Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: glME2uM5nKN8l6Op23bWh0B9prl8O4TnWRTNh96KXlw=
Subject key identifier: A5:9E:A3:8B:BE:B8:23:A4:D2:02:72:1E:39:F1:F8:A1:32:5D:75:D1
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 01A08B312D30E6A075561CA60A5284EE6029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 16EF
Signing time: Thu 10 Sep 2026 12:00:50 +0000
Manifest this update: Thu 10 Sep 2026 12:00:50 +0000
Manifest next update: Fri 11 Sep 2026 12:00:50 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: DxBOQRDOEPS3aY/Ibwh/bgha7Pk5s45z2sg7IpScdZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:2d:30:e6:a0:75:56:1c:a6:0a:52:84:ee:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Sep 10 12:00:50 2026 GMT
Not After : Sep 11 12:00:50 2026 GMT
Subject: CN=a59ea38bbeb823a4d202721e39f1f8a1325d75d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:bd:46:15:e1:e8:33:51:67:09:a2:72:08:
f4:b4:46:28:39:eb:e0:b6:c9:05:23:d8:11:73:f1:
17:fb:ec:a3:aa:16:a5:15:09:cb:4e:b9:fb:14:63:
d5:71:c0:f6:9c:91:bc:df:54:7b:77:5a:27:03:75:
b7:e5:ce:3d:45:b6:7b:28:ee:7b:3e:9f:d5:75:7d:
4f:47:e0:ea:8f:cf:56:35:3b:d5:b3:66:40:1e:92:
c1:10:eb:b3:81:d5:07:e2:97:f3:a0:2a:f9:0c:a5:
ad:37:16:04:e9:4e:a5:4b:6e:ea:db:94:32:ee:cd:
43:28:6d:79:80:e1:11:9e:c9:af:18:2d:25:e4:9a:
72:f1:90:3c:6f:a7:0a:d2:91:59:21:f4:21:c5:ca:
9b:e3:e4:2c:91:20:e9:bc:14:e9:c7:c4:b4:ee:e5:
55:ad:87:63:16:4d:c2:a0:2a:b7:56:71:f6:f3:a4:
4b:a9:60:33:f3:cd:c8:3d:51:54:7d:e3:91:de:ca:
6d:ff:fd:2b:af:82:a6:96:b5:ad:20:e5:b1:95:9b:
0e:6a:68:f9:f8:08:1e:8b:47:80:86:a2:20:59:0f:
ea:ed:a5:86:c6:e8:64:d5:4e:f6:05:fe:69:ea:56:
d4:c1:44:7a:4d:5d:10:e2:2b:19:e9:b0:83:b6:fe:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:A3:8B:BE:B8:23:A4:D2:02:72:1E:39:F1:F8:A1:32:5D:75:D1
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:85:69:68:52:d3:9e:7d:1b:12:2e:ab:e3:5c:30:03:96:20:
5c:61:aa:71:dd:7e:10:c0:1a:e9:68:53:20:f2:c7:e6:8b:d4:
d6:da:ae:8d:92:b3:20:d1:9f:31:2e:10:3a:d3:32:ef:60:ae:
02:a1:16:30:9f:a1:20:cf:d7:3c:56:28:f7:69:e3:5e:8b:0f:
2d:d1:9a:40:66:42:17:fe:62:73:c7:54:d5:91:b8:68:db:46:
ea:d2:cc:6c:d3:c8:64:f9:bf:2f:f6:4e:88:9a:23:28:9f:14:
0f:14:fd:09:34:d7:8f:ba:f8:39:a2:5a:ef:a1:3b:d6:54:66:
be:55:e8:8e:f1:32:e4:c7:6c:7e:0f:c3:52:1b:15:cd:17:a0:
2e:4b:f1:07:97:c5:f7:01:90:ea:72:7c:a9:c3:51:a2:70:70:
52:94:02:5a:90:e1:ec:4c:37:8c:8e:bc:a2:48:b3:b2:ca:58:
9c:1d:32:f6:85:f9:d2:a0:9f:be:c4:93:d9:4d:8c:6a:b9:81:
fb:ba:56:9a:5b:77:96:7e:5c:cc:83:5b:1f:4f:fd:26:ed:2e:
6e:64:d0:3b:af:28:e3:e6:1d:f5:98:63:4a:b7:08:21:c1:3a:
3c:3d:01:c5:20:b9:ae:a0:1f:7b:7b:9e:17:a0:13:d2:61:b2:
18:ee:23:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMS0w5qB1VhymClKE7mApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3
OGUyMGMwHhcNMjYwOTEwMTIwMDUwWhcNMjYwOTExMTIwMDUwWjAzMTEwLwYDVQQD
EyhhNTllYTM4YmJlYjgyM2E0ZDIwMjcyMWUzOWYxZjhhMTMyNWQ3NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1W9RhXh6DNRZwmicgj0tEYoOevg
tskFI9gRc/EX++yjqhalFQnLTrn7FGPVccD2nJG831R7d1onA3W35c49RbZ7KO57
Pp/VdX1PR+Dqj89WNTvVs2ZAHpLBEOuzgdUH4pfzoCr5DKWtNxYE6U6lS27q25Qy
7s1DKG15gOERnsmvGC0l5Jpy8ZA8b6cK0pFZIfQhxcqb4+QskSDpvBTpx8S07uVV
rYdjFk3CoCq3VnH286RLqWAz883IPVFUfeOR3spt//0rr4KmlrWtIOWxlZsOamj5
+Agei0eAhqIgWQ/q7aWGxuhk1U72Bf5p6lbUwUR6TV0Q4isZ6bCDtv7KJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWeo4u+uCOk0gJyHjnx+KEyXXXRMB8GA1UdIwQY
MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt
MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1
LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIVpaFLT
nn0bEi6r41wwA5YgXGGqcd1+EMAa6WhTIPLH5ovU1tqujZKzINGfMS4QOtMy72Cu
AqEWMJ+hIM/XPFYo92njXosPLdGaQGZCF/5ic8dU1ZG4aNtG6tLMbNPIZPm/L/ZO
iJojKJ8UDxT9CTTXj7r4OaJa76E71lRmvlXojvEy5Mdsfg/DUhsVzRegLkvxB5fF
9wGQ6nJ8qcNRonBwUpQCWpDh7Ew3jI68okizsspYnB0y9oX50qCfvsST2U2MarmB
+7pWmlt3ln5czINbH0/9Ju0ubmTQO68o4+Yd9ZhjSrcIIcE6PD0BxSC5rqAfe3ue
F6AT0mGyGO4jFg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:15 2026 by rpki-client