Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: We4It/Fd3FOsRM/FBeHYgAsltjuD1eqr+N3IPcB+JOw=
Subject key identifier: AB:0D:4D:70:BE:81:1A:A5:02:C0:DE:FA:08:9F:C2:1F:1F:42:01:C1
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 01A0E32B4F47E852A01855DB507AE63CF23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 14:01:01 +0000
Manifest this update: Sun 27 Sep 2026 14:01:01 +0000
Manifest next update: Mon 28 Sep 2026 14:01:01 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: dZ8Kpn538ga1NpqJMKtx7yvzKQ8KxxyYA0qMOHoymfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:4f:47:e8:52:a0:18:55:db:50:7a:e6:3c:f2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Sep 27 14:01:01 2026 GMT
Not After : Sep 28 14:01:01 2026 GMT
Subject: CN=ab0d4d70be811aa502c0defa089fc21f1f4201c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:40:c4:1a:b7:de:5e:08:da:fb:f6:07:11:
76:87:37:f9:ee:83:46:21:58:eb:ef:fc:f9:08:0f:
40:e9:3d:d5:ef:56:66:2a:b2:a9:ce:7c:49:b5:07:
be:51:08:67:15:a3:03:47:ba:e0:45:7c:6d:a0:0b:
96:94:70:18:b3:5c:5c:4f:c3:be:f5:b4:e6:39:7b:
58:82:90:a5:3f:ea:3b:a3:99:0d:92:f1:bc:81:6d:
bd:32:01:77:fe:86:8f:54:17:b2:db:a7:6c:2c:03:
15:08:5b:67:ad:a4:80:33:40:10:16:fc:df:84:37:
4c:9d:39:11:d1:e1:f8:6d:da:2c:04:9f:b2:dc:1f:
7c:b7:00:ca:12:c7:db:ad:c6:e6:53:5c:d0:a4:c9:
d8:eb:1e:22:f7:cc:17:e1:de:b5:9c:65:3f:59:00:
b6:42:7d:dd:09:45:63:f4:96:50:3b:da:d9:46:bc:
88:9b:60:1b:c0:ea:ed:21:d5:0d:72:8b:72:5a:0a:
d8:a7:e1:87:d6:21:07:c0:51:35:4b:86:a0:1b:51:
7e:e0:d4:5e:36:a2:79:51:40:8c:cf:9b:df:a7:a1:
7a:2a:bb:bd:2c:10:b4:90:48:8d:72:05:cb:59:8b:
ab:d7:7f:41:3d:35:f2:f0:88:74:8a:e7:3f:69:ab:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:4D:70:BE:81:1A:A5:02:C0:DE:FA:08:9F:C2:1F:1F:42:01:C1
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:c2:d5:60:99:5d:3a:8d:5a:38:ea:0b:8e:4e:0e:1c:23:
44:2e:6d:1f:aa:f3:fb:8f:62:8c:19:9c:5f:82:f7:3e:09:8f:
34:ea:05:43:30:72:f9:0b:7c:c6:32:35:60:f0:2c:04:d1:82:
e7:4c:c1:09:17:f3:d6:59:cf:c8:6b:6f:6d:48:de:c4:63:84:
3c:8e:a5:c0:2f:00:aa:25:ee:6d:a9:5d:7f:7f:01:17:c5:db:
92:83:fe:c0:4b:dd:e4:70:79:e9:32:a8:9f:62:9a:ac:86:54:
31:e0:47:fc:7e:3b:04:8e:53:ac:ba:6f:bf:d5:8e:37:4e:3d:
b2:ef:bd:b4:74:ee:0f:99:e0:e5:5a:85:cf:cb:dc:32:6a:7b:
21:7c:d4:ae:6e:85:bf:26:09:52:87:0a:1e:a8:82:71:e4:e4:
4f:84:bf:82:a0:7a:e8:b6:be:48:1a:dd:44:09:4a:72:83:c4:
9e:6b:23:ac:d9:de:02:a6:3a:eb:25:6b:46:da:a6:39:ba:eb:
e5:22:7f:47:9a:2b:5b:b6:99:ed:9d:69:6c:b1:4e:a5:ff:60:
60:11:9c:ac:2c:4f:97:ea:bb:2a:61:23:6e:96:4d:07:52:80:
fe:a5:6c:85:9b:17:8c:fd:45:90:10:c0:e9:86:ee:f5:11:a7:
22:1e:64:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK09H6FKgGFXbUHrmPPI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjYwOTI3MTQwMTAxWhcNMjYwOTI4MTQwMTAxWjAzMTEwLwYDVQQD
EyhhYjBkNGQ3MGJlODExYWE1MDJjMGRlZmEwODlmYzIxZjFmNDIwMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPRAxBq33l4I2vv2BxF2hzf57oNG
IVjr7/z5CA9A6T3V71ZmKrKpznxJtQe+UQhnFaMDR7rgRXxtoAuWlHAYs1xcT8O+
9bTmOXtYgpClP+o7o5kNkvG8gW29MgF3/oaPVBey26dsLAMVCFtnraSAM0AQFvzf
hDdMnTkR0eH4bdosBJ+y3B98twDKEsfbrcbmU1zQpMnY6x4i98wX4d61nGU/WQC2
Qn3dCUVj9JZQO9rZRryIm2AbwOrtIdUNcotyWgrYp+GH1iEHwFE1S4agG1F+4NRe
NqJ5UUCMz5vfp6F6Kru9LBC0kEiNcgXLWYur139BPTXy8Ih0iuc/aasdfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsNTXC+gRqlAsDe+gifwh8fQgHBMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELbC1WCZ
XTqNWjjqC45ODhwjRC5tH6rz+49ijBmcX4L3PgmPNOoFQzBy+Qt8xjI1YPAsBNGC
50zBCRfz1lnPyGtvbUjexGOEPI6lwC8AqiXubaldf38BF8XbkoP+wEvd5HB56TKo
n2KarIZUMeBH/H47BI5TrLpvv9WON049su+9tHTuD5ng5VqFz8vcMmp7IXzUrm6F
vyYJUocKHqiCceTkT4S/gqB66La+SBrdRAlKcoPEnmsjrNneAqY66yVrRtqmObrr
5SJ/R5orW7aZ7Z1pbLFOpf9gYBGcrCxPl+q7KmEjbpZNB1KA/qVshZsXjP1FkBDA
6Ybu9RGnIh5k1Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:42:55 2026 by rpki-client