Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: ccn7MGthHDUeFlXZ0jIMKbnNcNeSlZzvFtxVrkR8Q3w=
Subject key identifier: 90:FA:E8:8E:A6:EE:FF:88:66:A1:B1:DE:40:3C:29:04:3B:66:D0:A9
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01A0EDE6803CF580C07A236D4ABD448ECB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1A77
Signing time: Tue 29 Sep 2026 16:01:41 +0000
Manifest this update: Tue 29 Sep 2026 16:01:41 +0000
Manifest next update: Wed 30 Sep 2026 16:01:41 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: 9ZpNpSPWxBRkVxARRhvs/1jiqp4vjgaQwIwJN7vA/lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:80:3c:f5:80:c0:7a:23:6d:4a:bd:44:8e:cb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Sep 29 16:01:41 2026 GMT
Not After : Sep 30 16:01:41 2026 GMT
Subject: CN=90fae88ea6eeff8866a1b1de403c29043b66d0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:59:40:ff:6b:3f:3d:34:e0:72:84:d6:1f:
49:87:f9:82:78:ee:11:5d:de:8d:f8:e1:4a:90:ba:
4d:80:7d:d5:60:f9:4e:a3:b9:36:55:a4:29:d6:24:
46:b1:ff:14:d9:90:87:21:7b:e1:aa:e2:a2:b8:0f:
4c:67:09:09:24:c2:5f:b2:e0:19:65:36:24:e1:42:
ba:cc:a6:01:8d:7a:13:c0:6a:29:cc:67:39:83:78:
85:ca:92:71:17:fd:39:68:7e:0e:38:9b:8f:f9:d0:
c1:87:ad:3a:06:6c:cb:7e:19:6e:83:00:4b:b9:a4:
4b:36:77:27:42:a8:76:5f:72:64:8d:47:93:8d:67:
69:5a:3a:ad:4a:97:65:d3:12:02:48:cf:df:f6:85:
ad:b2:3e:16:d4:05:96:76:f3:d4:28:d7:da:cc:69:
ae:38:d5:f7:b1:80:eb:f4:48:1d:15:89:91:7a:da:
1c:b9:54:6d:bb:f5:66:7b:91:21:bd:c6:1f:0c:36:
92:6e:ed:ea:f9:dd:51:dc:d1:9e:88:bc:2e:5c:38:
fa:64:e5:6c:f9:04:ad:9a:a8:a4:ec:fc:42:69:cd:
1b:31:51:7f:bb:0e:9c:6e:71:39:2c:80:27:c2:98:
cd:d4:bf:82:f4:af:e8:c3:64:84:3a:9d:28:1f:44:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:E8:8E:A6:EE:FF:88:66:A1:B1:DE:40:3C:29:04:3B:66:D0:A9
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:f7:cb:25:d1:65:3d:5c:f2:93:47:1c:83:e7:a9:a1:f8:
58:0b:2e:aa:d8:71:06:7a:53:c9:92:e7:a6:3e:05:a4:cd:f3:
c1:9b:66:3b:bc:fb:5d:0b:1d:58:52:90:55:32:30:ab:e0:78:
97:18:f5:b9:12:4a:63:c6:20:10:00:01:b1:37:e6:86:0d:51:
a5:38:f6:bc:74:63:63:2c:76:3c:c0:5c:eb:4c:b3:fb:93:ca:
93:e8:b7:f6:f0:2a:39:62:e0:26:dd:8a:4c:d5:1d:b3:c6:31:
35:32:d3:a3:20:24:78:9e:f5:d1:d4:7e:8b:7b:40:4a:c9:6b:
0f:d3:77:13:d1:11:6a:f2:f9:5d:6c:e0:7a:ab:f6:e0:f2:84:
14:6b:0a:cd:f6:c1:18:f1:e1:24:81:4d:24:ef:3b:22:24:da:
40:a1:54:e3:34:da:3b:71:ff:4e:b9:6f:3d:e5:78:9a:78:38:
c9:02:d5:82:c2:99:5a:be:c6:74:c6:f9:32:f4:db:cf:02:ff:
ce:a6:b2:f9:24:20:24:45:2f:e2:f1:35:f6:9d:ac:b9:94:1e:
ca:ea:ce:5f:d1:b7:a4:95:bb:ce:d6:6c:27:1d:d6:25:ac:03:
26:b5:d7:06:aa:7c:e3:9a:5a:cf:06:85:83:6b:f3:e9:55:7f:
67:12:e2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDt5oA89YDAeiNtSr1EjsuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi
NDc5ODgwHhcNMjYwOTI5MTYwMTQxWhcNMjYwOTMwMTYwMTQxWjAzMTEwLwYDVQQD
Eyg5MGZhZTg4ZWE2ZWVmZjg4NjZhMWIxZGU0MDNjMjkwNDNiNjZkMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rdZQP9rPz004HKE1h9Jh/mCeO4R
Xd6N+OFKkLpNgH3VYPlOo7k2VaQp1iRGsf8U2ZCHIXvhquKiuA9MZwkJJMJfsuAZ
ZTYk4UK6zKYBjXoTwGopzGc5g3iFypJxF/05aH4OOJuP+dDBh606BmzLfhlugwBL
uaRLNncnQqh2X3JkjUeTjWdpWjqtSpdl0xICSM/f9oWtsj4W1AWWdvPUKNfazGmu
ONX3sYDr9EgdFYmRetocuVRtu/Vme5EhvcYfDDaSbu3q+d1R3NGeiLwuXDj6ZOVs
+QStmqik7PxCac0bMVF/uw6cbnE5LIAnwpjN1L+C9K/ow2SEOp0oH0RhjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD66I6m7v+IZqGx3kA8KQQ7ZtCpMB8GA1UdIwQY
MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt
OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw
LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSr3yyXR
ZT1c8pNHHIPnqaH4WAsuqthxBnpTyZLnpj4FpM3zwZtmO7z7XQsdWFKQVTIwq+B4
lxj1uRJKY8YgEAABsTfmhg1RpTj2vHRjYyx2PMBc60yz+5PKk+i39vAqOWLgJt2K
TNUds8YxNTLToyAkeJ710dR+i3tASslrD9N3E9ERavL5XWzgeqv24PKEFGsKzfbB
GPHhJIFNJO87IiTaQKFU4zTaO3H/TrlvPeV4mng4yQLVgsKZWr7GdMb5MvTbzwL/
zqay+SQgJEUv4vE19p2suZQeyurOX9G3pJW7ztZsJx3WJawDJrXXBqp845pazwaF
g2vz6VV/ZxLimA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:41:00 2026 by rpki-client