
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: Ov6uQRF+fmvKuTlO4j/LyRxVK8lQuSSlF5Tjz5iniQA=
Subject key identifier: A3:E3:F3:24:C6:CD:89:48:86:97:4F:EF:45:25:E5:FA:A1:55:F9:30
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 01A120C10579CEE667385D2FA063640FF8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0660
Signing time: Fri 09 Oct 2026 13:01:22 +0000
Manifest this update: Fri 09 Oct 2026 13:01:22 +0000
Manifest next update: Sat 10 Oct 2026 13:01:22 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: EfoFy0z3DA61VT3Es4DOzbo7Z5kUKQJh6Hb8TzaI2EM=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:05:79:ce:e6:67:38:5d:2f:a0:63:64:0f:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Oct 9 13:01:22 2026 GMT
Not After : Oct 10 13:01:22 2026 GMT
Subject: CN=a3e3f324c6cd894886974fef4525e5faa155f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:84:98:ee:a7:70:56:da:94:31:0d:b1:59:
1f:27:a5:1d:29:06:f8:28:1c:92:f4:88:e4:08:f8:
81:7d:c2:ac:61:61:31:60:cd:69:24:fa:a7:77:3b:
3c:0c:f5:27:b3:f9:af:18:87:66:b0:4e:28:a2:42:
dd:d5:36:3b:9e:fb:2a:e8:ab:d5:37:fa:92:ac:20:
b3:01:53:4c:a4:a6:16:a3:e4:a0:36:3c:40:97:3d:
41:30:f5:7c:0d:06:de:35:31:78:3a:c5:0d:50:a6:
79:e1:5b:5f:72:c9:35:6b:9d:2c:16:14:7d:66:96:
92:3a:25:73:80:0c:5c:67:7a:6e:c2:0c:94:f5:a7:
7d:a5:17:5a:38:d3:d4:a4:8a:5b:f9:1b:aa:b0:ca:
8e:57:3f:64:af:d0:cc:a2:ee:2d:38:96:5d:b7:c8:
23:90:f6:e3:27:b1:f4:ee:c2:2f:17:b9:b5:f0:d7:
43:86:c6:b6:3b:4d:c5:76:13:4c:a3:51:aa:61:24:
3d:36:8b:ee:f9:c6:7e:d9:bc:b1:1c:07:06:22:9a:
1d:90:41:20:e5:ae:4e:f0:60:92:36:01:1e:b3:57:
23:a7:6d:9d:ba:83:35:c9:1d:12:07:52:01:de:a6:
82:c2:5b:a7:45:01:db:15:10:76:07:dd:f2:b7:ef:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:F3:24:C6:CD:89:48:86:97:4F:EF:45:25:E5:FA:A1:55:F9:30
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e2:ff:23:10:d8:53:29:6e:cc:c1:7b:2a:81:6d:a4:b7:b2:
49:7d:a3:b3:4f:b3:8f:7e:35:90:4c:10:c3:37:6e:3c:6b:63:
8a:69:7f:1d:bd:7a:e0:d8:90:3c:e3:16:cd:3f:83:56:a2:fc:
bf:49:28:37:c2:5c:28:f3:88:09:3f:51:5c:57:d7:20:46:b3:
58:7c:a2:dc:af:ac:dc:8f:d8:7d:0d:35:d0:2b:d1:3c:b6:b3:
37:a6:21:c5:0e:eb:d4:13:06:b2:a4:59:01:f6:27:ae:85:1b:
a3:27:6c:f1:8c:a8:39:fd:83:57:6c:b2:f9:46:c0:42:56:0d:
fb:21:c3:be:8f:17:d2:64:a4:d9:38:89:06:b9:d7:62:d0:dc:
98:24:4f:1f:28:58:30:1c:6b:af:9a:31:42:4f:44:3c:13:ee:
fb:2c:46:67:0f:fb:ba:04:75:b3:a8:9f:c9:8d:49:b7:37:a9:
a1:f3:e0:c8:db:54:c7:f6:9d:95:81:b7:23:74:ca:2b:5b:95:
48:bb:29:92:87:14:79:04:eb:70:86:de:f0:de:3a:64:5c:b7:
33:53:1e:b6:e3:ca:e8:74:5c:10:f7:e6:fa:22:c9:2f:2d:95:
d0:9d:92:a7:c5:6d:9e:37:35:ef:62:bc:7e:2a:0c:ad:f9:ff:
25:4f:bf:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwQV5zuZnOF0voGNkD/ipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjYxMDA5MTMwMTIyWhcNMjYxMDEwMTMwMTIyWjAzMTEwLwYDVQQD
EyhhM2UzZjMyNGM2Y2Q4OTQ4ODY5NzRmZWY0NTI1ZTVmYWExNTVmOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDCEmO6ncFbalDENsVkfJ6UdKQb4
KByS9IjkCPiBfcKsYWExYM1pJPqndzs8DPUns/mvGIdmsE4ookLd1TY7nvsq6KvV
N/qSrCCzAVNMpKYWo+SgNjxAlz1BMPV8DQbeNTF4OsUNUKZ54Vtfcsk1a50sFhR9
ZpaSOiVzgAxcZ3puwgyU9ad9pRdaONPUpIpb+RuqsMqOVz9kr9DMou4tOJZdt8gj
kPbjJ7H07sIvF7m18NdDhsa2O03FdhNMo1GqYSQ9Novu+cZ+2byxHAcGIpodkEEg
5a5O8GCSNgEes1cjp22duoM1yR0SB1IB3qaCwlunRQHbFRB2B93yt++2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPj8yTGzYlIhpdP70Ul5fqhVfkwMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOL/IxDY
UyluzMF7KoFtpLeySX2js0+zj341kEwQwzduPGtjiml/Hb164NiQPOMWzT+DVqL8
v0koN8JcKPOICT9RXFfXIEazWHyi3K+s3I/YfQ010CvRPLazN6YhxQ7r1BMGsqRZ
AfYnroUboyds8YyoOf2DV2yy+UbAQlYN+yHDvo8X0mSk2TiJBrnXYtDcmCRPHyhY
MBxrr5oxQk9EPBPu+yxGZw/7ugR1s6ifyY1JtzepofPgyNtUx/adlYG3I3TKK1uV
SLspkocUeQTrcIbe8N46ZFy3M1MetuPK6HRcEPfm+iLJLy2V0J2Sp8Vtnjc172K8
fioMrfn/JU+/9g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:16:35 2026 by rpki-client