Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: JC/K48107lOlT7bTHBOE439ekOrjS7jy1xmIw1rmGIg=
Subject key identifier: BA:07:3C:16:8F:EF:39:98:76:52:F7:81:C0:85:6D:60:DE:FC:F4:FE
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 01A1DF4C54D79DF048DA7A66C86E32DF5B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 12A7
Signing time: Sun 15 Nov 2026 13:01:23 +0000
Manifest this update: Sun 15 Nov 2026 13:01:23 +0000
Manifest next update: Mon 16 Nov 2026 13:01:23 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: Z5CGSlSu6o43Z/ho7J9KgF6VOuuLiJ8lVyvVray5Lqk=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:54:d7:9d:f0:48:da:7a:66:c8:6e:32:df:5b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Nov 15 13:01:23 2026 GMT
Not After : Nov 16 13:01:23 2026 GMT
Subject: CN=ba073c168fef39987652f781c0856d60defcf4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:ac:3d:35:29:91:3f:b4:37:f6:e0:77:c3:
60:8b:4b:af:9d:4f:0d:90:aa:68:7e:a1:2b:ec:da:
8d:b3:15:6f:52:49:57:b9:83:71:c1:48:6d:ce:fa:
d7:51:e5:59:38:28:54:94:51:ad:0d:5b:44:82:26:
92:64:9b:ca:62:db:fb:32:f6:42:fa:81:59:e0:c7:
74:55:68:0e:19:e2:97:a4:af:b7:8c:56:15:2d:1f:
2f:51:61:85:b6:1f:7a:a8:ef:c1:2d:82:16:3e:fb:
8c:6b:47:be:df:e7:8f:c4:e7:de:bb:63:93:75:4e:
72:05:eb:fe:ef:7e:99:2e:a5:ea:95:96:39:63:67:
7e:c9:a8:93:4c:8d:87:98:cb:3e:77:62:90:78:40:
06:e2:f6:55:50:d3:bd:cf:94:a6:f3:0f:de:55:62:
76:b7:95:98:10:74:73:ec:33:89:d4:aa:72:00:09:
d2:72:39:3b:88:44:eb:5b:76:f0:79:0b:34:a1:69:
d8:b4:1d:26:c9:0a:c2:f2:ee:30:39:cb:c4:e7:c4:
dc:8f:a3:6a:04:fb:78:96:71:c9:c9:b5:5c:26:2c:
de:45:81:a8:22:b3:34:ec:51:9b:6e:0d:3c:6b:b1:
a7:82:78:8c:a1:e0:24:c1:96:cc:d8:6f:3a:26:80:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:3C:16:8F:EF:39:98:76:52:F7:81:C0:85:6D:60:DE:FC:F4:FE
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:0b:2a:25:a5:f1:63:26:65:c0:0c:c5:ec:32:56:4f:0f:
9b:96:38:e2:a2:a8:1c:0c:f2:2f:a9:03:bc:5c:8c:9e:1f:5c:
5a:86:20:91:5f:f4:4f:ec:aa:a8:57:93:c1:d8:4a:b8:e6:c5:
65:5f:6b:6b:ac:73:0b:50:cc:ad:14:96:a2:c8:d2:a8:db:9a:
c4:00:ce:f8:b1:28:ba:f3:f8:1c:29:ff:4e:86:0e:2c:21:2d:
8a:e5:b8:27:fd:70:e9:43:77:36:35:11:83:bc:3f:02:77:6f:
1a:da:46:80:96:1f:d5:e7:67:f7:d7:be:0e:8a:32:41:bc:2f:
b4:9d:68:2e:ef:a2:f3:f6:dd:01:00:af:1f:8b:bb:ea:2d:da:
6a:d0:e8:a1:3e:a2:fc:a9:c4:9a:c4:37:04:b4:be:a9:a2:e2:
76:5d:ab:74:34:93:07:31:a5:50:c2:9e:fd:ff:1c:52:26:8b:
3f:20:2a:a2:78:9b:68:70:95:3d:7c:9d:a1:8c:07:0b:b6:27:
36:a2:3e:40:09:3f:6e:d7:3a:3b:cd:69:ea:8c:66:ab:a4:32:
09:f0:49:85:e9:8b:76:e3:5a:da:33:1f:d4:eb:c8:a2:e6:b0:
c8:51:f6:ef:4f:c2:e6:27:b9:63:bb:1f:1f:59:97:8e:fb:a6:
c6:ad:b7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTFTXnfBI2npmyG4y31t+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk
OGY2MDAwHhcNMjYxMTE1MTMwMTIzWhcNMjYxMTE2MTMwMTIzWjAzMTEwLwYDVQQD
EyhiYTA3M2MxNjhmZWYzOTk4NzY1MmY3ODFjMDg1NmQ2MGRlZmNmNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoamsPTUpkT+0N/bgd8Ngi0uvnU8N
kKpofqEr7NqNsxVvUklXuYNxwUhtzvrXUeVZOChUlFGtDVtEgiaSZJvKYtv7MvZC
+oFZ4Md0VWgOGeKXpK+3jFYVLR8vUWGFth96qO/BLYIWPvuMa0e+3+ePxOfeu2OT
dU5yBev+736ZLqXqlZY5Y2d+yaiTTI2HmMs+d2KQeEAG4vZVUNO9z5Sm8w/eVWJ2
t5WYEHRz7DOJ1KpyAAnScjk7iETrW3bweQs0oWnYtB0myQrC8u4wOcvE58Tcj6Nq
BPt4lnHJybVcJizeRYGoIrM07FGbbg08a7GngniMoeAkwZbM2G86JoAlswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoHPBaP7zmYdlL3gcCFbWDe/PT+MB8GA1UdIwQY
MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct
YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4
LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaQLKiWl
8WMmZcAMxewyVk8Pm5Y44qKoHAzyL6kDvFyMnh9cWoYgkV/0T+yqqFeTwdhKuObF
ZV9ra6xzC1DMrRSWosjSqNuaxADO+LEouvP4HCn/ToYOLCEtiuW4J/1w6UN3NjUR
g7w/AndvGtpGgJYf1edn99e+DooyQbwvtJ1oLu+i8/bdAQCvH4u76i3aatDooT6i
/KnEmsQ3BLS+qaLidl2rdDSTBzGlUMKe/f8cUiaLPyAqonibaHCVPXydoYwHC7Yn
NqI+QAk/btc6O81p6oxmq6QyCfBJhemLduNa2jMf1OvIouawyFH270/C5ie5Y7sf
H1mXjvumxq23WQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:38:28 2026 by rpki-client