Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: LQv3iMaDXqHqBlKv5TKGy1AXakHA1QOG1LrYHRpctLk=
Subject key identifier: F2:08:01:FE:9B:CE:FC:C4:02:FB:35:04:7C:5D:2F:9D:9F:00:6B:41
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019D284D652372BE0DC4074E3166D9412AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 08F0
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: fNsSg8M7gsWBDOorbw924yc9fbYd0XSPF6YoFdnwk4Q=)
2: kBiWJKONqx_8EJPfrqy-KE44x6Q.roa (hash: SVLH+Gw9sGMbTjjOdTtaqUxTQmICEWWbtA+6NK4dItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:65:23:72:be:0d:c4:07:4e:31:66:d9:41:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=f20801fe9bcefcc402fb35047c5d2f9d9f006b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:69:fa:67:32:c4:77:f1:b6:12:6f:71:fd:
8e:74:b8:ce:b8:4b:59:f9:28:79:00:e3:4e:a9:b1:
3f:ea:47:7f:1c:b6:8f:02:5c:60:3d:40:a8:9b:4f:
e8:ba:a6:95:db:7b:54:07:4f:db:e0:65:54:f7:ef:
7a:a2:1b:ab:eb:0b:87:04:81:70:ec:8f:4d:6b:4d:
da:95:eb:6d:c2:12:10:fe:12:89:1f:f2:e5:ec:ea:
43:06:e1:a5:25:7a:b8:6a:1f:34:11:c9:23:3d:e8:
a0:dd:13:56:94:e5:25:c5:d4:a5:db:47:e1:a1:e5:
c4:e8:1f:b7:f8:48:c4:8b:7a:d1:d9:2f:78:d7:c2:
2e:99:57:97:d0:6d:d4:88:47:f0:fc:fc:30:59:df:
2d:cd:a7:af:77:67:fd:2a:e5:85:b5:7f:a0:d7:da:
fd:6f:a0:cb:e0:db:62:14:90:f7:58:33:a5:31:2a:
06:d2:4d:1e:83:bf:ab:2f:1a:7d:1e:b2:6a:9c:de:
8b:a0:c3:3f:50:b6:98:35:57:c5:78:6d:c0:30:e2:
f7:58:fe:d5:3a:e8:25:a7:d3:55:ce:18:3a:8e:1e:
c8:30:ab:61:d0:80:ed:fb:f8:3f:80:0a:18:a3:43:
11:ef:fe:fa:2a:20:7f:5a:a3:0d:5c:4e:7f:be:ed:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:01:FE:9B:CE:FC:C4:02:FB:35:04:7C:5D:2F:9D:9F:00:6B:41
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:45:9e:7f:cc:f3:1b:12:40:3a:31:97:12:0d:e7:90:ec:
d4:c7:fd:a8:e0:b3:52:b8:76:e6:5a:10:e9:20:db:89:75:bf:
0f:cd:0c:15:04:cc:2c:75:92:81:c0:28:30:0b:db:25:97:b1:
c7:30:5e:31:d9:c7:f6:66:e1:e5:dd:fa:2b:9f:dd:61:55:a6:
53:b6:ce:e7:63:53:8a:47:31:7a:7d:0e:42:17:73:a8:b1:1d:
ce:47:c3:a5:a9:17:85:a6:e1:30:0e:f7:e1:45:d0:70:bf:b2:
ab:49:e7:26:3b:b7:83:83:0a:db:35:f4:23:54:5b:f3:a0:ce:
f9:ce:b9:1a:46:c8:d8:d2:a1:cc:d7:e6:05:f8:e6:4b:90:78:
63:ea:93:01:4a:c5:3f:a2:03:22:38:b4:47:8f:19:90:fd:5e:
b0:a6:38:97:8d:ee:c5:5f:c4:b6:c1:2a:90:12:28:03:67:59:
f9:bf:9e:b2:2d:d2:f4:43:82:d7:51:68:f6:d0:2f:a1:fa:97:
c3:5f:47:6c:f8:0a:ea:23:3a:ba:ef:43:6e:34:e3:bd:6e:72:
6d:73:0d:5d:85:cf:3f:76:0a:f9:bf:ca:a2:9f:6d:65:1d:0e:
b9:2c:51:48:47:7b:bf:ab:9d:b6:d1:1d:9a:d0:a2:b2:26:06:
27:c3:af:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWUjcr4NxAdOMWbZQSrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjYwMzI2MDQwMDUzWhcNMjYwMzI3MDQwMDUzWjAzMTEwLwYDVQQD
EyhmMjA4MDFmZTliY2VmY2M0MDJmYjM1MDQ3YzVkMmY5ZDlmMDA2YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGxp+mcyxHfxthJvcf2OdLjOuEtZ
+Sh5AONOqbE/6kd/HLaPAlxgPUCom0/ouqaV23tUB0/b4GVU9+96ohur6wuHBIFw
7I9Na03alettwhIQ/hKJH/Ll7OpDBuGlJXq4ah80EckjPeig3RNWlOUlxdSl20fh
oeXE6B+3+EjEi3rR2S9418IumVeX0G3UiEfw/PwwWd8tzaevd2f9KuWFtX+g19r9
b6DL4NtiFJD3WDOlMSoG0k0eg7+rLxp9HrJqnN6LoMM/ULaYNVfFeG3AMOL3WP7V
Ouglp9NVzhg6jh7IMKth0IDt+/g/gAoYo0MR7/76KiB/WqMNXE5/vu1SNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIIAf6bzvzEAvs1BHxdL52fAGtBMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyFFnn/M
8xsSQDoxlxIN55Ds1Mf9qOCzUrh25loQ6SDbiXW/D80MFQTMLHWSgcAoMAvbJZex
xzBeMdnH9mbh5d36K5/dYVWmU7bO52NTikcxen0OQhdzqLEdzkfDpakXhabhMA73
4UXQcL+yq0nnJju3g4MK2zX0I1Rb86DO+c65GkbI2NKhzNfmBfjmS5B4Y+qTAUrF
P6IDIji0R48ZkP1esKY4l43uxV/EtsEqkBIoA2dZ+b+esi3S9EOC11Fo9tAvofqX
w19HbPgK6iM6uu9DbjTjvW5ybXMNXYXPP3YK+b/Kop9tZR0OuSxRSEd7v6udttEd
mtCisiYGJ8Ovfg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:31 2026 by rpki-client