Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: w7cBMAiJ3RyW+MY2ZvJp8EjeMAqb71fLi/An07eFlaI=
Subject key identifier: BE:73:2F:9D:15:C1:6F:8B:12:9E:9D:5B:0E:48:95:43:84:67:92:73
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01A1249D7EB5DA3CC2723B46E6E16FF87508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0992
Signing time: Sat 10 Oct 2026 07:01:03 +0000
Manifest this update: Sat 10 Oct 2026 07:01:03 +0000
Manifest next update: Sun 11 Oct 2026 07:01:03 +0000
Files and hashes: 1: 6kFMzdPUiPyPGezO_LNVEuK0DIM.roa (hash: WJQe2ZZPHaA7iIzboHAZGY2K/WcsjYy2+zN7bgpDUoI=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: i/ND41WElKWdmftaDn/I1oVqt2tKhtsL8tdsFkmUNcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:7e:b5:da:3c:c2:72:3b:46:e6:e1:6f:f8:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Oct 10 07:01:03 2026 GMT
Not After : Oct 11 07:01:03 2026 GMT
Subject: CN=be732f9d15c16f8b129e9d5b0e48954384679273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:4e:32:19:e1:37:16:f6:3d:28:95:c0:fe:
c0:4c:2d:2c:ec:8c:11:3a:6d:88:7e:af:e4:67:b5:
ba:00:02:b0:8d:da:1b:7d:11:5a:c7:84:4b:bd:00:
52:2d:29:13:b7:b8:b1:79:d8:99:7c:ee:3b:db:b3:
72:72:30:90:60:6a:80:31:05:ef:26:f4:b6:c9:00:
bf:3e:f0:04:5f:08:7d:23:01:1c:6e:d1:01:87:59:
e5:3c:d4:28:29:a3:a8:4a:85:7b:0d:49:d0:c8:32:
6b:30:35:cc:90:7a:db:47:fd:e0:fa:ae:fc:ee:dc:
34:74:7f:95:ba:72:0a:78:95:c5:8f:d3:cf:41:57:
c6:2b:11:02:59:26:e4:07:d3:37:de:27:a0:72:5d:
28:cf:a8:83:75:9a:4d:66:70:5f:68:8a:dd:85:5a:
1a:78:ce:f2:37:1c:cd:ec:dc:b1:38:ea:90:94:d1:
5f:e2:5e:6d:6c:91:28:f9:f9:c9:94:21:a2:20:aa:
6f:89:69:6b:2a:5f:02:0b:ab:ac:97:94:63:32:16:
4b:47:7f:6f:76:0a:5d:fe:7d:9c:09:75:9a:b3:1a:
5e:a6:ff:69:7f:50:7d:06:c1:62:be:94:bf:5a:26:
60:56:7e:3c:ac:a9:9c:f9:34:64:39:cd:90:0d:27:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:2F:9D:15:C1:6F:8B:12:9E:9D:5B:0E:48:95:43:84:67:92:73
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:55:2a:5e:a1:e9:eb:43:4f:2c:49:c8:75:3a:83:eb:a7:21:
47:3d:8e:44:0a:fb:3b:5f:d1:93:62:d9:da:37:9a:81:57:07:
a5:95:02:04:85:cd:61:19:fd:ac:37:41:e4:b8:d1:71:f5:56:
48:16:fe:25:eb:cc:b9:34:6c:6c:be:85:4b:5f:0c:b3:b0:c4:
21:54:0c:45:35:09:09:dd:c7:c1:87:a3:b0:8f:ba:64:90:dc:
8e:e7:eb:3d:9b:cd:3a:70:d0:8e:14:8e:bd:5d:69:6f:08:80:
b5:f9:60:f7:6e:a8:b8:61:89:33:8f:6b:12:9b:ad:b7:22:16:
0c:7e:57:92:3f:a1:7d:ca:71:73:ad:64:26:30:1f:28:68:39:
c0:f3:72:e9:5a:eb:5a:56:3c:b1:b5:ee:59:67:ac:9c:38:6a:
18:d4:6b:d8:8c:95:0a:ab:9e:f8:0c:f4:1b:fd:c1:ec:7a:38:
b1:3d:3b:ba:87:d6:40:c0:6a:f2:a2:53:27:0c:db:09:48:0d:
b4:10:ed:9c:3c:ea:32:e5:9d:44:4a:cb:d8:f5:52:d5:f1:4b:
c8:de:43:0a:60:9c:99:af:fe:81:68:0f:8f:58:f2:90:ee:19:
48:ca:7f:41:be:bb:f0:46:5e:a8:6c:17:d3:45:77:a0:ca:76:
12:c5:b3:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEknX612jzCcjtG5uFv+HUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3
ZmQwZDgwHhcNMjYxMDEwMDcwMTAzWhcNMjYxMDExMDcwMTAzWjAzMTEwLwYDVQQD
EyhiZTczMmY5ZDE1YzE2ZjhiMTI5ZTlkNWIwZTQ4OTU0Mzg0Njc5MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ylOMhnhNxb2PSiVwP7ATC0s7IwR
Om2Ifq/kZ7W6AAKwjdobfRFax4RLvQBSLSkTt7ixediZfO4727NycjCQYGqAMQXv
JvS2yQC/PvAEXwh9IwEcbtEBh1nlPNQoKaOoSoV7DUnQyDJrMDXMkHrbR/3g+q78
7tw0dH+VunIKeJXFj9PPQVfGKxECWSbkB9M33iegcl0oz6iDdZpNZnBfaIrdhVoa
eM7yNxzN7NyxOOqQlNFf4l5tbJEo+fnJlCGiIKpviWlrKl8CC6usl5RjMhZLR39v
dgpd/n2cCXWasxpepv9pf1B9BsFivpS/WiZgVn48rKmc+TRkOc2QDSdClwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5zL50VwW+LEp6dWw5IlUOEZ5JzMB8GA1UdIwQY
MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt
MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1
LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFUqXqHp
60NPLEnIdTqD66chRz2ORAr7O1/Rk2LZ2jeagVcHpZUCBIXNYRn9rDdB5LjRcfVW
SBb+JevMuTRsbL6FS18Ms7DEIVQMRTUJCd3HwYejsI+6ZJDcjufrPZvNOnDQjhSO
vV1pbwiAtflg926ouGGJM49rEputtyIWDH5Xkj+hfcpxc61kJjAfKGg5wPNy6Vrr
WlY8sbXuWWesnDhqGNRr2IyVCque+Az0G/3B7Ho4sT07uofWQMBq8qJTJwzbCUgN
tBDtnDzqMuWdRErL2PVS1fFLyN5DCmCcma/+gWgPj1jykO4ZSMp/Qb678EZeqGwX
00V3oMp2EsWzIA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:10:24 2026 by rpki-client