Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
File: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft (raw, json)
Hash identifier: yaZaH+jZjnEajG18ZZrWFqWgI9WCPqTjxqsIQA9TCZQ=
Subject key identifier: 4A:F4:96:8C:42:77:33:28:EA:A9:F5:61:C9:FF:B4:62:5D:53:83:3A
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Certificate issuer: /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial: 019F10ADC586435A723CDD4141F76A72CF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
Manifest number: 2A
Signing time: Mon 29 Jun 2026 00:00:51 +0000
Manifest this update: Mon 29 Jun 2026 00:00:51 +0000
Manifest next update: Tue 30 Jun 2026 00:00:51 +0000
Files and hashes: 1: Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl (hash: dZoz0I6hD4kSSFBEFfohzRrqk9DoPslwK3Uk/IMZxwU=)
2: s5JRW3dxCG3iSbG4YoeXwLVuI28.roa (hash: 6zxuS5n39EUMCOA6BmiDNejkEzaS6JegPxfxplNxV0w=)
3: w8zh1viLCameZBKyxiERXyJUv6g.asa (hash: +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ad:c5:86:43:5a:72:3c:dd:41:41:f7:6a:72:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
Validity
Not Before: Jun 29 00:00:51 2026 GMT
Not After : Jun 30 00:00:51 2026 GMT
Subject: CN=4af4968c42773328eaa9f561c9ffb4625d53833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:ff:c5:98:b6:a5:3a:12:62:2d:96:d9:c9:
6f:9f:e5:66:65:f5:04:f1:7c:ef:fb:0a:f5:13:96:
7e:98:93:b7:e6:60:46:b0:11:de:3b:08:35:28:74:
17:8e:0f:da:57:f9:1a:52:57:9b:22:31:35:d9:da:
fb:03:d2:19:da:d0:43:e8:8c:11:f9:11:32:d0:18:
b0:f9:66:92:90:4e:1a:e7:bd:47:c7:f9:c3:7d:5b:
6c:19:fe:8d:1c:6c:59:9c:47:b2:d1:16:51:0a:09:
c5:7e:91:8f:ad:b3:15:83:ed:a2:df:f7:8f:72:70:
5a:5f:35:ca:7d:f7:08:bf:2b:81:03:08:8e:bf:8a:
73:03:d5:d5:a1:d3:27:b5:82:74:17:f4:b2:a9:39:
c3:7a:c0:27:fe:7a:23:11:06:25:c7:36:20:50:c5:
fd:d9:40:80:0e:d8:7b:17:a4:fe:1f:9d:ff:c5:5f:
1f:83:3e:d5:70:5b:00:9c:2d:bc:0e:b6:1d:a2:c6:
c9:eb:39:44:7c:a9:09:86:fd:4a:a3:86:3a:68:18:
72:80:25:ce:d5:9b:a3:8b:a1:b0:1e:bb:4d:a2:b1:
27:c2:54:c8:63:4a:2a:95:f7:e2:5e:d4:b9:c8:0d:
c4:f2:05:09:37:d5:dd:46:73:12:af:57:dd:ee:19:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F4:96:8C:42:77:33:28:EA:A9:F5:61:C9:FF:B4:62:5D:53:83:3A
X509v3 Authority Key Identifier:
keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:0d:42:27:72:1b:29:51:ac:b6:ac:8e:80:59:e7:ec:ae:11:
e9:31:58:28:5d:95:40:26:ba:17:8f:4b:7b:8e:d8:24:c9:07:
fe:69:30:eb:55:82:a4:e9:c4:39:57:ea:0b:1d:3a:a3:51:40:
93:fd:f5:3b:d0:52:a5:8d:96:c9:b0:00:12:6d:44:80:04:36:
4d:51:5f:5b:bb:55:db:c1:0e:85:af:d4:31:e2:59:ec:96:a3:
82:84:cd:db:4d:3b:00:35:31:37:92:d0:86:32:57:4b:c7:3b:
e4:1a:65:ae:26:93:fb:a7:27:72:e6:7f:c4:95:ec:06:ed:eb:
8d:7e:10:f8:df:eb:66:8a:4d:10:70:c4:b7:2e:d5:a0:6e:80:
4a:28:69:bf:db:4f:93:98:fe:77:ec:76:94:e2:03:ba:7a:b9:
49:48:b9:28:fe:eb:e4:8c:be:35:f0:1a:51:01:09:1d:58:71:
16:38:7d:a8:fc:95:3b:42:6f:2f:bd:0f:0b:e7:bc:c5:f8:50:
f4:f7:4e:d9:4e:c9:0d:fb:de:21:d7:c3:c5:b2:a7:6f:17:8f:
d7:77:3d:68:71:f6:b6:23:84:86:e9:ca:f7:3e:ce:ef:0c:ed:
22:6d:fc:06:b6:92:cc:61:eb:51:12:c7:e8:d8:83:8c:5e:b7:
a4:bd:0f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8QrcWGQ1pyPN1BQfdqcs+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDZjZDY0NzdmODQ2YmYxNzA1MDhmZjFhYzM4OTk0ODc3
ZDMwNjQwHhcNMjYwNjI5MDAwMDUxWhcNMjYwNjMwMDAwMDUxWjAzMTEwLwYDVQQD
Eyg0YWY0OTY4YzQyNzczMzI4ZWFhOWY1NjFjOWZmYjQ2MjVkNTM4MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDL/xZi2pToSYi2W2clvn+VmZfUE
8Xzv+wr1E5Z+mJO35mBGsBHeOwg1KHQXjg/aV/kaUlebIjE12dr7A9IZ2tBD6IwR
+REy0Biw+WaSkE4a571Hx/nDfVtsGf6NHGxZnEey0RZRCgnFfpGPrbMVg+2i3/eP
cnBaXzXKffcIvyuBAwiOv4pzA9XVodMntYJ0F/SyqTnDesAn/nojEQYlxzYgUMX9
2UCADth7F6T+H53/xV8fgz7VcFsAnC28DrYdosbJ6zlEfKkJhv1Ko4Y6aBhygCXO
1Zuji6GwHrtNorEnwlTIY0oqlffiXtS5yA3E8gUJN9XdRnMSr1fd7hn32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr0loxCdzMo6qn1Ycn/tGJdU4M6MB8GA1UdIwQY
MBaAFGfWzWR3+Ea/FwUI/xrDiZSHfTBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjliTlpIZjRScjhYQlFqX0dzT0psSWQ5TUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kMjU4ODUtYTk2Yi00NzI1LTkyMzYt
ZGIyNTlmNTBkNjA0LzEvWjliTlpIZjRScjhYQlFqX0dzT0psSWQ5TUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kMjU4ODUtYTk2Yi00NzI1LTkyMzYtZGIyNTlmNTBkNjA0
LzEvWjliTlpIZjRScjhYQlFqX0dzT0psSWQ5TUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Q1CJ3Ib
KVGstqyOgFnn7K4R6TFYKF2VQCa6F49Le47YJMkH/mkw61WCpOnEOVfqCx06o1FA
k/31O9BSpY2WybAAEm1EgAQ2TVFfW7tV28EOha/UMeJZ7JajgoTN2007ADUxN5LQ
hjJXS8c75BplriaT+6cncuZ/xJXsBu3rjX4Q+N/rZopNEHDEty7VoG6ASihpv9tP
k5j+d+x2lOIDunq5SUi5KP7r5Iy+NfAaUQEJHVhxFjh9qPyVO0JvL70PC+e8xfhQ
9PdO2U7JDfveIdfDxbKnbxeP13c9aHH2tiOEhunK9z7O7wztIm38BraSzGHrURLH
6NiDjF63pL0PNA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:48 2026 by rpki-client