Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: MupzcgEDh+O70kZJ+artK9pCnCWLze5femO2u+f33ek=
Subject key identifier: 5D:AE:F9:46:5F:69:22:21:43:BA:74:D4:E9:42:EB:A7:21:4B:07:19
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 01A120532C3B0021F76627E139E698223E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1A9A
Signing time: Fri 09 Oct 2026 11:01:23 +0000
Manifest this update: Fri 09 Oct 2026 11:01:23 +0000
Manifest next update: Sat 10 Oct 2026 11:01:23 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: lH0DIDhFeqMkjClxP+KIHVblEm/yI+GVWmsnwS0ZeGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:2c:3b:00:21:f7:66:27:e1:39:e6:98:22:3e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Oct 9 11:01:23 2026 GMT
Not After : Oct 10 11:01:23 2026 GMT
Subject: CN=5daef9465f69222143ba74d4e942eba7214b0719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:3c:93:6e:62:56:c0:da:a6:06:e5:72:78:
6b:c7:f9:6d:88:40:22:f7:ee:06:7d:ee:5b:18:dc:
93:5c:f0:01:08:8e:ca:6b:cf:9a:c1:02:1b:08:b6:
e1:65:44:a7:5a:94:fa:b5:4b:95:dd:c9:a1:62:75:
3e:8c:ba:3b:bd:fa:94:9c:18:b2:7b:04:4a:68:c4:
89:3b:69:e5:16:24:22:36:28:47:03:78:e1:ba:f8:
81:8c:d6:6d:fd:2c:98:4d:c6:ba:06:ff:2f:0a:22:
37:af:7c:28:4b:fd:c4:6a:0e:ef:b6:4f:00:6d:bf:
83:9e:da:41:73:36:ff:9b:47:56:18:10:1f:11:63:
83:ec:93:39:c1:8e:d1:f0:dd:54:f6:ba:dd:7a:b4:
31:1c:74:76:c5:c0:48:99:79:f9:bd:8f:5e:61:a3:
27:44:6c:16:8c:dd:14:1d:4b:d9:0c:9e:f4:17:16:
38:44:81:eb:02:cf:92:e8:54:2e:54:8a:a4:13:4d:
0e:fe:0d:39:51:7b:1b:7d:8d:96:49:bc:a5:5e:1a:
0b:ad:ca:6f:f2:01:52:6d:47:c7:f0:ec:bf:f0:62:
e8:f7:54:70:a9:26:38:35:d8:aa:e7:62:e3:9d:b5:
93:c7:bc:a2:3a:c6:ce:01:a2:e4:f6:88:79:9a:e1:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:F9:46:5F:69:22:21:43:BA:74:D4:E9:42:EB:A7:21:4B:07:19
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:bc:06:07:89:2c:f3:9b:f7:ff:89:62:95:85:7a:24:ca:
4b:71:d1:65:5c:f2:87:bb:a9:d4:da:2e:96:78:35:c8:7e:ae:
f1:e0:65:49:51:2e:87:2f:06:7d:f3:0f:97:fc:9c:c5:a9:89:
87:f9:e2:1b:0a:59:09:90:c1:f1:0a:cb:7c:ef:69:b4:f2:ce:
73:ed:a3:8a:3f:44:14:eb:80:0f:13:92:d5:84:2d:db:cf:a6:
b7:f4:8c:96:fb:a0:f4:83:14:f5:76:0f:b4:52:ca:54:6b:ca:
b5:5b:75:e3:68:56:c8:a9:4c:f6:ea:d7:38:3d:68:88:2f:b5:
18:1b:bd:30:9a:32:68:09:44:11:bf:d8:2a:2e:e7:13:18:5a:
09:7e:cf:ba:ce:ee:cc:8a:29:d6:78:56:f2:22:7d:4d:81:d6:
b6:8b:b8:d2:ff:de:20:e1:6a:da:57:96:41:f7:bd:a7:73:fa:
63:36:0c:47:bc:44:44:e2:4e:16:c7:e5:38:29:90:3c:6e:0f:
e7:07:e7:27:90:76:5d:a8:22:83:9d:e0:f3:56:9f:80:24:b8:
e7:10:32:49:5f:c2:d5:3a:c7:51:1f:2a:e3:a5:6e:0d:6a:9b:
e8:af:b1:6f:73:84:66:68:53:0e:81:ae:37:b1:6f:64:40:a7:
8d:9b:cb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgUyw7ACH3ZifhOeaYIj6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5
MTJkZTYwHhcNMjYxMDA5MTEwMTIzWhcNMjYxMDEwMTEwMTIzWjAzMTEwLwYDVQQD
Eyg1ZGFlZjk0NjVmNjkyMjIxNDNiYTc0ZDRlOTQyZWJhNzIxNGIwNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0388k25iVsDapgblcnhrx/ltiEAi
9+4Gfe5bGNyTXPABCI7Ka8+awQIbCLbhZUSnWpT6tUuV3cmhYnU+jLo7vfqUnBiy
ewRKaMSJO2nlFiQiNihHA3jhuviBjNZt/SyYTca6Bv8vCiI3r3woS/3Eag7vtk8A
bb+DntpBczb/m0dWGBAfEWOD7JM5wY7R8N1U9rrderQxHHR2xcBImXn5vY9eYaMn
RGwWjN0UHUvZDJ70FxY4RIHrAs+S6FQuVIqkE00O/g05UXsbfY2WSbylXhoLrcpv
8gFSbUfH8Oy/8GLo91RwqSY4Ndiq52LjnbWTx7yiOsbOAaLk9oh5muHhaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2u+UZfaSIhQ7p01OlC66chSwcZMB8GA1UdIwQY
MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt
OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2
LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUK8BgeJ
LPOb9/+JYpWFeiTKS3HRZVzyh7up1Noulng1yH6u8eBlSVEuhy8GffMPl/ycxamJ
h/niGwpZCZDB8QrLfO9ptPLOc+2jij9EFOuADxOS1YQt28+mt/SMlvug9IMU9XYP
tFLKVGvKtVt142hWyKlM9urXOD1oiC+1GBu9MJoyaAlEEb/YKi7nExhaCX7Pus7u
zIop1nhW8iJ9TYHWtou40v/eIOFq2leWQfe9p3P6YzYMR7xEROJOFsflOCmQPG4P
5wfnJ5B2Xagig53g81afgCS45xAySV/C1TrHUR8q46VuDWqb6K+xb3OEZmhTDoGu
N7FvZECnjZvLbA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:27:04 2026 by rpki-client