Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: Zu5RspMrM9sJyn0VvTAXm3MeJ7erS1AS+IsJ3cCYbmQ=
Subject key identifier: D2:B1:B4:45:1A:13:F8:8D:9E:24:DF:E2:54:03:4C:A2:D5:6A:A8:F6
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 01A0D1248EEF07B5431585AE1E10C6B3CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 0307
Signing time: Thu 24 Sep 2026 02:00:29 +0000
Manifest this update: Thu 24 Sep 2026 02:00:29 +0000
Manifest next update: Fri 25 Sep 2026 02:00:29 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: JzhS4eFTARb280rFdk6qp7SO4iKfupbhFx6Gy0oGcJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:8e:ef:07:b5:43:15:85:ae:1e:10:c6:b3:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Sep 24 02:00:29 2026 GMT
Not After : Sep 25 02:00:29 2026 GMT
Subject: CN=d2b1b4451a13f88d9e24dfe254034ca2d56aa8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:c3:cc:77:d1:2d:58:cf:c1:f7:a6:3d:7e:
ba:f2:dc:59:ef:23:bb:49:57:22:54:92:4b:f6:c8:
34:4c:f3:ea:06:4e:e2:f6:34:5b:94:b9:55:11:20:
c7:2b:af:2c:61:46:47:da:8f:59:a8:01:7e:29:64:
b4:dd:b2:6e:56:04:36:a3:2c:53:31:c7:1a:1e:2f:
0b:ba:38:f1:3c:e2:b9:a9:30:03:7c:6a:d5:93:d6:
c3:ce:aa:36:ea:bd:8a:b5:40:79:67:75:bc:ed:4d:
5b:a8:7d:80:00:37:9c:58:37:0a:86:b1:9e:14:e5:
48:be:48:2d:ad:84:5c:35:89:9d:96:48:e6:e5:fa:
f5:3b:59:85:3e:87:71:80:f2:54:2a:91:04:c9:65:
f7:95:8d:5f:d5:8d:45:91:70:b0:74:7a:a2:cd:da:
0a:98:bc:8d:8a:38:35:0f:d6:5a:42:0f:9b:b5:c1:
20:46:66:a9:e5:71:23:75:7d:bc:39:a3:47:9c:92:
ff:04:50:77:7a:e5:e6:0c:84:bf:63:cb:d9:2b:ef:
01:d0:3b:86:d6:0e:5b:75:6a:d0:97:96:1a:25:e0:
1e:19:ab:ad:a0:99:30:25:78:18:85:a9:51:2f:d8:
b0:18:ff:10:63:44:72:62:27:46:40:91:83:3f:54:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:B4:45:1A:13:F8:8D:9E:24:DF:E2:54:03:4C:A2:D5:6A:A8:F6
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fe:7d:f7:72:3b:7c:24:1d:fa:9a:99:a8:6d:70:15:a7:c5:
01:36:d8:15:ad:08:7e:c1:45:8f:4a:74:62:39:06:cb:ee:2c:
d0:41:d9:bc:b6:9c:5c:d1:31:69:58:a3:85:87:33:1f:e7:4d:
dc:b3:ca:a7:48:37:af:bf:37:dd:44:8f:39:75:f2:a3:43:1a:
d2:20:ff:c8:4f:ed:bf:a2:16:2c:73:18:08:2c:32:2d:ea:c9:
94:9d:94:07:03:55:40:18:91:79:da:60:51:3e:e7:14:61:53:
6b:82:fc:ac:ad:77:bf:2a:82:b1:d2:f9:2a:d1:0a:8a:25:53:
f5:77:51:b2:d4:04:66:cb:fa:81:0a:b8:47:d5:c7:3b:ca:28:
e0:7d:45:8c:7b:c2:f6:45:6f:44:2e:0e:24:f3:36:fe:82:a4:
30:22:14:d9:95:cc:ca:e4:a1:54:ea:9f:ec:22:67:ee:e9:8d:
2b:c7:a2:85:35:2e:ae:e9:1e:8c:e2:04:97:c8:d2:0f:68:ed:
c0:b3:ae:63:9f:03:01:2e:9f:a1:c7:da:78:f3:4e:17:9b:6f:
52:77:fb:af:9f:c3:49:9e:6a:6f:49:cd:c4:66:d4:05:a1:60:
87:73:b6:8e:e6:3f:c5:19:be:93:24:20:92:7c:73:9b:29:2c:
56:dc:b0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJI7vB7VDFYWuHhDGs8oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy
ODM3MTMwHhcNMjYwOTI0MDIwMDI5WhcNMjYwOTI1MDIwMDI5WjAzMTEwLwYDVQQD
EyhkMmIxYjQ0NTFhMTNmODhkOWUyNGRmZTI1NDAzNGNhMmQ1NmFhOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxrDzHfRLVjPwfemPX668txZ7yO7
SVciVJJL9sg0TPPqBk7i9jRblLlVESDHK68sYUZH2o9ZqAF+KWS03bJuVgQ2oyxT
MccaHi8LujjxPOK5qTADfGrVk9bDzqo26r2KtUB5Z3W87U1bqH2AADecWDcKhrGe
FOVIvkgtrYRcNYmdlkjm5fr1O1mFPodxgPJUKpEEyWX3lY1f1Y1FkXCwdHqizdoK
mLyNijg1D9ZaQg+btcEgRmap5XEjdX28OaNHnJL/BFB3euXmDIS/Y8vZK+8B0DuG
1g5bdWrQl5YaJeAeGautoJkwJXgYhalRL9iwGP8QY0RyYidGQJGDP1RZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKxtEUaE/iNniTf4lQDTKLVaqj2MB8GA1UdIwQY
MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt
OGFkM2MwZDExNTY1LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1
LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/5993I7
fCQd+pqZqG1wFafFATbYFa0IfsFFj0p0YjkGy+4s0EHZvLacXNExaVijhYczH+dN
3LPKp0g3r7833USPOXXyo0Ma0iD/yE/tv6IWLHMYCCwyLerJlJ2UBwNVQBiRedpg
UT7nFGFTa4L8rK13vyqCsdL5KtEKiiVT9XdRstQEZsv6gQq4R9XHO8oo4H1FjHvC
9kVvRC4OJPM2/oKkMCIU2ZXMyuShVOqf7CJn7umNK8eihTUurukejOIEl8jSD2jt
wLOuY58DAS6focfaePNOF5tvUnf7r5/DSZ5qb0nNxGbUBaFgh3O2juY/xRm+kyQg
knxzmyksVtywfQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:58:52 2026 by rpki-client