
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier: BRDNdN9cDauZMchJE56GF1JEsgxp49lYEwcMcoj0EAg=
Subject key identifier: 7D:F0:B3:0F:FF:10:35:B2:8C:B0:04:58:6B:D9:BF:3E:B1:5E:76:A1
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 019E20FF399B269B4773B474B1FC1636A75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number: 191B
Signing time: Wed 13 May 2026 11:00:57 +0000
Manifest this update: Wed 13 May 2026 11:00:57 +0000
Manifest next update: Thu 14 May 2026 11:00:57 +0000
Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
4: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
5: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
6: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
7: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
8: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
9: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
10: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
11: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: QK9Pg9sCjj6g932P8vAr1xal403dhbmR7ldkL7E3Np0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:39:9b:26:9b:47:73:b4:74:b1:fc:16:36:a7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: May 13 11:00:57 2026 GMT
Not After : May 14 11:00:57 2026 GMT
Subject: CN=7df0b30fff1035b28cb004586bd9bf3eb15e76a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:52:65:25:56:6d:24:33:03:f8:a7:d2:0d:
95:14:4e:12:80:30:e5:b8:a4:a3:98:6a:bf:78:74:
39:8a:61:62:6d:9f:04:cd:1d:19:6b:59:c1:f8:62:
2c:6e:33:1b:d9:3d:1d:d5:8b:96:9b:c4:81:7d:4f:
29:47:63:3d:50:97:0f:1c:9c:8a:92:1d:81:59:d4:
f8:01:4d:b9:20:ae:ec:26:78:00:08:71:83:1e:eb:
cf:9b:54:81:ec:c3:62:b8:7a:b9:67:9f:12:35:74:
f0:ac:25:c6:14:c2:b5:be:ca:23:74:5d:a1:05:a1:
4a:a4:6b:16:83:12:31:86:a1:36:10:df:07:1f:73:
86:4a:b5:76:e8:f0:43:f8:1a:a7:ac:2c:45:b5:82:
f7:29:bb:a4:e7:8f:77:18:12:d6:d4:70:42:e5:0a:
f5:71:85:a7:02:dc:cd:0e:ee:79:9c:b2:82:0b:ad:
16:43:fb:07:08:29:0c:e6:90:a5:ee:31:83:e0:28:
18:1a:90:a9:a3:76:a1:36:f5:11:83:bb:5f:a6:5f:
c5:ae:7b:77:2f:d6:93:73:d5:4b:76:94:82:3c:90:
05:82:bf:91:03:85:48:da:3b:33:6d:01:c0:d7:5e:
f0:2c:75:26:63:f9:ce:dc:11:3d:cc:20:73:82:df:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:B3:0F:FF:10:35:B2:8C:B0:04:58:6B:D9:BF:3E:B1:5E:76:A1
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8f:0b:c9:07:f9:29:c5:5b:fe:d8:29:a5:df:50:bd:16:da:
a6:c6:aa:3c:97:d8:4a:69:c0:bf:a4:76:15:54:b4:6d:13:a3:
ed:a0:0e:69:a9:72:24:75:e4:79:3c:9b:a8:72:cc:42:22:0b:
f2:09:bf:eb:86:44:b8:36:a9:85:e6:ab:5f:f3:8e:e4:df:8c:
c5:02:b3:b2:0c:fc:95:1f:d4:82:5e:dd:29:86:d9:c3:dc:85:
90:a8:fd:d3:37:c9:72:ec:45:ae:2b:7c:f5:72:74:1e:2d:c7:
c2:ee:5e:12:f0:33:d9:b8:32:b0:09:5c:5e:72:f2:3b:c4:1b:
e5:eb:97:a1:ef:c2:f1:80:56:ac:0b:6c:a5:f6:72:7d:ce:8f:
e6:eb:b1:03:3b:bd:28:3b:c1:a4:58:42:4f:9a:7a:4f:8d:24:
e3:bb:83:56:e1:5f:3e:c8:14:cd:c5:88:24:22:f6:ea:a6:90:
46:1a:a2:6c:1d:28:b3:bc:ad:d3:b3:d0:29:e1:bd:1e:0f:fa:
f7:5e:c4:ed:95:07:16:52:1a:f6:51:8b:75:a6:1d:44:e2:64:
88:f2:4d:45:65:12:51:f6:e0:91:b9:ee:42:66:d9:08:c9:80:
cc:de:6d:e5:31:e8:c8:cd:ea:a5:3f:4d:46:e7:4e:2e:48:df:
1f:86:8f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/zmbJptHc7R0sfwWNqdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1
NTI2ZmEwHhcNMjYwNTEzMTEwMDU3WhcNMjYwNTE0MTEwMDU3WjAzMTEwLwYDVQQD
Eyg3ZGYwYjMwZmZmMTAzNWIyOGNiMDA0NTg2YmQ5YmYzZWIxNWU3NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEFSZSVWbSQzA/in0g2VFE4SgDDl
uKSjmGq/eHQ5imFibZ8EzR0Za1nB+GIsbjMb2T0d1YuWm8SBfU8pR2M9UJcPHJyK
kh2BWdT4AU25IK7sJngACHGDHuvPm1SB7MNiuHq5Z58SNXTwrCXGFMK1vsojdF2h
BaFKpGsWgxIxhqE2EN8HH3OGSrV26PBD+BqnrCxFtYL3Kbuk5493GBLW1HBC5Qr1
cYWnAtzNDu55nLKCC60WQ/sHCCkM5pCl7jGD4CgYGpCpo3ahNvURg7tfpl/Frnt3
L9aTc9VLdpSCPJAFgr+RA4VI2jszbQHA117wLHUmY/nO3BE9zCBzgt/FgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3wsw//EDWyjLAEWGvZvz6xXnahMB8GA1UdIwQY
MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct
NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1
LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA048LyQf5
KcVb/tgppd9QvRbapsaqPJfYSmnAv6R2FVS0bROj7aAOaalyJHXkeTybqHLMQiIL
8gm/64ZEuDaphearX/OO5N+MxQKzsgz8lR/Ugl7dKYbZw9yFkKj90zfJcuxFrit8
9XJ0Hi3Hwu5eEvAz2bgysAlcXnLyO8Qb5euXoe/C8YBWrAtspfZyfc6P5uuxAzu9
KDvBpFhCT5p6T40k47uDVuFfPsgUzcWIJCL26qaQRhqibB0os7yt07PQKeG9Hg/6
917E7ZUHFlIa9lGLdaYdROJkiPJNRWUSUfbgkbnuQmbZCMmAzN5t5THoyM3qpT9N
RudOLkjfH4aPxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:11:22 2026 by rpki-client