Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: vJsJbpJGEO3zD+NtA8DgiofMWUrYlWbCONhvo9Tl5Tg=
Subject key identifier: 64:18:B5:5D:63:F5:B3:31:A1:95:63:05:C3:D8:FD:85:8D:B1:3E:35
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 01A0E709E048F0A66E9A7B44576C808477E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 1373
Signing time: Mon 28 Sep 2026 08:02:59 +0000
Manifest this update: Mon 28 Sep 2026 08:02:59 +0000
Manifest next update: Tue 29 Sep 2026 08:02:59 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: qMAg8PmwiyJ7PtlyT9seoMUj1QMR3dDtZRYXnMY5qTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:e0:48:f0:a6:6e:9a:7b:44:57:6c:80:84:77:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Sep 28 08:02:59 2026 GMT
Not After : Sep 29 08:02:59 2026 GMT
Subject: CN=6418b55d63f5b331a1956305c3d8fd858db13e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:4c:7f:93:da:22:a6:27:ce:f8:7c:a9:55:
91:72:0d:a4:d0:9c:ac:21:3b:fa:3e:55:e7:e2:8a:
42:61:b8:6a:ee:33:9b:61:c0:17:8e:06:1a:62:f4:
03:d0:3a:76:4a:f1:38:88:53:77:36:2b:85:d0:1e:
94:cd:90:4b:28:08:16:0d:f8:eb:25:bf:f0:84:e6:
de:cf:20:12:c8:bb:7d:f6:7a:23:c7:a5:d0:a0:5d:
e8:6b:e4:5f:ea:72:b7:d4:20:99:87:53:c8:0d:c5:
40:59:cf:d3:7f:88:d2:c0:cf:4b:ca:99:b1:f6:7a:
ac:fe:d0:48:05:ba:21:de:6e:81:e7:4f:23:32:b9:
a6:0c:ab:08:f6:8e:db:2e:f7:9d:5b:e8:5d:44:2a:
cb:02:8b:10:f2:69:a4:7b:bd:01:7f:fe:0b:16:61:
f6:ac:ef:bd:08:0c:7b:f9:2f:86:dc:06:30:83:35:
31:47:84:eb:e7:63:96:a9:be:b3:8b:83:5f:df:f0:
65:ef:5e:f3:42:16:55:f8:f6:b3:c9:b9:9d:97:1a:
a0:09:cf:1f:9e:e2:eb:13:38:81:6e:28:43:5a:90:
72:bf:f6:58:6a:68:08:67:0e:d5:85:9f:4d:bc:70:
12:59:e7:33:f6:98:da:13:e7:b3:54:d5:e7:3f:18:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:18:B5:5D:63:F5:B3:31:A1:95:63:05:C3:D8:FD:85:8D:B1:3E:35
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:a3:b8:2c:d1:ea:95:97:bc:b0:06:e4:e9:3f:0d:97:5e:
d0:7a:60:cc:41:ac:4c:8b:7b:79:cb:c2:1b:ea:f8:98:01:63:
ce:18:cf:c2:6c:87:eb:86:eb:e0:7b:47:3f:a4:ec:dc:8f:f4:
85:c1:b8:e9:46:09:0b:64:77:bb:d7:65:13:b5:d7:b1:a6:9a:
c8:16:02:d6:61:79:15:42:eb:c5:75:1d:3f:2f:63:65:8a:81:
58:91:44:89:1c:0a:55:5f:37:d7:8d:76:05:83:5d:a3:b6:80:
4c:7b:24:e8:4c:bc:f4:bb:c3:15:85:29:47:8b:c1:47:d3:22:
ac:33:1b:e8:7a:79:35:73:cb:ce:c0:e1:b3:cd:69:48:12:b9:
5d:58:c7:be:32:40:f7:72:2e:03:3d:d7:ab:61:01:c7:27:80:
d3:95:31:ed:4d:17:99:b0:db:cb:1d:54:55:d8:92:55:79:ef:
b8:4f:75:93:40:fe:c8:08:73:1a:bc:ca:08:98:93:48:bb:78:
1d:5b:e4:90:94:61:4f:ea:66:dc:81:87:27:22:bf:5d:ad:ef:
f5:1c:a8:a9:3d:8d:c3:89:56:c5:13:2f:53:04:72:07:44:55:
75:38:9c:93:1c:5a:cb:ff:68:13:cb:40:67:5e:5d:64:14:30:
81:18:c0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnCeBI8KZumntEV2yAhHfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz
NGUzZDgwHhcNMjYwOTI4MDgwMjU5WhcNMjYwOTI5MDgwMjU5WjAzMTEwLwYDVQQD
Eyg2NDE4YjU1ZDYzZjViMzMxYTE5NTYzMDVjM2Q4ZmQ4NThkYjEzZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU9Mf5PaIqYnzvh8qVWRcg2k0Jys
ITv6PlXn4opCYbhq7jObYcAXjgYaYvQD0Dp2SvE4iFN3NiuF0B6UzZBLKAgWDfjr
Jb/whObezyASyLt99nojx6XQoF3oa+Rf6nK31CCZh1PIDcVAWc/Tf4jSwM9Lypmx
9nqs/tBIBboh3m6B508jMrmmDKsI9o7bLvedW+hdRCrLAosQ8mmke70Bf/4LFmH2
rO+9CAx7+S+G3AYwgzUxR4Tr52OWqb6zi4Nf3/Bl717zQhZV+PazybmdlxqgCc8f
nuLrEziBbihDWpByv/ZYamgIZw7VhZ9NvHASWecz9pjaE+ezVNXnPxjxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQYtV1j9bMxoZVjBcPY/YWNsT41MB8GA1UdIwQY
MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt
MTY3M2FkOGM0MDEyLzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy
LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMejuCzR
6pWXvLAG5Ok/DZde0HpgzEGsTIt7ecvCG+r4mAFjzhjPwmyH64br4HtHP6Ts3I/0
hcG46UYJC2R3u9dlE7XXsaaayBYC1mF5FULrxXUdPy9jZYqBWJFEiRwKVV831412
BYNdo7aATHsk6Ey89LvDFYUpR4vBR9MirDMb6Hp5NXPLzsDhs81pSBK5XVjHvjJA
93IuAz3Xq2EBxyeA05Ux7U0XmbDbyx1UVdiSVXnvuE91k0D+yAhzGrzKCJiTSLt4
HVvkkJRhT+pm3IGHJyK/Xa3v9RyoqT2Nw4lWxRMvUwRyB0RVdTickxxay/9oE8tA
Z15dZBQwgRjA8w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:46:06 2026 by rpki-client