Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier: N3qun+rnhBfcoXcOUunD0zcv/CmK0/ZC5TneTjiSPCc=
Subject key identifier: BE:BC:45:49:E8:B9:AE:C8:51:6F:68:90:5D:20:33:CB:65:AC:0F:47
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 01A0D8720E247EEAC77307D25212F1873EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number: 1023
Signing time: Fri 25 Sep 2026 12:02:28 +0000
Manifest this update: Fri 25 Sep 2026 12:02:28 +0000
Manifest next update: Sat 26 Sep 2026 12:02:28 +0000
Files and hashes: 1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: mTf+fDKu6b5VqJy+GuctpH7yd3Fbv5AkxWhQJmDh24A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:0e:24:7e:ea:c7:73:07:d2:52:12:f1:87:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Sep 25 12:02:28 2026 GMT
Not After : Sep 26 12:02:28 2026 GMT
Subject: CN=bebc4549e8b9aec8516f68905d2033cb65ac0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:7a:92:c7:23:83:28:ff:c0:40:6e:98:93:
f5:31:11:ea:04:df:80:7e:fa:06:3a:df:c1:67:b1:
71:9e:90:47:6c:2a:1b:37:33:3b:ed:6c:01:78:be:
83:f5:ea:5a:60:91:f8:9f:29:70:d7:16:b7:27:e7:
7e:11:46:ad:53:64:55:33:17:d7:a9:6a:32:56:ec:
78:45:18:cf:5e:50:07:d1:44:56:6a:db:32:ae:9c:
a6:a8:c4:3c:50:8c:a8:f4:be:93:f8:21:94:ff:81:
27:a8:ac:6b:c5:42:0b:af:ab:50:1a:ae:bb:46:18:
21:79:02:0b:90:ce:f1:27:1e:45:c9:35:65:50:82:
e6:20:a9:31:69:c5:82:f6:b4:86:84:dc:b8:16:3b:
b2:24:68:ee:7b:62:ce:6b:39:e1:ba:b5:1d:61:f1:
28:37:fb:8a:13:85:91:75:72:47:ea:aa:a7:00:76:
96:ea:58:a3:fd:e7:5c:ca:ba:68:0d:3a:fd:c6:d1:
9c:28:73:18:33:e1:53:e3:d1:09:a0:8f:0d:bd:83:
19:e7:4b:b8:fc:cc:7a:71:7a:f8:ac:4a:f6:50:a6:
0e:6a:18:17:d9:5a:55:48:3d:b1:aa:66:d1:5e:c6:
77:a9:3e:31:a6:50:4b:56:fa:29:cc:66:bd:7d:19:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:45:49:E8:B9:AE:C8:51:6F:68:90:5D:20:33:CB:65:AC:0F:47
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:e8:8a:b1:b1:36:26:f7:df:fc:d2:bd:44:ff:11:ec:e4:
14:16:58:56:8c:e0:3f:9e:68:d9:14:29:dc:6b:2a:b0:80:bb:
bb:02:d6:1f:ca:d1:21:e6:6d:7e:10:4f:5d:09:77:00:da:d5:
00:27:4b:0a:12:77:6d:3f:cf:c4:28:9b:88:ab:a8:95:9c:c8:
f1:3f:c6:35:ed:48:61:be:7e:73:f2:b3:2d:72:77:1d:3d:27:
03:87:1b:13:68:98:7c:ad:05:2b:bf:8a:1d:df:34:44:fb:8a:
c4:e8:fa:f6:d4:d7:46:cb:0b:95:a3:a3:97:e4:1a:7d:97:7f:
40:95:6a:c0:81:bb:41:06:76:f4:b2:04:61:cd:aa:df:00:72:
1f:8a:3a:aa:8a:8b:9c:50:1a:b9:13:c8:4d:da:bc:bc:dd:07:
97:1f:f8:d0:a1:e1:16:72:70:f3:3f:17:93:f3:a1:67:8b:d6:
1b:37:5f:dc:40:1e:da:a4:4a:0a:c0:b6:32:99:f0:57:91:9c:
0d:54:cc:3d:a9:f6:d1:6d:87:7c:c5:b9:ec:3e:c7:a4:c8:41:
92:b6:36:68:af:23:28:2a:c5:f1:83:5e:7a:a0:a1:9c:0b:2c:
1d:09:ec:66:33:ba:94:eb:76:c1:76:a8:b0:cc:ae:ef:9c:14:
6d:ec:40:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcg4kfurHcwfSUhLxhz7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw
N2M1NDAwHhcNMjYwOTI1MTIwMjI4WhcNMjYwOTI2MTIwMjI4WjAzMTEwLwYDVQQD
EyhiZWJjNDU0OWU4YjlhZWM4NTE2ZjY4OTA1ZDIwMzNjYjY1YWMwZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGd6kscjgyj/wEBumJP1MRHqBN+A
fvoGOt/BZ7FxnpBHbCobNzM77WwBeL6D9epaYJH4nylw1xa3J+d+EUatU2RVMxfX
qWoyVux4RRjPXlAH0URWatsyrpymqMQ8UIyo9L6T+CGU/4EnqKxrxUILr6tQGq67
RhgheQILkM7xJx5FyTVlUILmIKkxacWC9rSGhNy4FjuyJGjue2LOaznhurUdYfEo
N/uKE4WRdXJH6qqnAHaW6lij/edcyrpoDTr9xtGcKHMYM+FT49EJoI8NvYMZ50u4
/Mx6cXr4rEr2UKYOahgX2VpVSD2xqmbRXsZ3qT4xplBLVvopzGa9fRk0hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL68RUnoua7IUW9okF0gM8tlrA9HMB8GA1UdIwQY
MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt
ZjQ2ZjlkNjc0ZjZjLzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj
LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXboirGx
Nib33/zSvUT/EezkFBZYVozgP55o2RQp3GsqsIC7uwLWH8rRIeZtfhBPXQl3ANrV
ACdLChJ3bT/PxCibiKuolZzI8T/GNe1IYb5+c/KzLXJ3HT0nA4cbE2iYfK0FK7+K
Hd80RPuKxOj69tTXRssLlaOjl+QafZd/QJVqwIG7QQZ29LIEYc2q3wByH4o6qoqL
nFAauRPITdq8vN0Hlx/40KHhFnJw8z8Xk/OhZ4vWGzdf3EAe2qRKCsC2MpnwV5Gc
DVTMPan20W2HfMW57D7HpMhBkrY2aK8jKCrF8YNeeqChnAssHQnsZjO6lOt2wXao
sMyu75wUbexApg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:35 2026 by rpki-client