Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: VzwJnXD4rEWhU0lMouApiiv3WlyuVfFrZE0xytVAWmo=
Subject key identifier: A7:D0:EC:80:35:7E:71:09:B8:6D:76:0F:D7:8A:7B:A8:A0:5E:E0:5E
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01A0D8DEA59C067976AD03D3E32DDF6A4544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 12EC
Signing time: Fri 25 Sep 2026 14:01:05 +0000
Manifest this update: Fri 25 Sep 2026 14:01:05 +0000
Manifest next update: Sat 26 Sep 2026 14:01:05 +0000
Files and hashes: 1: BShN_Su6KeKwbhlTkQBsz2EU2ag.roa (hash: XwDRhqSVGgdp2r56sCqKjsBrreDrVD6B7DqyCO6zoH8=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: hHu64n4x7kGtAkqmKA3xeWyA49NXR30FdpXxEG8Io5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:a5:9c:06:79:76:ad:03:d3:e3:2d:df:6a:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Sep 25 14:01:05 2026 GMT
Not After : Sep 26 14:01:05 2026 GMT
Subject: CN=a7d0ec80357e7109b86d760fd78a7ba8a05ee05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:42:cd:8d:70:4c:5f:41:c3:30:19:fb:3d:
17:0e:1d:f9:b1:ad:72:31:e3:5f:16:2b:be:f4:23:
80:c2:fd:fe:7b:6c:9f:e8:82:e8:6c:b6:76:65:0b:
bc:8b:32:9b:1c:92:5d:7b:94:83:84:0f:3d:46:af:
ce:06:cd:ff:fe:ed:4c:81:51:9b:55:58:ae:3b:6c:
b2:4d:f0:e2:09:15:f2:14:3f:cc:a4:e2:96:24:30:
c5:c9:88:2a:63:32:fd:63:4e:8d:d1:8f:be:33:8c:
9f:09:35:94:fc:be:e2:c1:a8:79:06:8b:58:6a:f3:
78:12:60:88:db:a1:04:a1:a2:24:37:6b:e0:9d:00:
f0:c4:19:4e:7c:5a:8c:b6:07:8c:f3:5d:71:de:23:
d1:1a:94:8b:d7:eb:bb:e1:3c:c3:f8:29:74:04:0d:
3b:d4:fa:7f:86:53:1b:73:a2:73:7f:65:6d:5b:4f:
07:63:f0:48:6f:32:98:72:af:55:e4:e8:e1:64:67:
45:b8:c2:f5:76:fb:73:56:c4:b6:11:9f:6a:69:a8:
bf:99:c4:97:d8:87:f0:3f:20:04:c5:50:85:77:71:
a3:18:12:37:65:f1:5a:f4:31:91:99:e0:42:db:99:
70:af:bb:ec:18:57:f4:40:33:7d:da:df:00:b1:2f:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:EC:80:35:7E:71:09:B8:6D:76:0F:D7:8A:7B:A8:A0:5E:E0:5E
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:cf:52:55:9d:de:e4:f3:cd:17:6a:c4:41:50:2c:58:2f:
33:00:19:b6:88:f0:39:79:68:97:35:5a:38:9c:88:23:89:41:
de:70:5a:5b:fe:74:34:55:aa:31:38:97:66:1b:a0:e0:7b:bf:
d7:01:d1:96:ad:df:48:cf:63:5b:c7:03:44:59:2d:1e:f2:89:
35:bf:ec:81:97:06:f1:b7:4f:58:b2:d2:8f:29:be:6b:75:3b:
47:39:57:00:d1:ee:08:46:89:87:71:d7:dd:88:7c:d1:79:1c:
87:a4:8f:40:87:fe:63:5c:14:85:38:3a:8d:83:fe:ef:ef:c9:
de:56:ee:55:1a:54:95:fa:42:0f:8f:44:d2:69:3e:dd:41:23:
5a:2d:7e:b5:b5:e5:6e:72:10:0e:3d:44:03:ea:87:29:c4:cb:
b9:6e:c3:80:c0:02:df:d6:bb:b4:45:51:eb:44:07:c0:c9:1d:
bf:40:46:ff:f0:4f:17:20:d8:ad:78:1d:d3:87:36:ac:e0:b5:
07:03:8a:0e:d1:f2:85:ea:3c:88:e7:b3:f1:0d:65:92:c3:ad:
59:35:ea:d7:bd:c6:66:71:b0:d4:91:80:57:83:4f:d2:1c:c0:
61:0c:24:21:5d:7c:8d:2e:66:dc:93:94:23:fe:79:66:0c:6f:
f4:ce:c8:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3qWcBnl2rQPT4y3fakVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm
N2U3NzcwHhcNMjYwOTI1MTQwMTA1WhcNMjYwOTI2MTQwMTA1WjAzMTEwLwYDVQQD
EyhhN2QwZWM4MDM1N2U3MTA5Yjg2ZDc2MGZkNzhhN2JhOGEwNWVlMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGVCzY1wTF9BwzAZ+z0XDh35sa1y
MeNfFiu+9COAwv3+e2yf6ILobLZ2ZQu8izKbHJJde5SDhA89Rq/OBs3//u1MgVGb
VViuO2yyTfDiCRXyFD/MpOKWJDDFyYgqYzL9Y06N0Y++M4yfCTWU/L7iwah5BotY
avN4EmCI26EEoaIkN2vgnQDwxBlOfFqMtgeM811x3iPRGpSL1+u74TzD+Cl0BA07
1Pp/hlMbc6Jzf2VtW08HY/BIbzKYcq9V5OjhZGdFuML1dvtzVsS2EZ9qaai/mcSX
2IfwPyAExVCFd3GjGBI3ZfFa9DGRmeBC25lwr7vsGFf0QDN92t8AsS+GAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfQ7IA1fnEJuG12D9eKe6igXuBeMB8GA1UdIwQY
MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt
YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy
LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJvPUlWd
3uTzzRdqxEFQLFgvMwAZtojwOXlolzVaOJyII4lB3nBaW/50NFWqMTiXZhug4Hu/
1wHRlq3fSM9jW8cDRFktHvKJNb/sgZcG8bdPWLLSjym+a3U7RzlXANHuCEaJh3HX
3Yh80Xkch6SPQIf+Y1wUhTg6jYP+7+/J3lbuVRpUlfpCD49E0mk+3UEjWi1+tbXl
bnIQDj1EA+qHKcTLuW7DgMAC39a7tEVR60QHwMkdv0BG//BPFyDYrXgd04c2rOC1
BwOKDtHyheo8iOez8Q1lksOtWTXq173GZnGw1JGAV4NP0hzAYQwkIV18jS5m3JOU
I/55Zgxv9M7Icw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:29 2026 by rpki-client