Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: LoZmb+Ocb0TTNREQrSKBC0gikJsjg8Y2DkSPMCsyX58=
Subject key identifier: 86:7A:3B:2C:62:DD:F7:8A:92:58:CF:2A:03:1C:CF:B7:D1:BF:E4:62
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 01A177A74C14EAFC3A9E48A348EA69135C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 09DC
Signing time: Mon 26 Oct 2026 10:00:14 +0000
Manifest this update: Mon 26 Oct 2026 10:00:14 +0000
Manifest next update: Tue 27 Oct 2026 10:00:14 +0000
Files and hashes: 1: MLsqALh1Uvn10wXf3xWBPtRGZbA.roa (hash: DURkaYN7iePQL+U7Y3SkLxVeI/ty9Gkq3Gwz2WfZHfk=)
2: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: 5AMSWqlDhMtSp/c6TC5NxGEDBnGuiaPW/xqCJV4XbvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:4c:14:ea:fc:3a:9e:48:a3:48:ea:69:13:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Oct 26 10:00:14 2026 GMT
Not After : Oct 27 10:00:14 2026 GMT
Subject: CN=867a3b2c62ddf78a9258cf2a031ccfb7d1bfe462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:89:22:e8:ae:05:0c:87:f5:ca:87:71:81:
98:c1:f8:8c:81:e8:a5:62:1b:cb:94:fe:9b:00:43:
89:f0:aa:52:e4:2a:76:d6:64:95:23:2d:3d:75:15:
7e:1b:7c:91:6d:c8:00:f6:c8:08:62:d5:72:c4:c7:
58:05:f9:e3:1f:e0:e6:4d:0c:bc:1e:cb:ac:f0:28:
64:65:50:b3:6b:2e:be:9f:d1:2f:0d:85:c0:3d:ab:
79:29:a0:89:bc:35:23:a9:9a:e2:ff:44:67:e7:48:
95:4c:ef:99:bc:2e:e4:c1:2c:6f:6d:12:e3:4e:30:
0b:ad:d5:01:e7:e6:da:df:ce:8d:73:12:8d:1a:e8:
fe:5d:76:f8:a1:ce:47:c2:3a:12:d2:90:41:ad:0f:
17:5b:6b:2d:38:62:7e:f8:8a:02:33:c0:7d:d4:d8:
be:e4:e5:33:bc:70:7f:8c:3f:2c:3e:b5:e6:15:7d:
03:fd:c1:22:0a:75:60:cf:bc:b7:8c:4e:c4:a8:0d:
ee:dc:dd:be:cc:7b:5c:d9:17:73:c9:15:e5:2f:05:
6f:66:f3:ab:75:2a:fe:23:1b:4b:62:6c:f4:2b:9a:
f9:e0:aa:db:d6:d6:78:41:f6:6c:18:bc:a1:a5:df:
45:73:86:c4:ae:93:65:63:c5:ea:5a:69:7c:23:b8:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7A:3B:2C:62:DD:F7:8A:92:58:CF:2A:03:1C:CF:B7:D1:BF:E4:62
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ec:07:e9:0e:7b:d0:fd:3b:be:1f:27:7b:8d:31:cd:14:23:
0b:56:12:a1:5d:cb:e5:68:02:63:e1:24:20:d0:7f:fa:f2:64:
00:9f:dc:5e:1d:c7:82:db:d4:1a:7c:a3:e2:a0:c0:a0:8c:2e:
3c:c9:cd:84:ad:75:f0:36:f8:6b:31:a1:58:e7:66:cf:7c:81:
09:25:8b:53:48:57:bd:b8:7d:a9:ee:56:33:c1:b0:97:51:fe:
2a:1a:c2:33:1a:f8:cb:cf:a7:bb:4f:3a:20:f8:55:88:6f:4a:
0b:b1:e5:21:85:33:24:e0:2e:a3:43:d2:b5:fb:8d:1e:a9:70:
fd:14:08:c9:cb:29:62:bf:8a:23:74:91:6f:bf:f7:7b:fe:d6:
b5:1b:8d:21:05:0d:98:e7:59:e7:38:a7:46:89:ab:ce:4c:b6:
e1:c7:c0:6a:17:bd:f2:e2:89:df:8a:86:eb:6b:28:24:e5:86:
83:b6:20:b3:b4:f6:ce:ff:28:b0:74:81:9c:bc:28:d5:87:15:
1b:41:71:d2:3e:5a:d0:be:5e:02:68:55:d3:36:5a:95:31:81:
d5:56:da:0d:7c:cc:7f:65:52:96:3f:fc:37:e3:fc:76:f0:c6:
e1:2d:fc:2e:ff:ad:08:19:bb:08:76:c1:05:6b:0e:57:e5:c2:
9f:68:d6:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3p0wU6vw6nkijSOppE1xOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2
NWQwOGQwHhcNMjYxMDI2MTAwMDE0WhcNMjYxMDI3MTAwMDE0WjAzMTEwLwYDVQQD
Eyg4NjdhM2IyYzYyZGRmNzhhOTI1OGNmMmEwMzFjY2ZiN2QxYmZlNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOJIuiuBQyH9cqHcYGYwfiMgeil
YhvLlP6bAEOJ8KpS5Cp21mSVIy09dRV+G3yRbcgA9sgIYtVyxMdYBfnjH+DmTQy8
Hsus8ChkZVCzay6+n9EvDYXAPat5KaCJvDUjqZri/0Rn50iVTO+ZvC7kwSxvbRLj
TjALrdUB5+ba386NcxKNGuj+XXb4oc5HwjoS0pBBrQ8XW2stOGJ++IoCM8B91Ni+
5OUzvHB/jD8sPrXmFX0D/cEiCnVgz7y3jE7EqA3u3N2+zHtc2RdzyRXlLwVvZvOr
dSr+IxtLYmz0K5r54Krb1tZ4QfZsGLyhpd9Fc4bErpNlY8XqWml8I7joTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ6Oyxi3feKkljPKgMcz7fRv+RiMB8GA1UdIwQY
MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt
ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz
LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsewH6Q57
0P07vh8ne40xzRQjC1YSoV3L5WgCY+EkINB/+vJkAJ/cXh3HgtvUGnyj4qDAoIwu
PMnNhK118Db4azGhWOdmz3yBCSWLU0hXvbh9qe5WM8Gwl1H+KhrCMxr4y8+nu086
IPhViG9KC7HlIYUzJOAuo0PStfuNHqlw/RQIycspYr+KI3SRb7/3e/7WtRuNIQUN
mOdZ5zinRomrzky24cfAahe98uKJ34qG62soJOWGg7Ygs7T2zv8osHSBnLwo1YcV
G0Fx0j5a0L5eAmhV0zZalTGB1VbaDXzMf2VSlj/8N+P8dvDG4S38Lv+tCBm7CHbB
BWsOV+XCn2jWPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:21:51 2026 by rpki-client