Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: waBvAuoTH2t9yrEVHJVQHjRhScOc05YIDObt57iW8Nw=
Subject key identifier: 7A:98:57:DC:03:7F:CB:3B:6D:4F:52:B0:C0:40:D9:4B:9B:C5:6B:1B
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01A0C369BA5700D7F549BC5DD22D40088CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0BD7
Signing time: Mon 21 Sep 2026 10:01:21 +0000
Manifest this update: Mon 21 Sep 2026 10:01:21 +0000
Manifest next update: Tue 22 Sep 2026 10:01:21 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: TsNcjm+exo7i4iCU8CVT76OErdIEhJDtPYYC75ElZ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:ba:57:00:d7:f5:49:bc:5d:d2:2d:40:08:8c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Sep 21 10:01:21 2026 GMT
Not After : Sep 22 10:01:21 2026 GMT
Subject: CN=7a9857dc037fcb3b6d4f52b0c040d94b9bc56b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:ad:05:7e:3c:f9:81:76:62:ae:a4:2b:ce:
c6:8a:e7:c5:8f:2f:ab:45:e5:a1:4b:60:cd:57:3b:
2f:bd:af:2a:13:d5:70:b4:ad:98:aa:48:14:6f:35:
5e:78:30:09:e9:4e:b9:68:21:7f:ce:ca:c7:b4:0c:
1e:e5:5a:ae:e0:d8:d7:d6:64:c2:9c:33:9f:cc:df:
dc:46:fc:f6:33:b4:02:b9:e3:c6:f4:94:13:90:5f:
a5:f6:24:f1:b6:64:3b:64:3c:ec:c0:29:20:8a:e4:
e8:18:d1:2c:c8:8e:e3:cc:92:a2:58:93:5b:35:60:
ec:a1:60:30:bc:b8:9c:f9:84:5a:eb:f1:30:8f:c1:
ad:83:ba:4c:94:08:49:ad:db:21:f1:aa:1b:6c:c0:
4e:09:1d:e4:e3:80:e4:11:2c:a1:10:c0:32:49:47:
90:53:c3:24:9e:1d:85:56:64:06:76:41:2e:b8:db:
8e:4d:f3:dd:17:44:4a:ee:7f:3e:28:ee:71:28:29:
8a:04:11:77:2f:96:01:a7:a5:8c:ef:b4:1d:a3:03:
a6:7f:1e:97:3c:46:c8:4e:1b:86:f6:d5:37:9b:98:
39:ff:31:89:6d:fc:ae:47:1c:92:5e:fc:14:e5:bb:
46:24:f0:56:87:24:ba:ab:d1:c1:01:b4:25:6b:b5:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:57:DC:03:7F:CB:3B:6D:4F:52:B0:C0:40:D9:4B:9B:C5:6B:1B
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:6b:a1:1b:bf:48:23:84:09:ff:4c:fa:1f:2d:23:2a:3b:
6d:bf:1d:1d:4b:51:66:63:cc:b2:29:91:8e:4f:33:07:ab:b6:
8d:3c:5a:00:c7:f7:b6:bd:6a:3c:35:6b:d8:83:b0:0e:e2:d3:
29:bf:9e:d2:c8:98:d3:29:c0:b1:5f:f1:88:4a:b2:55:f4:a0:
f8:64:5b:ce:0e:ee:96:61:53:d9:a6:a4:e5:92:5c:9c:b8:b7:
ec:d0:c8:be:0f:f4:aa:b9:58:53:19:d9:d8:36:84:f4:bc:7c:
84:f7:22:a2:be:65:ad:ff:3e:70:d3:93:04:6b:1e:f8:13:d1:
4c:c3:ef:fb:31:a1:bf:42:25:70:f9:87:f8:10:4f:1d:44:52:
2c:53:75:54:2a:34:b1:22:4a:0b:2e:fb:88:7d:4b:49:7c:0c:
31:9d:92:7d:87:02:f7:c4:20:3d:8c:e1:b0:67:fa:ee:17:55:
8f:14:1f:69:bf:4c:11:6e:ef:22:0a:e6:f0:d8:3b:5d:87:7e:
14:b8:94:52:c3:83:ba:17:50:3f:24:96:a0:85:98:5e:09:48:
1e:18:c2:a0:4b:90:97:0c:e2:57:53:4d:e0:fa:37:b2:ac:ed:
ba:09:e3:3c:d3:ee:c3:cc:9c:27:ca:19:2c:03:65:5a:0d:0a:
f9:21:92:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDabpXANf1Sbxd0i1ACIyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjYwOTIxMTAwMTIxWhcNMjYwOTIyMTAwMTIxWjAzMTEwLwYDVQQD
Eyg3YTk4NTdkYzAzN2ZjYjNiNmQ0ZjUyYjBjMDQwZDk0YjliYzU2YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eatBX48+YF2Yq6kK87GiufFjy+r
ReWhS2DNVzsvva8qE9VwtK2YqkgUbzVeeDAJ6U65aCF/zsrHtAwe5Vqu4NjX1mTC
nDOfzN/cRvz2M7QCuePG9JQTkF+l9iTxtmQ7ZDzswCkgiuToGNEsyI7jzJKiWJNb
NWDsoWAwvLic+YRa6/Ewj8Gtg7pMlAhJrdsh8aobbMBOCR3k44DkESyhEMAySUeQ
U8Mknh2FVmQGdkEuuNuOTfPdF0RK7n8+KO5xKCmKBBF3L5YBp6WM77QdowOmfx6X
PEbIThuG9tU3m5g5/zGJbfyuRxySXvwU5btGJPBWhyS6q9HBAbQla7Xy6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqYV9wDf8s7bU9SsMBA2UubxWsbMB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXttroRu/
SCOECf9M+h8tIyo7bb8dHUtRZmPMsimRjk8zB6u2jTxaAMf3tr1qPDVr2IOwDuLT
Kb+e0siY0ynAsV/xiEqyVfSg+GRbzg7ulmFT2aak5ZJcnLi37NDIvg/0qrlYUxnZ
2DaE9Lx8hPcior5lrf8+cNOTBGse+BPRTMPv+zGhv0IlcPmH+BBPHURSLFN1VCo0
sSJKCy77iH1LSXwMMZ2SfYcC98QgPYzhsGf67hdVjxQfab9MEW7vIgrm8Ng7XYd+
FLiUUsODuhdQPySWoIWYXglIHhjCoEuQlwziV1NN4Po3sqztugnjPNPuw8ycJ8oZ
LANlWg0K+SGSKg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:05 2026 by rpki-client