Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: CmrQ6bjyOdMqimv1xTozUxTnovyaO+FkD2QnY1Hc9bo=
Subject key identifier: 7E:51:02:4D:B6:02:9A:60:AD:08:EB:F2:4B:41:DC:28:E2:CA:09:5B
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 01A0897A1608DB440C845AF07634C7016F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 1131
Signing time: Thu 10 Sep 2026 04:01:14 +0000
Manifest this update: Thu 10 Sep 2026 04:01:14 +0000
Manifest next update: Fri 11 Sep 2026 04:01:14 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: ZLU9bxb6xWkpDRBjWlK2Ar3PeGDKcSPeweGNJF8P0FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:16:08:db:44:0c:84:5a:f0:76:34:c7:01:6f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Sep 10 04:01:14 2026 GMT
Not After : Sep 11 04:01:14 2026 GMT
Subject: CN=7e51024db6029a60ad08ebf24b41dc28e2ca095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:e4:40:28:4b:78:67:7c:eb:ca:2d:de:ae:
79:b4:c8:db:69:88:c5:f5:ea:99:08:1f:6a:43:98:
dd:c1:a7:44:fc:46:12:56:6c:19:1a:e2:b6:b1:d4:
5b:b4:7a:77:d7:9c:aa:1c:e9:4e:4a:54:dd:9e:45:
03:e2:d9:5b:7f:24:84:38:00:27:7d:4e:ee:98:e5:
68:bd:fa:0a:96:d9:e5:f6:7d:07:97:3e:2c:dd:b6:
0c:22:87:ec:14:15:2e:0e:60:b0:39:35:49:a2:d8:
40:d9:e4:13:dc:fe:c7:48:fc:e2:5c:6a:9c:20:e7:
40:ff:9f:15:cb:c1:84:18:00:77:8d:44:73:03:b7:
83:42:f5:c8:42:56:38:29:6b:33:d6:b2:d7:4c:5b:
d8:1e:df:dc:25:22:11:b1:9c:df:ab:be:47:75:06:
d4:28:13:38:be:8a:35:96:e9:ae:5a:10:93:82:0e:
4a:f8:ec:0f:fc:1f:e8:b0:f8:2c:c9:5c:50:bc:57:
13:e2:92:3d:05:f3:ed:22:54:4e:80:60:f3:7b:a4:
8f:01:27:09:1f:0f:c8:d7:27:d7:75:60:31:b2:d3:
a3:e3:30:c2:23:0b:46:bc:43:6a:ea:79:ac:12:2f:
ab:b9:ba:e7:aa:11:91:2d:06:b3:06:f6:8b:52:6d:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:02:4D:B6:02:9A:60:AD:08:EB:F2:4B:41:DC:28:E2:CA:09:5B
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:3d:cd:08:e8:b0:e0:dc:eb:de:55:32:a4:8b:3d:8c:29:
2d:75:fb:c9:bb:0d:35:4e:6c:d9:4b:b3:bf:5b:30:31:84:ff:
b1:d8:fc:c8:20:da:e8:64:2b:c6:be:0e:33:05:dc:96:48:aa:
59:89:79:6d:6c:d7:09:06:14:9b:44:c7:78:e2:3b:db:d8:f3:
27:21:74:fd:80:e8:d3:37:5e:b9:c7:bc:8b:90:45:6a:d8:48:
4b:8a:b5:e0:81:ba:24:e3:2b:d9:04:7d:4a:50:9c:20:a1:50:
fc:90:6f:2f:1f:70:4c:54:2b:0e:2f:2d:77:1e:d3:29:cd:3c:
fe:8b:3c:e6:04:85:4c:fa:2b:71:e3:c1:95:a3:a1:a6:da:98:
e7:ee:30:ee:0a:7a:77:ce:7a:8f:5a:24:fc:4f:a3:c7:22:27:
c6:91:88:72:7d:88:8e:dc:2e:a3:12:91:e3:ce:45:a9:19:e8:
71:60:15:0f:f7:53:21:fe:2c:de:43:81:b9:25:f8:bd:f7:86:
7d:ca:db:b7:7a:11:6e:5a:bd:27:fb:15:10:32:51:98:db:a9:
d3:e0:92:dd:1a:12:24:36:aa:36:84:ca:c8:dd:d9:b4:26:ac:
c1:2b:85:d7:33:54:9d:34:30:3c:13:03:9d:d4:47:91:64:f3:
9e:86:cf:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJehYI20QMhFrwdjTHAW9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1
ZTEwYzIwHhcNMjYwOTEwMDQwMTE0WhcNMjYwOTExMDQwMTE0WjAzMTEwLwYDVQQD
Eyg3ZTUxMDI0ZGI2MDI5YTYwYWQwOGViZjI0YjQxZGMyOGUyY2EwOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3kQChLeGd868ot3q55tMjbaYjF
9eqZCB9qQ5jdwadE/EYSVmwZGuK2sdRbtHp315yqHOlOSlTdnkUD4tlbfySEOAAn
fU7umOVovfoKltnl9n0Hlz4s3bYMIofsFBUuDmCwOTVJothA2eQT3P7HSPziXGqc
IOdA/58Vy8GEGAB3jURzA7eDQvXIQlY4KWsz1rLXTFvYHt/cJSIRsZzfq75HdQbU
KBM4voo1lumuWhCTgg5K+OwP/B/osPgsyVxQvFcT4pI9BfPtIlROgGDze6SPAScJ
Hw/I1yfXdWAxstOj4zDCIwtGvENq6nmsEi+rubrnqhGRLQazBvaLUm281QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5RAk22AppgrQjr8ktB3CjiyglbMB8GA1UdIwQY
MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt
NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl
LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBs9zQjo
sODc695VMqSLPYwpLXX7ybsNNU5s2Uuzv1swMYT/sdj8yCDa6GQrxr4OMwXclkiq
WYl5bWzXCQYUm0THeOI729jzJyF0/YDo0zdeuce8i5BFathIS4q14IG6JOMr2QR9
SlCcIKFQ/JBvLx9wTFQrDi8tdx7TKc08/os85gSFTPorcePBlaOhptqY5+4w7gp6
d856j1ok/E+jxyInxpGIcn2IjtwuoxKR485FqRnocWAVD/dTIf4s3kOBuSX4vfeG
fcrbt3oRblq9J/sVEDJRmNup0+CS3RoSJDaqNoTKyN3ZtCaswSuF1zNUnTQwPBMD
ndRHkWTznobPxg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:45 2026 by rpki-client