Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: 4vOAOhFfE4I3ComIJ677Ryh4g7S+t1cSkkzg3NjO4Go=
Subject key identifier: C1:29:23:A3:00:4A:BB:62:FB:4D:AA:7F:A8:55:D0:05:4B:C9:FE:B1
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 01A08D1F4C46B825B6203B638F4DACE0EB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 19DC
Signing time: Thu 10 Sep 2026 21:00:33 +0000
Manifest this update: Thu 10 Sep 2026 21:00:33 +0000
Manifest next update: Fri 11 Sep 2026 21:00:33 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: wdpvPAJJ0y6IvzA3uvLwUDttCKGxasDOqI/9oxcQQEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:4c:46:b8:25:b6:20:3b:63:8f:4d:ac:e0:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Sep 10 21:00:33 2026 GMT
Not After : Sep 11 21:00:33 2026 GMT
Subject: CN=c12923a3004abb62fb4daa7fa855d0054bc9feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:8c:78:5d:ae:54:41:a9:99:d8:55:d6:f8:
78:58:4c:70:7c:c6:fd:98:26:4b:9f:2e:d7:45:27:
9f:ce:0c:81:28:d2:d0:d5:69:19:0a:5c:b8:72:84:
5b:9a:fb:9e:7d:3f:fe:57:26:cf:08:97:c4:68:4c:
0b:c6:37:47:59:a6:df:5a:ab:28:f0:c0:0b:5d:3e:
5c:76:e6:25:9f:ad:6d:ca:0c:73:0f:de:63:cf:88:
c4:c3:61:df:96:93:6b:51:56:8d:41:65:0f:19:33:
40:44:d3:07:38:5f:7c:98:11:21:5e:13:ba:fb:38:
b1:08:dc:00:e4:23:31:35:fb:28:d9:b4:27:b1:de:
aa:a6:b7:c2:db:bf:1e:09:c5:71:80:0b:cb:01:94:
dd:ca:50:5c:23:b7:73:0a:60:ef:13:2f:e8:a9:00:
bb:84:00:31:d2:d1:a8:29:93:2e:ca:2c:78:d8:e6:
b4:3b:4c:8e:b7:f5:39:cc:fc:0e:cf:6c:08:b7:b3:
49:17:48:4b:b6:89:4b:04:bf:2b:94:5a:5d:99:4c:
4b:a5:12:14:c1:c1:27:b3:b3:0a:46:fa:e8:63:ca:
16:ad:0a:0f:b0:4d:35:2a:ef:92:4e:08:76:1b:03:
59:d2:9d:58:fe:a3:05:92:2d:08:bc:b1:68:e6:1e:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:23:A3:00:4A:BB:62:FB:4D:AA:7F:A8:55:D0:05:4B:C9:FE:B1
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:bb:56:c3:05:dd:7a:c8:01:6a:4f:90:4f:2e:25:1a:6f:
c0:2b:cf:2a:1b:f0:a1:cf:9c:bf:e9:0b:ed:5d:78:67:a8:e0:
6a:22:b8:09:30:bb:6b:ce:45:f3:bb:c0:0c:59:75:b2:fb:82:
ed:15:1b:22:37:82:88:86:dd:b0:ce:dc:bd:96:04:24:34:5c:
ad:9c:c4:d4:38:6b:f8:99:e4:0c:cf:fb:26:88:2a:0a:10:96:
4f:23:e8:e7:0e:c6:60:ef:92:a9:0c:b8:d4:f2:54:13:51:e0:
72:70:63:c5:de:ca:86:0a:83:46:22:df:81:4c:4e:33:09:74:
34:88:ae:0d:d1:f8:cb:c9:04:38:00:d2:11:fa:20:08:5c:0c:
61:53:91:38:a7:03:e6:7c:ca:cc:2f:37:63:41:cd:39:70:8a:
55:e6:22:97:3c:c7:3e:42:a2:83:a4:1b:b6:f0:b8:8e:3f:73:
3b:b7:7f:fa:46:08:84:b1:9a:83:76:b6:66:32:2a:04:54:4f:
ea:18:05:14:ea:f2:c6:a9:49:fb:a2:d0:5f:f8:f6:3d:0a:bd:
3f:d3:ab:9d:89:0b:06:de:32:53:18:7e:d6:73:ea:fe:f7:18:
21:67:a9:98:dc:10:c4:00:c2:b3:20:91:bb:ec:52:10:e9:48:
71:c0:4c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH0xGuCW2IDtjj02s4OuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm
YjgwMWYwHhcNMjYwOTEwMjEwMDMzWhcNMjYwOTExMjEwMDMzWjAzMTEwLwYDVQQD
EyhjMTI5MjNhMzAwNGFiYjYyZmI0ZGFhN2ZhODU1ZDAwNTRiYzlmZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+MeF2uVEGpmdhV1vh4WExwfMb9
mCZLny7XRSefzgyBKNLQ1WkZCly4coRbmvuefT/+VybPCJfEaEwLxjdHWabfWqso
8MALXT5cduYln61tygxzD95jz4jEw2HflpNrUVaNQWUPGTNARNMHOF98mBEhXhO6
+zixCNwA5CMxNfso2bQnsd6qprfC278eCcVxgAvLAZTdylBcI7dzCmDvEy/oqQC7
hAAx0tGoKZMuyix42Oa0O0yOt/U5zPwOz2wIt7NJF0hLtolLBL8rlFpdmUxLpRIU
wcEns7MKRvroY8oWrQoPsE01Ku+STgh2GwNZ0p1Y/qMFki0IvLFo5h5JXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEpI6MASrti+02qf6hV0AVLyf6xMB8GA1UdIwQY
MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt
OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi
LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPq7VsMF
3XrIAWpPkE8uJRpvwCvPKhvwoc+cv+kL7V14Z6jgaiK4CTC7a85F87vADFl1svuC
7RUbIjeCiIbdsM7cvZYEJDRcrZzE1Dhr+JnkDM/7JogqChCWTyPo5w7GYO+SqQy4
1PJUE1HgcnBjxd7KhgqDRiLfgUxOMwl0NIiuDdH4y8kEOADSEfogCFwMYVOROKcD
5nzKzC83Y0HNOXCKVeYilzzHPkKig6QbtvC4jj9zO7d/+kYIhLGag3a2ZjIqBFRP
6hgFFOryxqlJ+6LQX/j2PQq9P9OrnYkLBt4yUxh+1nPq/vcYIWepmNwQxADCsyCR
u+xSEOlIccBMBQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:36 2026 by rpki-client