Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: DxjXsZw0gjMcWLV34+UPCotHmRNnXvq7N2IBT0k/bvo=
Subject key identifier: 97:D0:2A:12:E5:0B:5B:38:D0:AB:7A:40:1C:BE:B0:FF:00:DB:6A:AC
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 01A12FC61F605D15A6CB6C0BB8A0B500DCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 11:01:15 +0000
Manifest this update: Mon 12 Oct 2026 11:01:15 +0000
Manifest next update: Tue 13 Oct 2026 11:01:15 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: z8OTc3LMlfw1FCVyEe35pZ/MqGQc308c/epJCxOkSxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:1f:60:5d:15:a6:cb:6c:0b:b8:a0:b5:00:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Oct 12 11:01:15 2026 GMT
Not After : Oct 13 11:01:15 2026 GMT
Subject: CN=97d02a12e50b5b38d0ab7a401cbeb0ff00db6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:84:21:22:2a:2b:20:7a:d6:ed:47:ad:21:
fd:46:12:b3:69:db:45:33:0e:69:e5:60:6a:48:99:
8c:c9:1f:af:fb:78:c9:a8:29:15:49:7d:82:23:76:
d2:4c:68:ef:59:ea:74:b9:ca:d9:2e:61:44:e9:4c:
38:33:05:b0:eb:f5:02:e6:9e:79:46:db:84:44:b5:
0f:62:4a:56:2f:4f:6e:df:eb:90:04:7d:59:85:6e:
f5:f2:f0:c7:a1:c3:52:fa:2c:24:89:ae:26:20:60:
6a:70:db:2c:26:56:c3:5f:da:6b:ab:e7:df:ac:cc:
cc:d8:0d:ec:55:52:1a:2d:29:a7:d1:6f:2e:d9:8c:
47:04:e0:ff:c5:a4:4f:6e:c2:78:c9:2f:23:4b:9e:
58:b8:cf:d7:53:b5:a8:b1:b6:79:cf:64:ba:03:05:
e4:3b:f2:66:be:40:6e:f7:f8:0e:a8:83:4a:b4:89:
0f:db:f4:ec:04:9d:ab:36:9d:86:f4:31:fb:60:e1:
30:25:e6:bf:3d:c1:71:80:99:0f:ef:ed:72:75:14:
29:57:86:39:8d:ba:8c:27:da:9c:cd:03:3f:10:22:
87:57:ee:78:1a:fb:fe:37:52:de:ba:12:e3:4e:8c:
02:63:85:93:d6:bb:5e:65:ad:2c:67:6e:2f:0e:c5:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:2A:12:E5:0B:5B:38:D0:AB:7A:40:1C:BE:B0:FF:00:DB:6A:AC
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:94:88:2f:be:1c:ac:ea:12:12:35:33:97:f4:42:89:78:3b:
11:19:16:76:24:bc:2b:c6:3e:a5:10:a2:af:8c:f4:d1:88:0f:
09:d4:54:25:5c:f9:3b:b9:57:6d:02:eb:d2:00:8d:dd:81:43:
8d:22:de:1b:0d:ce:80:08:0b:46:50:25:3e:4a:70:4c:d8:2f:
99:b6:ea:e0:30:d6:f5:ab:4e:f2:08:a6:45:31:79:ad:44:e3:
71:49:f8:59:d7:01:d1:8e:73:4d:ae:b6:4a:6b:8b:49:59:da:
5c:78:0c:fa:52:6e:82:96:04:2a:d1:7b:46:d0:40:31:03:76:
f8:a3:60:30:46:dc:af:4a:88:22:4c:c2:04:26:51:64:f9:70:
fb:3c:67:23:62:e9:55:2b:cb:0b:99:93:48:1e:ec:cb:f4:88:
e3:f0:e8:35:8b:b1:c9:92:c1:f9:ff:86:24:cc:fd:15:09:b4:
4a:43:79:50:bc:09:04:3f:35:e6:c2:25:82:ce:88:6d:38:ef:
16:ac:24:ad:b6:71:f2:41:73:f5:c6:b7:45:54:1e:3f:c2:55:
0d:03:3a:d1:95:c0:60:08:10:50:85:2d:12:59:e6:b4:40:e5:
cb:ad:3a:fc:be:01:32:22:fa:aa:6f:84:61:0a:46:f7:a2:c8:
03:44:d9:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvxh9gXRWmy2wLuKC1ANyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5
MTJkZTYwHhcNMjYxMDEyMTEwMTE1WhcNMjYxMDEzMTEwMTE1WjAzMTEwLwYDVQQD
Eyg5N2QwMmExMmU1MGI1YjM4ZDBhYjdhNDAxY2JlYjBmZjAwZGI2YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEKEISIqKyB61u1HrSH9RhKzadtF
Mw5p5WBqSJmMyR+v+3jJqCkVSX2CI3bSTGjvWep0ucrZLmFE6Uw4MwWw6/UC5p55
RtuERLUPYkpWL09u3+uQBH1ZhW718vDHocNS+iwkia4mIGBqcNssJlbDX9prq+ff
rMzM2A3sVVIaLSmn0W8u2YxHBOD/xaRPbsJ4yS8jS55YuM/XU7WosbZ5z2S6AwXk
O/JmvkBu9/gOqINKtIkP2/TsBJ2rNp2G9DH7YOEwJea/PcFxgJkP7+1ydRQpV4Y5
jbqMJ9qczQM/ECKHV+54Gvv+N1LeuhLjTowCY4WT1rteZa0sZ24vDsUM4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfQKhLlC1s40Kt6QBy+sP8A22qsMB8GA1UdIwQY
MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt
OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2
LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJSIL74c
rOoSEjUzl/RCiXg7ERkWdiS8K8Y+pRCir4z00YgPCdRUJVz5O7lXbQLr0gCN3YFD
jSLeGw3OgAgLRlAlPkpwTNgvmbbq4DDW9atO8gimRTF5rUTjcUn4WdcB0Y5zTa62
SmuLSVnaXHgM+lJugpYEKtF7RtBAMQN2+KNgMEbcr0qIIkzCBCZRZPlw+zxnI2Lp
VSvLC5mTSB7sy/SI4/DoNYuxyZLB+f+GJMz9FQm0SkN5ULwJBD815sIlgs6IbTjv
FqwkrbZx8kFz9ca3RVQeP8JVDQM60ZXAYAgQUIUtElnmtEDly606/L4BMiL6qm+E
YQpG96LIA0TZfw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 16:36:47 2026 by rpki-client