Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
File: zX8aXqfR0w1axu1LjqyJsezI-dY.mft (raw, json)
Hash identifier: M/wgV3XfyHDQ6kNDsMkZgA4fVIaUOIIyU+ORYXYxqlE=
Subject key identifier: F4:3F:57:7E:6A:79:01:C8:A2:C8:5E:2D:A7:07:F0:7C:1E:A4:07:F0
Authority key identifier: CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
Certificate issuer: /CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Certificate serial: 01A0EF6738AFBE21F7143B4423B9EA26AE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
Manifest number: 24
Signing time: Tue 29 Sep 2026 23:01:54 +0000
Manifest this update: Tue 29 Sep 2026 23:01:54 +0000
Manifest next update: Wed 30 Sep 2026 23:01:54 +0000
Files and hashes: 1: LAlwfScrj210Zj_YjjVP1IMy-Ts.asa (hash: TDEsF7QpfzwbNHSJA9Ww5ZKSL4vcaKQcJiaTOoq+ljk=)
2: zX8aXqfR0w1axu1LjqyJsezI-dY.crl (hash: K5n40HzkzT2+HKU2z2ZuAdYm8oJPjHYzz/PlgYzhejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 23:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:38:af:be:21:f7:14:3b:44:23:b9:ea:26:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f1a5ea7d1d30d5ac6ed4b8eac89b1ecc8f9d6
Validity
Not Before: Sep 29 23:01:54 2026 GMT
Not After : Sep 30 23:01:54 2026 GMT
Subject: CN=f43f577e6a7901c8a2c85e2da707f07c1ea407f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:f0:a2:7a:6a:c9:02:36:2f:14:45:c3:38:
64:6a:21:8e:da:79:37:d3:96:a1:ca:85:38:41:69:
31:b1:54:7b:4b:9a:be:05:bf:1b:83:28:56:f6:49:
52:df:58:d3:22:24:65:c7:f1:80:ff:58:6b:32:a9:
28:b0:17:2d:35:22:41:5c:e1:6e:2b:49:a9:72:ee:
bf:5f:a6:5e:de:c6:88:cb:37:14:ae:2d:2e:26:10:
9f:1c:5d:57:85:f4:e5:fb:88:69:03:e9:c1:cd:27:
d1:db:66:bb:65:9c:14:4f:af:fb:21:33:b8:2b:50:
9a:d7:b9:98:77:31:b9:7c:e5:a7:76:42:28:ff:e5:
71:e5:a5:3e:82:51:9d:a8:a5:7e:f9:da:54:b4:15:
8b:77:40:58:86:17:b0:a3:5d:85:03:b6:2e:3a:8a:
cd:3e:04:61:9b:13:08:4f:37:ae:53:c4:01:53:8f:
f5:a5:99:77:75:fe:95:2d:b7:e3:e7:d6:a1:ba:a8:
63:40:b5:8e:6d:37:d1:f0:e3:39:b9:f1:c9:62:f3:
48:75:e3:29:f2:a8:7c:06:61:c0:34:ac:22:fd:6c:
2f:63:3a:68:e1:ec:d8:5b:16:4b:6d:25:19:02:62:
56:79:5e:70:9d:18:e0:25:28:43:ea:cf:c8:4d:2e:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:57:7E:6A:79:01:C8:A2:C8:5E:2D:A7:07:F0:7C:1E:A4:07:F0
X509v3 Authority Key Identifier:
keyid:CD:7F:1A:5E:A7:D1:D3:0D:5A:C6:ED:4B:8E:AC:89:B1:EC:C8:F9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX8aXqfR0w1axu1LjqyJsezI-dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9bf498-8c31-46ef-9840-35c035fe9d48/1/zX8aXqfR0w1axu1LjqyJsezI-dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b6:bd:ff:fc:50:52:ce:1f:d8:8f:8b:75:5a:39:82:83:ba:
dc:fc:40:1e:6f:0e:40:e3:34:bd:16:12:d4:39:9b:e9:13:d3:
69:e8:21:e9:a0:52:98:93:62:63:f7:88:69:d4:ba:2c:1a:82:
59:07:be:b6:59:87:8e:64:1c:4a:12:81:d8:e6:68:6f:ae:d7:
13:cc:b4:58:59:f6:bb:34:b1:be:b1:e6:4f:65:32:f0:41:71:
a8:20:e9:fc:2a:a2:72:21:ca:7e:b5:a3:81:0a:b7:b5:a6:9d:
dc:cf:97:7b:06:95:6d:2b:32:5f:0d:7a:f1:37:66:cf:ef:26:
91:88:ce:c7:0e:a4:79:56:eb:74:69:06:6b:23:d6:a0:d2:a3:
e4:ae:37:65:93:c2:dc:ae:1b:c7:96:bb:1e:a5:38:41:ce:bf:
3d:80:ec:18:c7:b7:f0:84:c1:6d:f4:a5:ad:ec:97:16:c1:87:
e9:01:d3:df:0d:9e:f1:8e:58:a8:2d:e0:e1:54:14:9a:2a:39:
c8:92:8b:6e:fc:25:cc:c8:67:3e:36:59:74:5d:30:58:9b:b0:
f0:7d:a5:d6:8f:22:3b:f2:e8:0a:d2:a1:68:d3:ad:9d:5e:ac:
4e:a3:04:23:ac:df:a2:c7:b6:88:10:0c:03:4e:63:b3:54:c8:
84:e9:0a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvZzivviH3FDtEI7nqJq6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2YxYTVlYTdkMWQzMGQ1YWM2ZWQ0YjhlYWM4OWIxZWNj
OGY5ZDYwHhcNMjYwOTI5MjMwMTU0WhcNMjYwOTMwMjMwMTU0WjAzMTEwLwYDVQQD
EyhmNDNmNTc3ZTZhNzkwMWM4YTJjODVlMmRhNzA3ZjA3YzFlYTQwN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCbwonpqyQI2LxRFwzhkaiGO2nk3
05ahyoU4QWkxsVR7S5q+Bb8bgyhW9klS31jTIiRlx/GA/1hrMqkosBctNSJBXOFu
K0mpcu6/X6Ze3saIyzcUri0uJhCfHF1XhfTl+4hpA+nBzSfR22a7ZZwUT6/7ITO4
K1Ca17mYdzG5fOWndkIo/+Vx5aU+glGdqKV++dpUtBWLd0BYhhewo12FA7YuOorN
PgRhmxMITzeuU8QBU4/1pZl3df6VLbfj59ahuqhjQLWObTfR8OM5ufHJYvNIdeMp
8qh8BmHANKwi/WwvYzpo4ezYWxZLbSUZAmJWeV5wnRjgJShD6s/ITS7mmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ/V35qeQHIosheLacH8HwepAfwMB8GA1UdIwQY
MBaAFM1/Gl6n0dMNWsbtS46sibHsyPnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85YmY0OTgtOGMzMS00NmVmLTk4NDAt
MzVjMDM1ZmU5ZDQ4LzEvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85YmY0OTgtOGMzMS00NmVmLTk4NDAtMzVjMDM1ZmU5ZDQ4
LzEvelg4YVhxZlIwdzFheHUxTGpxeUpzZXpJLWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiba9//xQ
Us4f2I+LdVo5goO63PxAHm8OQOM0vRYS1Dmb6RPTaegh6aBSmJNiY/eIadS6LBqC
WQe+tlmHjmQcShKB2OZob67XE8y0WFn2uzSxvrHmT2Uy8EFxqCDp/CqiciHKfrWj
gQq3taad3M+XewaVbSsyXw168Tdmz+8mkYjOxw6keVbrdGkGayPWoNKj5K43ZZPC
3K4bx5a7HqU4Qc6/PYDsGMe38ITBbfSlreyXFsGH6QHT3w2e8Y5YqC3g4VQUmio5
yJKLbvwlzMhnPjZZdF0wWJuw8H2l1o8iO/LoCtKhaNOtnV6sTqMEI6zfose2iBAM
A05js1TIhOkKuA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:21:06 2026 by rpki-client