Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: WIj2y15JRs0Swpmvvgor9BSHjZw+pWVyNjvJBV3y7Ho=
Subject key identifier: 88:AB:59:8D:79:FF:2C:60:C6:C7:A1:3F:BE:63:EF:2E:52:63:61:16
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 01A0C8C6A4F93BA551BC719EEDDA40730A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 09EA
Signing time: Tue 22 Sep 2026 11:00:56 +0000
Manifest this update: Tue 22 Sep 2026 11:00:56 +0000
Manifest next update: Wed 23 Sep 2026 11:00:56 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: Nmmc0HpmSVnODz3vW6dP2CuI3fpj9dRuiyBrHUTQeAc=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:a4:f9:3b:a5:51:bc:71:9e:ed:da:40:73:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Sep 22 11:00:56 2026 GMT
Not After : Sep 23 11:00:56 2026 GMT
Subject: CN=88ab598d79ff2c60c6c7a13fbe63ef2e52636116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:2d:13:7b:df:37:36:a4:16:4c:95:05:e0:
9b:5c:cb:92:8c:40:c4:b9:ec:4f:c7:4e:4d:e8:ce:
06:b5:0b:a6:08:6c:3c:dd:ba:e7:21:43:08:71:2a:
2b:1b:84:1c:41:c3:ef:a0:8e:50:33:8f:46:dc:6f:
d2:b0:74:fa:cd:b6:e9:27:e0:9c:b3:d7:15:7f:32:
dc:63:a9:85:d0:0b:e5:02:68:14:b6:6e:c0:d9:4b:
6c:57:73:f3:74:cd:0f:dd:03:89:8f:dc:42:97:3d:
f4:ff:b7:e3:86:a1:39:a7:34:5d:02:61:96:77:67:
a3:ad:0b:44:ee:fe:b8:65:6c:63:4a:14:c9:87:c0:
08:46:e5:a9:72:49:5f:7c:65:f1:b8:04:3e:ab:1b:
4a:9d:bb:76:cf:c6:e8:34:a0:d5:2b:3f:fa:6f:5a:
e1:c6:7a:4c:d6:c1:78:6d:84:a8:5b:23:97:c7:78:
ea:91:89:58:28:5a:6c:bd:85:54:50:2f:57:fd:04:
ad:c2:bf:10:b6:34:a4:a2:cd:45:f4:26:5d:b1:38:
1e:12:05:75:c5:6c:cc:eb:26:2f:91:00:bd:8d:b4:
c5:85:07:37:e7:f7:c7:3e:72:a5:ee:13:fe:2c:f3:
cb:13:da:ca:70:cf:a2:7b:b4:ad:e4:65:21:70:5c:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:59:8D:79:FF:2C:60:C6:C7:A1:3F:BE:63:EF:2E:52:63:61:16
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:cf:d3:47:c7:fb:ee:03:ea:f1:8a:44:ad:54:b4:b7:d2:
05:56:c4:55:dd:87:43:4e:d5:0a:79:0e:af:f1:36:4f:52:88:
94:72:2f:d9:5b:83:d9:5d:0a:f4:4c:b3:a3:77:bf:09:13:11:
9a:12:74:08:f9:0c:bb:f0:08:f6:b9:01:07:f1:ce:23:34:38:
e5:83:79:0e:67:57:70:0e:93:f5:29:fc:39:db:e0:b5:69:b7:
eb:15:0d:a8:12:6b:de:52:de:77:98:ad:30:80:c8:ae:48:59:
84:88:69:00:fb:09:be:81:20:cd:3b:56:dd:d0:e8:3a:60:eb:
45:23:ec:d6:e5:ea:63:83:b6:2f:15:b9:70:e9:b2:c2:81:6e:
cd:9a:5e:d8:f4:de:b5:e8:00:f6:9e:d1:67:12:03:5b:0c:f8:
b7:a1:25:65:45:07:a1:af:fd:61:66:6b:85:81:28:13:00:7b:
b2:4a:0a:da:c8:c0:01:e1:06:6f:74:f0:84:0a:a9:92:29:4d:
ef:1a:df:7f:cd:e9:a8:5f:81:d8:ae:4c:a7:a2:9b:a2:d3:42:
48:c6:6c:fb:aa:12:88:16:07:00:f3:4b:bb:e6:0b:89:ce:b3:
d9:9b:05:3b:c2:92:68:48:45:5a:c7:f6:52:50:76:ee:d0:83:
ee:79:d9:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxqT5O6VRvHGe7dpAcwp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1
MTU1NDkwHhcNMjYwOTIyMTEwMDU2WhcNMjYwOTIzMTEwMDU2WjAzMTEwLwYDVQQD
Eyg4OGFiNTk4ZDc5ZmYyYzYwYzZjN2ExM2ZiZTYzZWYyZTUyNjM2MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus0tE3vfNzakFkyVBeCbXMuSjEDE
uexPx05N6M4GtQumCGw83brnIUMIcSorG4QcQcPvoI5QM49G3G/SsHT6zbbpJ+Cc
s9cVfzLcY6mF0AvlAmgUtm7A2UtsV3PzdM0P3QOJj9xClz30/7fjhqE5pzRdAmGW
d2ejrQtE7v64ZWxjShTJh8AIRuWpcklffGXxuAQ+qxtKnbt2z8boNKDVKz/6b1rh
xnpM1sF4bYSoWyOXx3jqkYlYKFpsvYVUUC9X/QStwr8QtjSkos1F9CZdsTgeEgV1
xWzM6yYvkQC9jbTFhQc35/fHPnKl7hP+LPPLE9rKcM+ie7St5GUhcFxjcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIirWY15/yxgxsehP75j7y5SY2EWMB8GA1UdIwQY
MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt
YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0
LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp7P00fH
++4D6vGKRK1UtLfSBVbEVd2HQ07VCnkOr/E2T1KIlHIv2VuD2V0K9Eyzo3e/CRMR
mhJ0CPkMu/AI9rkBB/HOIzQ45YN5DmdXcA6T9Sn8OdvgtWm36xUNqBJr3lLed5it
MIDIrkhZhIhpAPsJvoEgzTtW3dDoOmDrRSPs1uXqY4O2LxW5cOmywoFuzZpe2PTe
tegA9p7RZxIDWwz4t6ElZUUHoa/9YWZrhYEoEwB7skoK2sjAAeEGb3TwhAqpkilN
7xrff83pqF+B2K5Mp6KbotNCSMZs+6oSiBYHAPNLu+YLic6z2ZsFO8KSaEhFWsf2
UlB27tCD7nnZOQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:05 2026 by rpki-client