Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
File: z03hI7ypCDRpQQ16g98niahsaZk.mft (raw, json)
Hash identifier: w1TY/ouScxH3N1NRb4BTt9ogrpmih5zQgPdWyLY+l8I=
Subject key identifier: 8F:F1:FF:58:F0:28:D1:6B:3F:20:B9:FE:13:73:59:9B:4E:03:DC:8B
Authority key identifier: CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
Certificate issuer: /CN=cf4de123bca9083469410d7a83df2789a86c6999
Certificate serial: 01A177DE7F8DCA0961B87EA2BC96C3D5B8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
Manifest number: BC
Signing time: Mon 26 Oct 2026 11:00:32 +0000
Manifest this update: Mon 26 Oct 2026 11:00:32 +0000
Manifest next update: Tue 27 Oct 2026 11:00:32 +0000
Files and hashes: 1: 3eLWx94YuvwwSRAoKOfCLRLl0zY.asa (hash: 79uscgj28wgq78Iu3Rnp/+KrsVCoQRVb4tTu7d98mgM=)
2: z03hI7ypCDRpQQ16g98niahsaZk.crl (hash: 7nTCFTIyCz8bFkfFTOWvXp5ZXHlWLW3IeO2rDx1uo3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:7f:8d:ca:09:61:b8:7e:a2:bc:96:c3:d5:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4de123bca9083469410d7a83df2789a86c6999
Validity
Not Before: Oct 26 11:00:32 2026 GMT
Not After : Oct 27 11:00:32 2026 GMT
Subject: CN=8ff1ff58f028d16b3f20b9fe1373599b4e03dc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:7e:f2:72:5f:f1:d1:b5:57:fc:37:e6:56:
10:ea:4a:f3:9c:2d:c3:2d:a0:53:cb:6a:58:d6:3c:
30:86:66:3e:6d:9a:3e:61:05:aa:ac:f8:5c:a5:7d:
ea:aa:5e:8d:5e:16:39:53:a2:48:7d:68:f7:ca:f7:
bf:4d:99:b8:c3:88:06:dc:96:93:d6:5d:61:23:0d:
8a:ef:32:c3:aa:e1:cf:c3:3a:5d:5e:8b:1a:80:ed:
45:54:b3:38:88:b9:20:15:04:bd:83:e9:b0:ce:c8:
9f:26:a7:6d:2d:4e:dc:2b:38:62:99:79:97:a3:21:
81:07:aa:1f:ab:76:ba:53:5f:59:6b:d4:2b:ed:10:
4c:c8:d5:86:4c:26:d6:a5:cd:4e:ec:6c:4d:e2:a4:
b4:55:3c:d8:29:0b:51:8e:27:90:59:81:4a:e1:8a:
79:64:9b:ff:ef:88:a8:06:8c:7b:82:62:8b:bd:c0:
66:6b:63:74:c1:40:84:7f:d8:af:42:18:43:0c:d0:
9f:0d:a0:29:79:3d:1c:74:51:ff:63:ef:bb:2c:36:
29:50:10:94:21:49:4c:09:b3:f0:42:9c:6b:52:30:
df:8f:bd:54:5d:cb:c9:41:ba:c5:28:df:d0:77:27:
30:c7:f5:e1:bb:52:35:21:cb:52:e3:85:5d:5f:34:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:FF:58:F0:28:D1:6B:3F:20:B9:FE:13:73:59:9B:4E:03:DC:8B
X509v3 Authority Key Identifier:
keyid:CF:4D:E1:23:BC:A9:08:34:69:41:0D:7A:83:DF:27:89:A8:6C:69:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z03hI7ypCDRpQQ16g98niahsaZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0f6c6e-fb3d-491e-b336-e603a48a653e/1/z03hI7ypCDRpQQ16g98niahsaZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:59:f4:da:3a:73:23:dd:1d:18:a8:16:f7:00:1f:d1:63:
e4:40:05:b0:ec:e1:30:d4:f1:60:d4:6d:8c:a5:ec:be:94:bf:
53:45:15:16:ed:10:40:c7:11:ed:b2:13:62:72:a5:9b:43:9d:
0e:f3:c4:5f:cd:fb:9f:97:0f:f2:c0:23:83:b1:72:c9:f6:1f:
43:19:b3:bd:5d:77:52:78:5a:5e:38:30:63:0b:5b:18:9b:26:
53:34:1d:39:d3:d5:19:62:4e:d4:59:dc:3c:bb:d4:3c:3d:e6:
8f:30:c7:c7:89:e6:5e:69:9d:70:9b:0e:e7:92:99:32:b5:68:
79:54:f7:43:9e:ce:fe:84:c2:9c:f3:30:01:1b:9b:88:30:d1:
10:49:a8:bc:6b:1a:bb:ea:72:7f:b8:c2:f2:d2:64:27:f5:ed:
3b:03:d2:d5:d2:a9:31:88:01:53:0d:77:90:67:1e:07:78:88:
db:5f:43:55:e7:3f:98:17:cf:29:ae:05:5b:52:a8:04:13:bb:
4c:67:d0:07:d7:a6:7a:e4:66:ff:3c:c2:bc:30:85:a0:09:f4:
eb:9d:ca:e0:e0:92:a4:b6:e2:ce:54:79:64:81:6d:5b:27:a9:
07:87:26:25:10:36:b6:06:43:5f:e0:d5:63:0f:f1:34:c7:07:
38:01:b4:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF33n+NyglhuH6ivJbD1bioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGRlMTIzYmNhOTA4MzQ2OTQxMGQ3YTgzZGYyNzg5YTg2
YzY5OTkwHhcNMjYxMDI2MTEwMDMyWhcNMjYxMDI3MTEwMDMyWjAzMTEwLwYDVQQD
Eyg4ZmYxZmY1OGYwMjhkMTZiM2YyMGI5ZmUxMzczNTk5YjRlMDNkYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX9+8nJf8dG1V/w35lYQ6krznC3D
LaBTy2pY1jwwhmY+bZo+YQWqrPhcpX3qql6NXhY5U6JIfWj3yve/TZm4w4gG3JaT
1l1hIw2K7zLDquHPwzpdXosagO1FVLM4iLkgFQS9g+mwzsifJqdtLU7cKzhimXmX
oyGBB6ofq3a6U19Za9Qr7RBMyNWGTCbWpc1O7GxN4qS0VTzYKQtRjieQWYFK4Yp5
ZJv/74ioBox7gmKLvcBma2N0wUCEf9ivQhhDDNCfDaApeT0cdFH/Y++7LDYpUBCU
IUlMCbPwQpxrUjDfj71UXcvJQbrFKN/Qdycwx/Xhu1I1IctS44VdXzTJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/x/1jwKNFrPyC5/hNzWZtOA9yLMB8GA1UdIwQY
MBaAFM9N4SO8qQg0aUENeoPfJ4mobGmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZjZjNmUtZmIzZC00OTFlLWIzMzYt
ZTYwM2E0OGE2NTNlLzEvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZjZjNmUtZmIzZC00OTFlLWIzMzYtZTYwM2E0OGE2NTNl
LzEvejAzaEk3eXBDRFJwUVExNmc5OG5pYWhzYVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaVZ9No6
cyPdHRioFvcAH9Fj5EAFsOzhMNTxYNRtjKXsvpS/U0UVFu0QQMcR7bITYnKlm0Od
DvPEX837n5cP8sAjg7FyyfYfQxmzvV13UnhaXjgwYwtbGJsmUzQdOdPVGWJO1Fnc
PLvUPD3mjzDHx4nmXmmdcJsO55KZMrVoeVT3Q57O/oTCnPMwARubiDDREEmovGsa
u+pyf7jC8tJkJ/XtOwPS1dKpMYgBUw13kGceB3iI219DVec/mBfPKa4FW1KoBBO7
TGfQB9emeuRm/zzCvDCFoAn0653K4OCSpLbizlR5ZIFtWyepB4cmJRA2tgZDX+DV
Yw/xNMcHOAG0Nw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:47:34 2026 by rpki-client