Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: ZV1oQPRe5u0Rz047/H3GOJyIoPHzgdD1bZEvTmS7drg=
Subject key identifier: B9:97:FB:61:F9:5C:E3:F6:C3:A5:49:3E:5C:08:F6:B3:0F:9E:1D:1B
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 01A0C858ADA5EA7337A3A882D6C740B71605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:49 +0000
Manifest this update: Tue 22 Sep 2026 09:00:49 +0000
Manifest next update: Wed 23 Sep 2026 09:00:49 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: EIdCnGTmkuU69/FQj0TGno569+tXhtgQTzAY0Z5bUlY=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:ad:a5:ea:73:37:a3:a8:82:d6:c7:40:b7:16:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Sep 22 09:00:49 2026 GMT
Not After : Sep 23 09:00:49 2026 GMT
Subject: CN=b997fb61f95ce3f6c3a5493e5c08f6b30f9e1d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:da:50:7c:b3:42:8a:61:54:20:0b:3b:70:
25:f2:21:52:32:e2:ca:07:0d:43:b0:04:2e:a7:8f:
80:49:b5:fa:01:05:a5:d8:67:c5:74:87:52:62:95:
c4:ec:89:99:1f:e6:31:53:28:52:84:7a:c1:3f:62:
f7:ca:23:a1:3d:ae:9a:cf:68:a6:ca:d4:7a:19:82:
b8:a8:9e:fd:f7:17:7c:18:10:32:39:b9:94:5e:60:
c8:ce:62:35:07:e6:fe:37:bf:b3:bc:73:1b:2a:8b:
2a:0c:42:13:be:38:86:14:de:f5:a3:95:b7:31:fe:
e2:85:75:7b:3d:59:ee:d7:80:7b:f1:73:3a:67:7d:
06:4f:6b:3d:09:27:9e:46:54:d9:55:0a:4d:0a:7d:
c2:ae:67:ab:c4:0d:d5:a7:83:81:19:b0:79:96:f4:
3a:40:3b:5d:33:d1:cb:a8:ec:a7:43:56:81:f4:30:
f0:22:3a:ad:8a:9f:16:94:31:6f:f6:2f:1f:5f:ff:
b6:a7:f8:81:5c:50:1d:47:db:95:76:d9:7f:43:6e:
5c:d1:b7:e7:c8:33:ef:3e:40:6d:eb:e3:20:8d:62:
0b:c5:b3:8b:7d:38:e2:ff:b1:37:9f:63:7c:60:c5:
a7:61:96:7c:ec:de:e2:82:d8:b9:c9:12:84:83:34:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:FB:61:F9:5C:E3:F6:C3:A5:49:3E:5C:08:F6:B3:0F:9E:1D:1B
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:d5:00:27:63:bb:d4:5e:60:8a:9f:9c:fc:95:50:81:8f:
cf:ca:89:cb:6d:e7:d2:c5:c5:f3:f5:4b:3a:00:7a:32:bb:0f:
53:93:6a:c6:6e:b8:a9:c5:46:33:1b:5d:94:33:9f:90:09:57:
6c:94:99:0a:b0:4a:cb:97:fa:48:f9:72:85:a3:ca:26:b5:1d:
33:01:2c:e6:2b:a8:35:7b:d3:d8:1d:06:83:c6:c5:83:5a:d3:
74:1a:21:57:1b:6e:da:bd:fe:47:0f:ec:48:58:1a:c4:88:5d:
62:e6:5e:6d:cb:b2:69:2d:79:7a:41:d6:38:3f:00:66:2a:70:
b4:16:70:68:c6:fc:96:c7:c3:5c:cd:f5:66:58:52:05:68:be:
9d:d9:6b:cf:14:81:a3:22:91:ab:00:50:b7:05:3f:1b:dc:be:
50:77:fc:1f:c4:57:ec:be:69:1f:63:f6:0d:1f:8f:95:a5:d7:
93:13:d8:08:24:c8:fa:6e:86:9c:a7:58:b1:f4:77:99:da:12:
82:c0:2c:45:67:e2:85:c5:11:8c:8a:71:13:4b:68:2f:f5:fa:
a5:bd:74:ad:8c:af:b4:e5:d2:6f:fc:dc:92:26:5e:dd:94:88:
0d:6e:c4:f2:08:48:d4:9f:a6:f5:da:2c:11:eb:9b:2b:cc:15:
e7:ae:14:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWK2l6nM3o6iC1sdAtxYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTgzN2I0YTc3NmRjYTM2MjRlODk3ZjFjNzRlNmUyN2Qx
ZmMxNTQwHhcNMjYwOTIyMDkwMDQ5WhcNMjYwOTIzMDkwMDQ5WjAzMTEwLwYDVQQD
EyhiOTk3ZmI2MWY5NWNlM2Y2YzNhNTQ5M2U1YzA4ZjZiMzBmOWUxZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WzaUHyzQophVCALO3Al8iFSMuLK
Bw1DsAQup4+ASbX6AQWl2GfFdIdSYpXE7ImZH+YxUyhShHrBP2L3yiOhPa6az2im
ytR6GYK4qJ799xd8GBAyObmUXmDIzmI1B+b+N7+zvHMbKosqDEITvjiGFN71o5W3
Mf7ihXV7PVnu14B78XM6Z30GT2s9CSeeRlTZVQpNCn3CrmerxA3Vp4OBGbB5lvQ6
QDtdM9HLqOynQ1aB9DDwIjqtip8WlDFv9i8fX/+2p/iBXFAdR9uVdtl/Q25c0bfn
yDPvPkBt6+MgjWILxbOLfTji/7E3n2N8YMWnYZZ87N7igti5yRKEgzTi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmX+2H5XOP2w6VJPlwI9rMPnh0bMB8GA1UdIwQY
MBaAFGdYN7SndtyjYk6Jfxx05uJ9H8FUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFnM3RLZDIzS05pVG9sX0hIVG00bjBmd1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt
NjFiMGM3ZmYyZTRlLzEvWjFnM3RLZDIzS05pVG9sX0hIVG00bjBmd1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl
LzEvWjFnM3RLZDIzS05pVG9sX0hIVG00bjBmd1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBPVACdj
u9ReYIqfnPyVUIGPz8qJy23n0sXF8/VLOgB6MrsPU5Nqxm64qcVGMxtdlDOfkAlX
bJSZCrBKy5f6SPlyhaPKJrUdMwEs5iuoNXvT2B0Gg8bFg1rTdBohVxtu2r3+Rw/s
SFgaxIhdYuZebcuyaS15ekHWOD8AZipwtBZwaMb8lsfDXM31ZlhSBWi+ndlrzxSB
oyKRqwBQtwU/G9y+UHf8H8RX7L5pH2P2DR+PlaXXkxPYCCTI+m6GnKdYsfR3mdoS
gsAsRWfihcURjIpxE0toL/X6pb10rYyvtOXSb/zckiZe3ZSIDW7E8ghI1J+m9dos
EeubK8wV564UgQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:58:01 2026 by rpki-client