Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: 1wCLtMBznIYjQvYU1pMShf7vfIetd85Tuicqgl3viR0=
Subject key identifier: 99:FB:3F:B3:42:49:D1:29:73:47:38:5C:4C:8B:E2:89:AF:63:A3:2D
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A08F7BF0817F60E5F736EC389921B9C53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: A2
Signing time: Fri 11 Sep 2026 08:00:59 +0000
Manifest this update: Fri 11 Sep 2026 08:00:59 +0000
Manifest next update: Sat 12 Sep 2026 08:00:59 +0000
Files and hashes: 1: MoIvUz5lwZlbNrx3nyA_TUl_A00.roa (hash: FOMLayHG7KjKY5RaWNXk9EZf9JkS/3bo0DSwODGb+Ak=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: 2wMXwR5I9AtlzTgCdCsczxTB/e9B7E4SxFm48xElprI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7b:f0:81:7f:60:e5:f7:36:ec:38:99:21:b9:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Sep 11 08:00:59 2026 GMT
Not After : Sep 12 08:00:59 2026 GMT
Subject: CN=99fb3fb34249d1297347385c4c8be289af63a32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:c7:9a:55:77:f8:7a:92:51:7d:49:ce:7e:
d0:89:6d:c7:40:8a:24:ee:27:32:40:6c:9d:97:2e:
14:41:43:e6:d4:4e:2d:e4:1e:aa:2b:6a:25:81:7c:
d7:ac:c2:2e:f6:90:8e:94:54:67:91:1f:94:b0:f5:
c3:6f:a7:6b:2a:ea:f9:16:48:31:97:10:e2:c2:f3:
bf:85:56:a4:80:39:8d:37:2f:4b:ed:7f:ca:10:a2:
49:51:b0:31:ef:2c:eb:89:9e:b7:f3:2e:6d:73:3d:
13:90:61:94:e0:0c:ca:c2:db:28:37:c8:4d:8f:0e:
51:5c:6a:d6:96:31:97:61:2c:90:d6:9a:26:4c:98:
ba:cb:78:3b:b5:b1:67:1a:a8:85:7c:07:63:2a:39:
a0:b9:e2:da:bc:cf:18:66:bc:b6:99:2a:32:ec:79:
4c:8e:87:87:06:07:51:01:c5:2c:d6:e7:86:c6:4c:
12:d4:6a:c8:83:d0:35:b5:1d:a5:28:7e:49:22:d6:
b8:3f:ca:e4:3c:3e:ce:d0:b2:a0:01:0c:6f:42:48:
1f:f8:a4:f8:c2:73:2e:11:a7:b7:53:27:4f:19:65:
24:0b:a9:0f:ac:f1:00:13:77:d0:6f:8e:e5:7a:1f:
35:59:82:c3:bc:d0:dd:48:ae:32:4e:c1:01:d5:b4:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:3F:B3:42:49:D1:29:73:47:38:5C:4C:8B:E2:89:AF:63:A3:2D
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:96:d7:20:3c:c9:6f:4a:54:88:cd:47:79:18:86:48:9a:92:
7a:b7:12:25:6e:46:9a:63:93:99:b0:2c:69:fe:f9:cb:db:7f:
27:aa:5e:e8:03:fe:d8:23:6e:b0:05:32:3c:43:38:0c:43:6f:
91:97:1b:ce:c9:4f:df:ab:fd:ba:7e:8d:86:bc:f9:16:5d:98:
32:84:94:b7:cc:de:a1:af:d4:70:56:f7:9d:f7:00:5b:75:3e:
90:8d:5a:c0:6c:59:fa:57:08:89:1d:25:b0:d6:49:46:87:12:
43:5d:54:31:44:29:d1:a4:c7:21:ed:74:75:47:1c:b0:de:8c:
01:77:a4:67:1b:3a:29:94:be:f1:87:72:6e:26:ae:3f:b5:23:
20:4d:b7:c9:f1:9b:95:b4:88:2f:f1:65:66:d7:dd:f0:88:6a:
30:22:2e:87:3d:93:69:94:ce:3e:78:2d:d6:ae:63:44:6e:41:
df:4d:6f:36:7f:3b:da:b0:13:c1:8b:ce:1d:dc:2e:f8:80:a6:
f4:22:e6:32:34:34:cf:c6:15:ae:f1:b4:9c:51:8a:09:17:08:
e8:39:8d:92:f0:78:76:62:68:a1:01:66:e4:91:fb:2f:58:c2:
f0:de:1e:3a:d7:de:5c:46:36:a1:3a:7f:4d:29:9e:d3:c5:20:
f3:09:24:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPe/CBf2Dl9zbsOJkhucU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzgyZDI4NzJiOWU3YTEwYTkxYTI3ZjMwNzAyMGRhOTQ4
NDQ4MjcwHhcNMjYwOTExMDgwMDU5WhcNMjYwOTEyMDgwMDU5WjAzMTEwLwYDVQQD
Eyg5OWZiM2ZiMzQyNDlkMTI5NzM0NzM4NWM0YzhiZTI4OWFmNjNhMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmznHmlV3+HqSUX1Jzn7QiW3HQIok
7icyQGydly4UQUPm1E4t5B6qK2olgXzXrMIu9pCOlFRnkR+UsPXDb6drKur5Fkgx
lxDiwvO/hVakgDmNNy9L7X/KEKJJUbAx7yzriZ638y5tcz0TkGGU4AzKwtsoN8hN
jw5RXGrWljGXYSyQ1pomTJi6y3g7tbFnGqiFfAdjKjmgueLavM8YZry2mSoy7HlM
joeHBgdRAcUs1ueGxkwS1GrIg9A1tR2lKH5JIta4P8rkPD7O0LKgAQxvQkgf+KT4
wnMuEae3UydPGWUkC6kPrPEAE3fQb47leh81WYLDvNDdSK4yTsEB1bSyYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn7P7NCSdEpc0c4XEyL4omvY6MtMB8GA1UdIwQY
MBaAFM94LShyueehCpGifzBwINqUhEgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzIt
NTRmNzQ1M2YxMDMzLzEvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzItNTRmNzQ1M2YxMDMz
LzEvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZbXIDzJ
b0pUiM1HeRiGSJqSercSJW5GmmOTmbAsaf75y9t/J6pe6AP+2CNusAUyPEM4DENv
kZcbzslP36v9un6Nhrz5Fl2YMoSUt8zeoa/UcFb3nfcAW3U+kI1awGxZ+lcIiR0l
sNZJRocSQ11UMUQp0aTHIe10dUccsN6MAXekZxs6KZS+8YdybiauP7UjIE23yfGb
lbSIL/FlZtfd8IhqMCIuhz2TaZTOPngt1q5jRG5B301vNn872rATwYvOHdwu+ICm
9CLmMjQ0z8YVrvG0nFGKCRcI6DmNkvB4dmJooQFm5JH7L1jC8N4eOtfeXEY2oTp/
TSme08Ug8wkkmg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:50:21 2026 by rpki-client