Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier: 94Bc3tYsMJM8EQ+oiTGOOt3eZQ7n+BLuKeQmuxyjwCk=
Subject key identifier: F4:1A:D1:CE:C7:3A:21:C1:DD:01:CB:9E:DF:97:E9:E2:B6:5B:71:5F
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A0E66340798A25863439E3BEE7BAD56E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number: 1303
Signing time: Mon 28 Sep 2026 05:00:59 +0000
Manifest this update: Mon 28 Sep 2026 05:00:59 +0000
Manifest next update: Tue 29 Sep 2026 05:00:59 +0000
Files and hashes: 1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
2: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
3: O-pdjSm1G27EcLZc1YIur1izX_U.roa (hash: jKMq7pI2u6HCOkXwOZSmin7/bWw1O5apvOvL1pGFigA=)
4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: Yy+/Hl3PftIGQaPWoGuoiTqmS3OGI8rSUoJnDO5dNvc=)
5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
6: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
7: uB-js8eLrApF33iZUBGxAz2OeB8.roa (hash: v2CZS4LBPcR03VFDtDYyNJUFkRjGLvokXi+BKkeMV0s=)
8: z3KWbXv42c-ZATgtnic3uJ_XhGc.roa (hash: F/Z940zFmLWbSHSUiP5QUTYBI1TQajSnkxOAhEnwt4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:40:79:8a:25:86:34:39:e3:be:e7:ba:d5:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Sep 28 05:00:59 2026 GMT
Not After : Sep 29 05:00:59 2026 GMT
Subject: CN=f41ad1cec73a21c1dd01cb9edf97e9e2b65b715f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:5c:c2:a2:94:78:f0:24:55:5c:d6:d0:ad:
99:f0:89:a6:50:b0:a5:be:62:41:2a:d5:01:7a:bd:
97:7b:83:d0:de:ce:38:e9:30:cc:bf:65:13:7e:ee:
98:07:35:49:25:19:57:04:96:f1:7e:bb:72:de:00:
1d:f3:47:e1:2a:38:f7:69:8f:0e:df:5e:01:2f:d8:
e7:3a:70:ae:de:a1:c7:61:9b:cb:0a:9d:4d:47:1b:
f8:b0:d3:f3:ab:aa:18:66:30:a3:03:4f:d3:c5:6f:
57:7e:a4:e7:80:62:17:3e:e3:d6:b9:7b:a6:71:9c:
5a:b1:4d:df:ca:f6:95:4a:da:05:d9:1e:77:e5:8f:
12:8b:0f:69:26:74:94:c0:a3:69:c9:ef:1b:9b:31:
eb:b4:0f:ed:9a:49:e9:02:d0:9a:4e:67:57:b5:64:
77:4a:41:7e:02:c3:46:bf:a0:59:af:33:76:d4:61:
34:90:76:cb:cf:45:e2:b9:01:eb:c0:88:94:d4:5f:
8c:5e:a8:c5:92:fa:f2:f8:1d:b3:82:74:11:8e:a8:
d1:23:5b:df:b0:ad:f6:9d:34:f2:57:0c:7b:3f:63:
09:ea:d0:9e:94:77:2a:19:b1:e3:96:06:64:e1:f1:
28:6f:92:8d:8d:1a:93:e7:6b:22:4f:59:d9:d0:03:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:D1:CE:C7:3A:21:C1:DD:01:CB:9E:DF:97:E9:E2:B6:5B:71:5F
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:7d:7d:bb:88:b7:1a:9f:f6:fd:93:37:9f:3d:2e:74:b4:
c2:20:ad:e8:39:86:89:a7:b1:56:3e:9b:4d:71:9c:67:a6:67:
6b:2b:64:28:f6:0f:bd:8a:0a:d0:cf:b3:7e:ad:22:85:5c:47:
3d:8f:02:84:d9:89:72:ab:d6:da:2e:f5:21:4a:96:11:65:7e:
0d:67:5c:c7:b0:35:c5:c0:e6:30:f8:ac:49:5d:28:94:32:d6:
c2:59:72:bc:c4:91:c1:b9:66:77:dd:e4:71:d2:9f:02:13:be:
32:d5:6f:6a:55:2c:05:1f:b5:7a:9d:b3:3e:42:1a:fb:a4:00:
41:b8:74:13:1c:7d:25:ae:ee:7d:57:4e:9b:cc:69:bc:42:c0:
c8:d1:07:16:b2:b7:ba:8c:34:f7:6f:e0:ed:e4:50:2f:1b:6b:
11:ee:e0:9a:10:6b:c5:88:48:f4:a5:99:77:f0:01:c6:75:59:
57:dc:36:cf:7b:71:a4:b3:1a:6b:56:e4:98:7a:b1:53:32:76:
3b:bd:a4:d4:0f:63:19:e2:c1:4f:22:b0:81:5e:d7:f6:c4:a8:
b2:a3:e4:c4:62:13:fc:7b:e6:9e:dc:82:01:a8:1b:03:28:cf:
b1:71:56:06:54:9a:0d:ce:af:82:40:80:86:a9:b8:f7:fa:dc:
22:90:98:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmY0B5iiWGNDnjvue61W58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh
YjRmMDAwHhcNMjYwOTI4MDUwMDU5WhcNMjYwOTI5MDUwMDU5WjAzMTEwLwYDVQQD
EyhmNDFhZDFjZWM3M2EyMWMxZGQwMWNiOWVkZjk3ZTllMmI2NWI3MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEBcwqKUePAkVVzW0K2Z8ImmULCl
vmJBKtUBer2Xe4PQ3s446TDMv2UTfu6YBzVJJRlXBJbxfrty3gAd80fhKjj3aY8O
314BL9jnOnCu3qHHYZvLCp1NRxv4sNPzq6oYZjCjA0/TxW9XfqTngGIXPuPWuXum
cZxasU3fyvaVStoF2R535Y8Siw9pJnSUwKNpye8bmzHrtA/tmknpAtCaTmdXtWR3
SkF+AsNGv6BZrzN21GE0kHbLz0XiuQHrwIiU1F+MXqjFkvry+B2zgnQRjqjRI1vf
sK32nTTyVwx7P2MJ6tCelHcqGbHjlgZk4fEob5KNjRqT52siT1nZ0APRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQa0c7HOiHB3QHLnt+X6eK2W3FfMB8GA1UdIwQY
MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct
MDM3NWE5YzMyYjAwLzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw
LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbst9fbuI
txqf9v2TN589LnS0wiCt6DmGiaexVj6bTXGcZ6ZnaytkKPYPvYoK0M+zfq0ihVxH
PY8ChNmJcqvW2i71IUqWEWV+DWdcx7A1xcDmMPisSV0olDLWwllyvMSRwblmd93k
cdKfAhO+MtVvalUsBR+1ep2zPkIa+6QAQbh0Exx9Ja7ufVdOm8xpvELAyNEHFrK3
uow092/g7eRQLxtrEe7gmhBrxYhI9KWZd/ABxnVZV9w2z3txpLMaa1bkmHqxUzJ2
O72k1A9jGeLBTyKwgV7X9sSosqPkxGIT/HvmntyCAagbAyjPsXFWBlSaDc6vgkCA
hqm49/rcIpCY3w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:54:13 2026 by rpki-client