Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: 8vt44fATE1FWwTB57H2tO06jpFhxHwHykx10mWElh14=
Subject key identifier: 12:42:31:E1:2B:0F:C0:B7:B7:57:99:8C:CF:D9:24:67:49:FE:56:8A
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 01A19769F71C59A1432264CEC49E0B59B471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 19E3
Signing time: Sun 01 Nov 2026 14:01:06 +0000
Manifest this update: Sun 01 Nov 2026 14:01:06 +0000
Manifest next update: Mon 02 Nov 2026 14:01:06 +0000
Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: EKRvwjiK7jjPGtrjnGj2CddzERm7b2/Xaoy3SJq7UIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:69:f7:1c:59:a1:43:22:64:ce:c4:9e:0b:59:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Nov 1 14:01:06 2026 GMT
Not After : Nov 2 14:01:06 2026 GMT
Subject: CN=124231e12b0fc0b7b757998ccfd9246749fe568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:ca:8e:0b:da:1f:4b:8c:b0:38:23:42:81:
15:0b:0c:d7:ba:e6:26:95:2f:c4:9d:34:f0:64:59:
08:f3:7d:f9:05:82:09:ec:e8:ae:80:db:72:d6:f5:
4a:b5:d7:30:97:4c:42:1b:36:9f:68:58:22:4b:51:
13:09:e9:ed:8f:a2:3d:1b:dc:75:ed:4d:36:9e:b6:
37:fb:2d:a4:96:7f:d0:a9:72:82:04:7b:49:3b:23:
ec:df:61:e7:40:e5:e0:a7:5e:7b:99:cf:f8:d3:44:
36:6e:8f:af:d4:cf:40:52:e8:7c:b4:77:43:b0:14:
45:fb:fe:d0:c7:ce:6f:49:ca:17:9b:94:77:4a:0f:
f7:8b:bd:13:95:69:ec:41:39:50:ea:49:0b:d0:fb:
cf:17:30:a8:cd:4f:ad:47:6b:f6:43:bc:4c:97:b5:
b4:80:38:b8:81:6c:2f:96:31:2c:61:e1:80:b4:7a:
7a:77:69:dd:16:ad:9c:54:f4:73:27:9d:c8:de:dd:
e5:8f:c1:ca:bf:e7:7c:de:79:1c:42:74:f3:7a:d3:
71:47:dd:df:6e:39:fb:00:38:24:af:c1:69:59:ef:
22:17:ff:be:a7:6d:d4:5d:aa:40:83:f9:32:d3:60:
35:cb:63:a9:6e:05:ea:91:f9:bb:0a:3a:54:7b:e1:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:31:E1:2B:0F:C0:B7:B7:57:99:8C:CF:D9:24:67:49:FE:56:8A
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:5d:98:34:28:3e:64:72:64:53:44:1b:4c:c3:89:52:b2:
b5:34:db:78:5d:e3:67:5e:ba:10:de:6e:40:8d:96:6d:c8:53:
5d:40:1e:34:4e:55:d7:ba:6e:fa:cf:5c:01:ff:6f:cf:a6:a2:
fa:ae:ad:47:b6:b0:99:12:3d:b4:50:89:18:5c:0a:5f:0a:3b:
f5:a9:6e:47:5f:bb:18:12:91:22:d2:a5:37:c0:05:d9:d7:37:
00:12:db:a9:54:ac:06:a9:88:04:51:f2:ba:4c:ef:e6:23:d3:
a8:75:a2:ab:c9:89:4a:34:88:43:bb:dd:09:45:b8:87:29:57:
60:41:4f:f6:69:90:14:5f:2a:18:86:4a:ad:78:d5:9a:f7:d3:
db:a1:76:e4:f2:02:af:05:aa:b5:85:28:3f:5a:59:df:03:9d:
51:22:77:1b:d8:20:d9:ef:88:ee:c9:d0:f5:19:f5:67:54:d4:
bd:4e:ce:2e:aa:a2:c7:2d:a7:d4:6c:69:92:f5:b6:7f:2c:1e:
24:c6:aa:dd:66:0f:5d:92:f6:44:07:2f:d3:27:d8:69:ba:d4:
84:bd:94:d1:79:b6:f5:33:71:43:63:ee:fa:dd:74:12:f1:78:
f9:02:2d:12:f1:79:85:c7:ea:76:b6:99:0a:a3:1d:cc:a2:36:
45:c8:d4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGXafccWaFDImTOxJ4LWbRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5
MDliNjMwHhcNMjYxMTAxMTQwMTA2WhcNMjYxMTAyMTQwMTA2WjAzMTEwLwYDVQQD
EygxMjQyMzFlMTJiMGZjMGI3Yjc1Nzk5OGNjZmQ5MjQ2NzQ5ZmU1NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8/KjgvaH0uMsDgjQoEVCwzXuuYm
lS/EnTTwZFkI8335BYIJ7OiugNty1vVKtdcwl0xCGzafaFgiS1ETCentj6I9G9x1
7U02nrY3+y2kln/QqXKCBHtJOyPs32HnQOXgp157mc/400Q2bo+v1M9AUuh8tHdD
sBRF+/7Qx85vScoXm5R3Sg/3i70TlWnsQTlQ6kkL0PvPFzCozU+tR2v2Q7xMl7W0
gDi4gWwvljEsYeGAtHp6d2ndFq2cVPRzJ53I3t3lj8HKv+d83nkcQnTzetNxR93f
bjn7ADgkr8FpWe8iF/++p23UXapAg/ky02A1y2OpbgXqkfm7CjpUe+EgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJCMeErD8C3t1eZjM/ZJGdJ/laKMB8GA1UdIwQY
MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt
ZmM5MTBjMGIxOWFlLzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl
LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW9dmDQo
PmRyZFNEG0zDiVKytTTbeF3jZ166EN5uQI2WbchTXUAeNE5V17pu+s9cAf9vz6ai
+q6tR7awmRI9tFCJGFwKXwo79aluR1+7GBKRItKlN8AF2dc3ABLbqVSsBqmIBFHy
ukzv5iPTqHWiq8mJSjSIQ7vdCUW4hylXYEFP9mmQFF8qGIZKrXjVmvfT26F25PIC
rwWqtYUoP1pZ3wOdUSJ3G9gg2e+I7snQ9Rn1Z1TUvU7OLqqixy2n1GxpkvW2fywe
JMaq3WYPXZL2RAcv0yfYabrUhL2U0Xm29TNxQ2Pu+t10EvF4+QItEvF5hcfqdraZ
CqMdzKI2RcjUUw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:42:12 2026 by rpki-client