq1ebgZYxo533WzD7Hg/QCH7htZlySF4E2BPd1c3eob0PDw80uflkJPE+
CFZMWnGnc7XstbmET7lxavLtoQd6REaq1DaOk6t6g2mCRVEfWofy4z+vTHc80zvy
FvdWbshQecTm4T83rSLkSMCc5kqKAeJPyN23jtyvCpsNBc7Gbapqr5mTeTHuKBMl
dJJF+C1E2/4WqiSOykT1Ex3alJa8uM9FWdINsaFzaPivyU1blkrrgRDgmNhtnyJZ
f7V3qbcNO8mubkFQY5Kmdyru1VXEElRPW0n67lljCbYbknPHhsYZo3vzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAgh9fY0hBhFNK5b716CMMR+hwBMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnKwt1VJ
3h+YH4K8AKa9DXMcb+OIa/ejV826La39N9g3ChI1ylu5GtKV3Xtr2jWinjoUene8
MWy8JY+tHHOW+e4vWHStV0KROCCifIzW7A5s4Ec6H9PV8V9WRj54xA40BHPK0s+X
aXEXT2dB+XTn+l/FU1dBIP8Nox9eL0PJY2mJ2N0iTeEVrXp5DC0K62QGgBpzcJnu
zSyv/baSMuuHjlT01HvvTq2rrXAieh4ieKPzBV8ZuOWdYvIAEIUaw2DyYOxrjPat
JzuSfBbrM6xoY1V2JYh92vlyJSwReQrXkAS/0sPCogfiOlzGSfE8+SfFO0A2RzKI
DoAAcKxnnjwMYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:34 2026 by rpki-client