Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
File: _ZRaQP7pGQtdrjV1RenSN91_Kr0.mft (raw, json)
Hash identifier: ZJ9Tn+jwu4EuJhNMJZzIqgDlp53mBMEch0G+pp+NTu0=
Subject key identifier: 28:C8:7A:88:4D:68:C8:30:07:86:A3:9A:A0:36:C3:79:0B:06:89:24
Authority key identifier: FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
Certificate issuer: /CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Certificate serial: 01A0C47C43EF99861E73559B9634DDE34B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:13 +0000
Manifest this update: Mon 21 Sep 2026 15:01:13 +0000
Manifest next update: Tue 22 Sep 2026 15:01:13 +0000
Files and hashes: 1: FneKNxnzANLquvs5RDh285FbFjo.roa (hash: wM7MaFPVmqdgH2laeuL0dQ1Y/ck3S2iV1sW46582MtM=)
2: _ZRaQP7pGQtdrjV1RenSN91_Kr0.crl (hash: LUPODRa3diab9EWrorz3U9iQqj9kWF17XaQPRUkhTHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:43:ef:99:86:1e:73:55:9b:96:34:dd:e3:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Validity
Not Before: Sep 21 15:01:13 2026 GMT
Not After : Sep 22 15:01:13 2026 GMT
Subject: CN=28c87a884d68c8300786a39aa036c3790b068924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:cf:13:08:4e:c6:ab:c1:d6:d9:f3:f8:97:
f6:9c:da:f6:b0:2d:f5:93:06:c6:c2:ba:c4:6f:70:
06:9a:35:bd:2b:f7:6e:41:06:69:55:03:01:0a:f5:
7a:b2:ae:27:e4:f3:47:9d:aa:60:ef:c7:68:77:89:
79:7b:d3:90:e8:15:89:d0:27:bf:5e:6b:69:ab:b1:
bc:6f:9f:19:25:b1:4c:79:92:e9:f2:e8:16:27:2e:
c7:0a:f6:e1:08:75:c9:a9:85:a0:99:6f:12:63:47:
f9:5a:c5:d5:5d:a6:07:37:e3:dd:8e:11:16:13:59:
29:10:f0:d4:04:e0:0d:6d:a8:ab:67:65:0d:d9:ee:
36:0d:a4:18:a4:09:c5:45:b0:d3:85:e5:04:64:7f:
21:3e:fb:1e:e0:78:fc:80:3e:e0:8c:59:27:79:3c:
4f:5f:ea:44:46:1a:a4:e5:99:95:38:97:b9:f5:15:
2e:73:3f:ee:ae:cc:51:54:45:4a:8a:57:2e:34:c5:
9d:2d:35:e3:97:1e:19:f3:2b:a9:1e:2a:6a:f9:47:
b1:13:e8:11:46:d6:d0:5b:c0:4f:e9:96:56:f5:42:
0c:06:29:f4:e5:7e:d3:d3:85:fe:85:c8:2a:9a:da:
e7:df:26:49:e9:ba:e4:22:ad:bf:35:5b:77:be:3b:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:7A:88:4D:68:C8:30:07:86:A3:9A:A0:36:C3:79:0B:06:89:24
X509v3 Authority Key Identifier:
keyid:FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:3c:99:78:42:a3:6a:0d:58:6c:41:70:c3:a1:1b:81:72:
b1:95:70:87:32:88:7d:69:b3:30:8e:e9:8e:86:59:1c:9b:fb:
47:62:82:fa:df:f3:39:ad:cb:90:3c:b5:f4:8b:85:a8:2e:e0:
5b:38:53:ba:97:fb:3b:de:d8:1c:ff:5a:47:94:0f:eb:c7:9e:
42:1d:9a:49:8c:f7:bb:54:13:8a:67:2c:de:18:10:94:14:88:
b3:18:b2:8f:10:e0:e5:5a:90:c8:97:2f:fa:a7:e6:e8:25:c8:
66:5c:f2:dd:c6:a0:af:e8:d4:eb:8b:8a:a7:b8:02:c4:5a:b4:
3d:40:6e:90:43:34:17:73:79:d2:67:70:66:ca:89:e1:b0:73:
e0:b3:32:75:86:08:63:10:34:9d:48:20:3c:af:c5:d9:c1:9a:
7b:7d:e5:1a:4b:88:80:31:89:80:e9:77:b0:96:27:8e:51:50:
42:f2:32:ee:d0:dd:e8:d0:cd:75:eb:c1:6d:fa:b1:fb:ec:9d:
23:49:9c:c8:ed:61:ad:75:01:28:a5:61:6b:1e:a4:44:fb:07:
54:c6:c3:06:2f:ca:33:84:8e:be:1e:e3:42:8a:d3:89:45:82:
5b:fd:e1:50:49:fa:4d:60:10:f3:19:23:93:e2:15:1e:bd:cd:
1c:1c:4a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfEPvmYYec1WbljTd40sKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTQ1YTQwZmVlOTE5MGI1ZGFlMzU3NTQ1ZTlkMjM3ZGQ3
ZjJhYmQwHhcNMjYwOTIxMTUwMTEzWhcNMjYwOTIyMTUwMTEzWjAzMTEwLwYDVQQD
EygyOGM4N2E4ODRkNjhjODMwMDc4NmEzOWFhMDM2YzM3OTBiMDY4OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p/PEwhOxqvB1tnz+Jf2nNr2sC31
kwbGwrrEb3AGmjW9K/duQQZpVQMBCvV6sq4n5PNHnapg78dod4l5e9OQ6BWJ0Ce/
Xmtpq7G8b58ZJbFMeZLp8ugWJy7HCvbhCHXJqYWgmW8SY0f5WsXVXaYHN+PdjhEW
E1kpEPDUBOANbairZ2UN2e42DaQYpAnFRbDTheUEZH8hPvse4Hj8gD7gjFkneTxP
X+pERhqk5ZmVOJe59RUucz/ursxRVEVKilcuNMWdLTXjlx4Z8yupHipq+UexE+gR
RtbQW8BP6ZZW9UIMBin05X7T04X+hcgqmtrn3yZJ6brkIq2/NVt3vjsCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjIeohNaMgwB4ajmqA2w3kLBokkMB8GA1UdIwQY
MBaAFP2UWkD+6RkLXa41dUXp0jfdfyq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCU8mXhC
o2oNWGxBcMOhG4FysZVwhzKIfWmzMI7pjoZZHJv7R2KC+t/zOa3LkDy19IuFqC7g
WzhTupf7O97YHP9aR5QP68eeQh2aSYz3u1QTimcs3hgQlBSIsxiyjxDg5VqQyJcv
+qfm6CXIZlzy3cagr+jU64uKp7gCxFq0PUBukEM0F3N50mdwZsqJ4bBz4LMydYYI
YxA0nUggPK/F2cGae33lGkuIgDGJgOl3sJYnjlFQQvIy7tDd6NDNdevBbfqx++yd
I0mcyO1hrXUBKKVhax6kRPsHVMbDBi/KM4SOvh7jQorTiUWCW/3hUEn6TWAQ8xkj
k+IVHr3NHBxKfA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:43:55 2026 by rpki-client