Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: w4bDDKl56u2BI+ZdomxRwcU/cffVZf9mW5gd1IWHKLU=
Subject key identifier: 1A:D6:20:8A:EA:F1:6D:AC:ED:34:CB:CD:F0:1F:E8:D1:6F:5C:42:9D
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 01A0BF1EBC3745316DE2C502FDC704D7EC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 09E5
Signing time: Sun 20 Sep 2026 14:00:57 +0000
Manifest this update: Sun 20 Sep 2026 14:00:57 +0000
Manifest next update: Mon 21 Sep 2026 14:00:57 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: toxnSkErFFXNz+XlhcS4YKgzzqdpvBTKtgUkhIFPDn8=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:bc:37:45:31:6d:e2:c5:02:fd:c7:04:d7:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Sep 20 14:00:57 2026 GMT
Not After : Sep 21 14:00:57 2026 GMT
Subject: CN=1ad6208aeaf16daced34cbcdf01fe8d16f5c429d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:83:ec:15:56:86:d3:10:18:dd:92:a9:ac:
7a:29:31:bc:62:6a:0b:90:b5:27:ce:c0:47:e3:47:
49:b9:84:54:29:cc:c6:9d:30:b8:0d:fb:04:d8:eb:
e6:e5:8c:62:33:2a:50:5e:44:b8:88:3e:0e:72:c7:
77:84:2e:91:54:b1:6c:15:34:f9:b8:bd:3c:47:cb:
0a:6a:cc:d8:d4:63:f6:11:66:d5:86:86:cf:95:1a:
b6:ac:42:92:59:ef:ed:b2:0c:e9:98:52:90:5a:0e:
79:10:5b:94:b1:21:69:05:1c:55:16:67:cf:af:56:
2e:1f:eb:c3:07:bc:fe:30:d6:07:6b:84:1f:20:9a:
46:46:f6:0a:cc:63:24:23:1a:6e:c5:e8:7f:76:62:
3d:ff:24:ec:06:77:7a:cc:4e:a9:e6:83:7c:20:6e:
0b:e4:50:51:32:ed:1b:cd:a3:bb:90:17:bd:1b:51:
68:cb:20:5f:04:1e:50:c3:3f:25:96:c0:7d:70:88:
50:6e:32:0b:74:51:4b:9b:95:51:23:15:52:c9:2b:
60:9a:fa:a0:aa:6a:8e:d8:14:0e:01:55:e0:42:3d:
16:34:df:29:44:3a:d3:96:d2:18:e8:4c:88:6f:22:
7b:41:67:55:84:ea:dc:04:94:6b:87:a6:00:bf:90:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D6:20:8A:EA:F1:6D:AC:ED:34:CB:CD:F0:1F:E8:D1:6F:5C:42:9D
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c3:a9:12:a9:4e:6f:a7:f0:b4:8f:48:21:38:99:12:8f:ab:
cb:1f:f7:e0:12:42:cb:64:23:97:94:01:5d:6c:d2:29:e1:97:
1a:99:ac:55:a9:ed:47:bb:87:de:fc:bf:3d:04:be:e5:ce:d7:
05:3a:76:19:87:3c:8a:b9:04:06:f8:a3:11:81:f7:c4:62:21:
5b:de:69:de:54:c4:0c:84:40:ba:4f:ad:39:e3:4c:05:9e:b1:
4f:3a:c7:21:bb:4f:d5:4a:59:14:ff:db:eb:90:df:27:16:4b:
05:d7:ed:7a:71:54:0b:c6:29:20:7c:1c:15:0f:ae:72:82:20:
85:ea:89:68:cb:52:fd:cc:a6:67:d0:04:36:2c:9d:e2:fb:51:
c1:81:c1:f9:d1:6c:33:0c:80:87:e0:83:2e:9e:64:19:46:22:
63:d2:b8:9f:a1:5b:98:59:12:c4:f6:7a:07:79:1a:d5:fe:01:
44:9b:90:db:fd:66:49:67:55:35:60:c8:43:d0:2f:1e:64:7b:
d3:af:31:16:47:6c:d3:bc:a1:16:5e:b2:19:d3:86:51:d6:bc:
47:ed:fa:13:80:90:13:8f:5a:e5:ed:85:c0:0b:92:fd:e2:91:
4b:50:b8:60:d9:11:74:7d:89:1b:0d:51:32:ef:33:23:9f:e1:
9f:b6:a8:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/Hrw3RTFt4sUC/ccE1+yOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1
MTU1NDkwHhcNMjYwOTIwMTQwMDU3WhcNMjYwOTIxMTQwMDU3WjAzMTEwLwYDVQQD
EygxYWQ2MjA4YWVhZjE2ZGFjZWQzNGNiY2RmMDFmZThkMTZmNWM0MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraiD7BVWhtMQGN2Sqax6KTG8YmoL
kLUnzsBH40dJuYRUKczGnTC4DfsE2Ovm5YxiMypQXkS4iD4Ocsd3hC6RVLFsFTT5
uL08R8sKaszY1GP2EWbVhobPlRq2rEKSWe/tsgzpmFKQWg55EFuUsSFpBRxVFmfP
r1YuH+vDB7z+MNYHa4QfIJpGRvYKzGMkIxpuxeh/dmI9/yTsBnd6zE6p5oN8IG4L
5FBRMu0bzaO7kBe9G1FoyyBfBB5Qwz8llsB9cIhQbjILdFFLm5VRIxVSyStgmvqg
qmqO2BQOAVXgQj0WNN8pRDrTltIY6EyIbyJ7QWdVhOrcBJRrh6YAv5CBEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrWIIrq8W2s7TTLzfAf6NFvXEKdMB8GA1UdIwQY
MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt
YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0
LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcOpEqlO
b6fwtI9IITiZEo+ryx/34BJCy2Qjl5QBXWzSKeGXGpmsVantR7uH3vy/PQS+5c7X
BTp2GYc8irkEBvijEYH3xGIhW95p3lTEDIRAuk+tOeNMBZ6xTzrHIbtP1UpZFP/b
65DfJxZLBdftenFUC8YpIHwcFQ+ucoIgheqJaMtS/cymZ9AENiyd4vtRwYHB+dFs
MwyAh+CDLp5kGUYiY9K4n6FbmFkSxPZ6B3ka1f4BRJuQ2/1mSWdVNWDIQ9AvHmR7
068xFkds07yhFl6yGdOGUda8R+36E4CQE49a5e2FwAuS/eKRS1C4YNkRdH2JGw1R
Mu8zI5/hn7aoEg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:40:25 2026 by rpki-client