Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: 75Iu0gXw4O2+b+P3boL1wEah4O0s8uON3wDRSVERZPE=
Subject key identifier: AB:1D:6F:61:97:51:8C:8D:71:22:A6:8D:D7:F8:2D:96:FD:FA:CE:BD
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 01A0C39FAD3EF9113DCCCCDB47EDAB10AE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 06CC
Signing time: Mon 21 Sep 2026 11:00:16 +0000
Manifest this update: Mon 21 Sep 2026 11:00:16 +0000
Manifest next update: Tue 22 Sep 2026 11:00:16 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: LfegsxPAG0rwHduIazl1hfdph1wg7PF1Mn2dgh1kP3s=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ad:3e:f9:11:3d:cc:cc:db:47:ed:ab:10:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Sep 21 11:00:16 2026 GMT
Not After : Sep 22 11:00:16 2026 GMT
Subject: CN=ab1d6f6197518c8d7122a68dd7f82d96fdfacebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:31:62:c2:52:b0:67:46:b7:62:ab:d7:bf:
e8:be:75:ab:0e:78:53:b4:91:ea:72:fa:4a:2d:38:
f1:ea:e3:bb:ef:90:6b:e7:03:fa:1b:47:31:8f:8e:
0a:d9:80:7d:23:c9:3d:dd:b3:f9:6e:bc:d5:8f:06:
c1:86:fa:35:00:54:75:62:d7:62:23:84:24:c1:c8:
9c:2f:ba:f4:b5:68:34:4d:05:0a:92:88:2f:b9:8b:
ad:b8:16:9a:34:09:97:38:aa:76:d2:8b:70:47:9a:
84:6a:a9:32:82:04:34:c3:de:ed:4c:b0:a8:43:01:
6f:ad:86:44:37:50:39:5b:f0:2e:d2:fe:fb:a3:8f:
ff:a5:aa:88:b9:0a:5e:d5:1e:d5:ca:a5:85:80:d7:
aa:da:c5:71:2c:a2:57:c6:ba:8f:1e:e9:0d:cd:26:
f5:2b:f1:f8:67:6d:a1:fd:83:9f:70:67:b8:fb:fd:
7e:10:e0:df:33:01:3c:8e:e1:e8:2e:6c:c8:e0:54:
a3:b5:57:51:f6:06:14:f9:b5:6a:08:25:4a:03:ae:
ad:a8:03:01:f3:2b:8f:b4:03:b7:09:10:2b:b7:37:
ca:26:a9:5d:66:11:3c:c4:e9:14:72:96:30:aa:01:
d5:b5:4f:3f:6b:a2:64:da:0c:eb:51:ca:56:d3:bc:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:6F:61:97:51:8C:8D:71:22:A6:8D:D7:F8:2D:96:FD:FA:CE:BD
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f2:65:6c:90:a8:01:eb:93:7e:84:69:db:01:21:23:0e:67:
54:81:50:79:40:c1:82:ba:a1:3c:f1:8f:57:f9:a7:71:5e:d7:
73:1c:88:22:10:48:84:4b:21:88:5a:43:e6:f8:54:ff:cd:fc:
80:40:33:10:a4:b1:8a:09:74:46:98:9a:4a:32:b6:68:75:f2:
13:ea:75:5d:39:5e:ae:95:e8:08:0f:7a:1f:de:7f:46:08:09:
88:cb:43:36:73:53:a5:5d:aa:d3:0b:23:7f:76:97:64:0f:71:
64:89:bd:3c:b8:10:48:04:ce:21:36:3d:aa:3e:27:e3:26:f3:
89:eb:dc:08:a4:e5:e8:5d:6e:a4:35:15:47:74:81:00:06:b0:
85:1c:84:74:53:84:fc:37:3b:5c:7b:f5:cf:44:f7:86:1b:f7:
f5:81:cc:4d:ca:22:bc:c0:9a:da:6d:79:d2:8a:48:6b:ec:4c:
0c:c9:6c:9b:be:66:36:84:0f:d7:a6:83:f9:f0:ec:2f:fd:98:
40:22:9e:b7:ca:9a:cf:a9:01:a9:39:fc:7b:1d:db:25:0b:28:
ab:31:4d:e9:d4:90:77:98:01:65:35:9c:2e:5e:22:65:71:c3:
c9:b9:f7:b6:ee:27:73:bf:55:8b:86:58:85:dc:9c:32:cc:23:
d7:2b:f4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn60++RE9zMzbR+2rEK6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjYwOTIxMTEwMDE2WhcNMjYwOTIyMTEwMDE2WjAzMTEwLwYDVQQD
EyhhYjFkNmY2MTk3NTE4YzhkNzEyMmE2OGRkN2Y4MmQ5NmZkZmFjZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4AxYsJSsGdGt2Kr17/ovnWrDnhT
tJHqcvpKLTjx6uO775Br5wP6G0cxj44K2YB9I8k93bP5brzVjwbBhvo1AFR1Ytdi
I4QkwcicL7r0tWg0TQUKkogvuYutuBaaNAmXOKp20otwR5qEaqkyggQ0w97tTLCo
QwFvrYZEN1A5W/Au0v77o4//paqIuQpe1R7VyqWFgNeq2sVxLKJXxrqPHukNzSb1
K/H4Z22h/YOfcGe4+/1+EODfMwE8juHoLmzI4FSjtVdR9gYU+bVqCCVKA66tqAMB
8yuPtAO3CRArtzfKJqldZhE8xOkUcpYwqgHVtU8/a6Jk2gzrUcpW07znewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsdb2GXUYyNcSKmjdf4LZb9+s69MB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPJlbJCo
AeuTfoRp2wEhIw5nVIFQeUDBgrqhPPGPV/mncV7XcxyIIhBIhEshiFpD5vhU/838
gEAzEKSxigl0RpiaSjK2aHXyE+p1XTlerpXoCA96H95/RggJiMtDNnNTpV2q0wsj
f3aXZA9xZIm9PLgQSATOITY9qj4n4ybzievcCKTl6F1upDUVR3SBAAawhRyEdFOE
/Dc7XHv1z0T3hhv39YHMTcoivMCa2m150opIa+xMDMlsm75mNoQP16aD+fDsL/2Y
QCKet8qaz6kBqTn8ex3bJQsoqzFN6dSQd5gBZTWcLl4iZXHDybn3tu4nc79Vi4ZY
hdycMswj1yv0fA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:41 2026 by rpki-client