Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: r/X1ooNVtbNdWGRnAsS305mnGY1otpCmuANm07sIiyw=
Subject key identifier: 2A:26:1E:90:24:CA:25:4D:AD:02:CE:10:A9:EB:56:1B:18:A0:61:E8
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 01A08AFA47F708DF6BA8FF6B114C01EBFC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 1958
Signing time: Thu 10 Sep 2026 11:00:53 +0000
Manifest this update: Thu 10 Sep 2026 11:00:53 +0000
Manifest next update: Fri 11 Sep 2026 11:00:53 +0000
Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=)
2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: GTElvDcW1h4pq2t8Wp+utwZrsV5fyz577hzrbmN7USg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:47:f7:08:df:6b:a8:ff:6b:11:4c:01:eb:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Sep 10 11:00:53 2026 GMT
Not After : Sep 11 11:00:53 2026 GMT
Subject: CN=2a261e9024ca254dad02ce10a9eb561b18a061e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:88:a9:c3:7d:67:5b:e7:1a:68:45:08:c3:
f5:06:0f:2a:00:d4:aa:e7:96:5d:e1:6a:6f:73:c6:
f6:3d:a0:35:9a:09:46:6d:f8:e6:44:20:7a:0b:79:
6e:9b:8b:c4:17:ca:f6:19:b5:8d:a2:3e:a5:5f:5b:
23:c0:f3:a8:1c:34:da:df:6a:94:77:14:e0:45:4c:
42:57:9b:99:ad:51:f4:ef:1e:8c:c6:e1:66:28:97:
00:00:af:94:ed:80:3e:8f:6a:f4:ca:18:eb:47:2b:
15:85:f9:59:ca:68:86:a4:6f:04:85:4f:05:ff:e1:
00:f7:63:94:89:67:dc:df:6c:11:7f:0a:d5:fc:d0:
cb:a1:c0:f0:c8:07:08:60:ca:66:29:a1:cd:bc:be:
dd:3a:1b:81:fe:81:d6:95:90:16:5e:d3:36:0d:b8:
7d:1a:93:65:b4:94:81:35:b7:e0:7b:dc:ca:71:51:
fd:eb:a9:99:c8:2a:f0:9b:e4:de:47:38:52:c3:9c:
c0:93:3e:dd:42:14:4d:ed:3d:1a:af:c0:94:37:73:
b8:09:a6:2e:18:7c:1a:dd:ea:3c:c0:15:76:14:8a:
95:73:81:9e:5b:67:c8:88:df:2a:1b:8b:5d:79:aa:
12:d6:a6:64:4a:36:42:b6:9c:f3:6d:df:50:21:b3:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:1E:90:24:CA:25:4D:AD:02:CE:10:A9:EB:56:1B:18:A0:61:E8
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:6b:4b:2c:ad:4b:f8:64:e6:dc:bd:86:58:d1:bf:40:1a:
ee:f6:e4:51:8d:7c:64:02:39:18:98:1a:6f:22:c7:a6:9c:23:
27:7d:80:7b:63:e0:db:64:19:a3:d0:c9:00:e6:27:c5:e9:cc:
43:02:c5:83:8b:a8:44:a8:92:50:f3:41:28:9a:44:57:81:4a:
ef:7e:b0:98:32:bf:a8:a8:14:2a:68:a2:26:c2:d8:3f:40:5f:
f2:1c:80:c8:b1:e3:ef:6b:74:ea:11:d7:10:8a:c7:71:10:2f:
c3:9c:7c:c4:ac:ee:9f:84:96:7b:d8:80:5b:06:42:02:10:56:
90:2e:99:6a:07:92:f8:93:51:3b:c3:e6:66:8b:9b:15:2c:a5:
b4:92:5a:8a:27:fe:cd:7c:19:e0:2d:a9:34:e8:a0:33:a8:f5:
2c:43:92:97:d6:b3:f5:16:cd:31:f9:dd:c5:01:e5:8d:e4:6b:
65:b7:35:4c:a7:3e:7c:5c:31:6e:d6:f8:8b:bf:e2:30:4a:4d:
26:a0:b1:e0:0d:cb:4b:c4:29:56:90:df:a0:4b:dd:84:60:9c:
26:5b:d8:c4:dd:cf:1a:63:10:ee:58:c2:00:78:99:ed:0e:1a:
c9:e3:2c:31:06:ee:87:3c:c0:18:a8:c5:f3:c9:cf:c8:14:26:
19:df:f3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+kf3CN9rqP9rEUwB6/w2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5
MDliNjMwHhcNMjYwOTEwMTEwMDUzWhcNMjYwOTExMTEwMDUzWjAzMTEwLwYDVQQD
EygyYTI2MWU5MDI0Y2EyNTRkYWQwMmNlMTBhOWViNTYxYjE4YTA2MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTKIqcN9Z1vnGmhFCMP1Bg8qANSq
55Zd4Wpvc8b2PaA1mglGbfjmRCB6C3lum4vEF8r2GbWNoj6lX1sjwPOoHDTa32qU
dxTgRUxCV5uZrVH07x6MxuFmKJcAAK+U7YA+j2r0yhjrRysVhflZymiGpG8EhU8F
/+EA92OUiWfc32wRfwrV/NDLocDwyAcIYMpmKaHNvL7dOhuB/oHWlZAWXtM2Dbh9
GpNltJSBNbfge9zKcVH966mZyCrwm+TeRzhSw5zAkz7dQhRN7T0ar8CUN3O4CaYu
GHwa3eo8wBV2FIqVc4GeW2fIiN8qG4tdeaoS1qZkSjZCtpzzbd9QIbN/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFComHpAkyiVNrQLOEKnrVhsYoGHoMB8GA1UdIwQY
MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt
ZmM5MTBjMGIxOWFlLzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl
LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhVrSyyt
S/hk5ty9hljRv0Aa7vbkUY18ZAI5GJgabyLHppwjJ32Ae2Pg22QZo9DJAOYnxenM
QwLFg4uoRKiSUPNBKJpEV4FK736wmDK/qKgUKmiiJsLYP0Bf8hyAyLHj72t06hHX
EIrHcRAvw5x8xKzun4SWe9iAWwZCAhBWkC6ZageS+JNRO8PmZoubFSyltJJaiif+
zXwZ4C2pNOigM6j1LEOSl9az9RbNMfndxQHljeRrZbc1TKc+fFwxbtb4i7/iMEpN
JqCx4A3LS8QpVpDfoEvdhGCcJlvYxN3PGmMQ7ljCAHiZ7Q4ayeMsMQbuhzzAGKjF
88nPyBQmGd/zig==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:22 2026 by rpki-client