Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: AeVu62fBVIGFdflHdY3RwD/T6XiagM4A17wm9hJIRNU=
Subject key identifier: 60:32:0F:EF:BB:E4:65:D2:47:60:63:53:7B:77:7C:53:72:F9:AC:95
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 01A08BD5C58E8A2323BA5883C7EC7E6CF11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 021B
Signing time: Thu 10 Sep 2026 15:00:37 +0000
Manifest this update: Thu 10 Sep 2026 15:00:37 +0000
Manifest next update: Fri 11 Sep 2026 15:00:37 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: Ozmu+gqVo/VQXlOuIZ9e2L7BQlUjXfFzWG0uyE9Nm4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c5:8e:8a:23:23:ba:58:83:c7:ec:7e:6c:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Sep 10 15:00:37 2026 GMT
Not After : Sep 11 15:00:37 2026 GMT
Subject: CN=60320fefbbe465d2476063537b777c5372f9ac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:6c:76:42:32:24:7b:ed:94:55:1c:fb:dd:
fc:03:7e:d4:62:be:d7:ac:a7:a7:a6:8a:2a:13:9e:
b5:f5:16:a3:7e:9b:e3:2f:28:aa:f8:50:e9:42:d2:
6c:80:88:64:57:56:84:36:fe:e8:67:92:88:a4:2c:
3b:a8:41:eb:71:0d:48:39:7f:d7:0f:0f:bb:e2:21:
19:11:7a:63:ff:b3:7a:94:a6:44:bf:ee:28:25:fd:
28:df:e1:63:de:68:59:11:13:d8:ec:d9:ef:0e:27:
ad:d3:60:37:29:19:2b:5f:4d:0c:f1:c6:7c:a9:db:
47:8a:db:31:6c:48:c8:bc:64:de:1c:25:56:65:bd:
f9:a2:3e:33:22:39:9c:e8:da:37:c4:8a:f8:ee:3c:
04:4f:02:57:ab:c3:a6:12:6d:08:26:4f:92:8d:a0:
d3:01:70:50:6a:c7:b4:a9:23:0b:89:c3:a4:3a:2e:
86:43:4c:3a:04:e0:49:40:02:8e:c5:eb:35:0f:97:
b1:bb:b1:37:bc:99:fb:54:13:86:7a:1f:d1:4a:2c:
45:a3:d8:8d:20:cf:f8:84:24:76:8d:42:18:3d:fa:
49:76:82:aa:d2:d6:0d:81:7e:88:a2:d1:b5:1d:84:
ea:eb:b1:b1:be:ce:a5:76:1a:3a:80:34:7d:68:42:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:0F:EF:BB:E4:65:D2:47:60:63:53:7B:77:7C:53:72:F9:AC:95
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:77:dd:e5:e0:25:02:8d:e2:23:9a:95:bc:4c:50:d4:23:
d2:27:70:92:a7:ae:c2:f5:bb:62:e3:77:08:d0:20:dc:b5:3e:
12:ad:f6:d5:4a:94:8d:e8:49:4e:8d:d5:a7:29:25:5b:e3:58:
98:28:19:1e:e7:bd:65:45:e9:55:a4:f3:ac:9d:cf:34:55:7d:
0b:30:2e:c1:e4:0f:2f:a1:67:8a:96:1f:1b:81:3c:99:6c:23:
70:3d:e7:e8:bb:7b:2e:fb:be:60:2c:2f:16:02:f8:36:d2:33:
27:7f:f4:10:54:bd:22:27:41:b1:a8:df:d2:79:a0:be:21:91:
f7:c6:b6:92:77:90:45:4c:72:0d:dd:65:5a:7b:04:f4:47:c3:
0e:26:18:22:91:74:d5:f9:b4:03:81:9a:a4:c8:5a:b0:9a:52:
34:71:68:44:c0:8b:4a:a5:67:67:a1:16:15:91:e8:46:1b:b6:
83:ed:ec:b4:de:ac:59:57:f0:97:0a:9d:61:9c:99:bc:49:6d:
84:49:99:c6:d5:0d:be:6f:c8:86:9a:11:4c:9c:96:83:bb:d8:
3e:a9:ca:51:98:45:d9:15:ad:a6:47:bf:5a:0b:6e:9f:99:7f:
11:d3:32:00:66:e2:04:e9:69:01:03:ad:02:b1:72:f5:e4:1d:
05:d6:1f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1cWOiiMjuliDx+x+bPEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDJkNDc5NGU1YmJhYzBlMzRjOWQwMTg5YjI2ZWYxNDcx
NThhMjMwHhcNMjYwOTEwMTUwMDM3WhcNMjYwOTExMTUwMDM3WjAzMTEwLwYDVQQD
Eyg2MDMyMGZlZmJiZTQ2NWQyNDc2MDYzNTM3Yjc3N2M1MzcyZjlhYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YVsdkIyJHvtlFUc+938A37UYr7X
rKenpooqE5619RajfpvjLyiq+FDpQtJsgIhkV1aENv7oZ5KIpCw7qEHrcQ1IOX/X
Dw+74iEZEXpj/7N6lKZEv+4oJf0o3+Fj3mhZERPY7NnvDiet02A3KRkrX00M8cZ8
qdtHitsxbEjIvGTeHCVWZb35oj4zIjmc6No3xIr47jwETwJXq8OmEm0IJk+SjaDT
AXBQase0qSMLicOkOi6GQ0w6BOBJQAKOxes1D5exu7E3vJn7VBOGeh/RSixFo9iN
IM/4hCR2jUIYPfpJdoKq0tYNgX6IotG1HYTq67Gxvs6ldho6gDR9aEIytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAyD++75GXSR2BjU3t3fFNy+ayVMB8GA1UdIwQY
MBaAFM/S1HlOW7rA40ydAYmybvFHFYojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYt
ZjkwYjNlNTQ5M2Q0LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYtZjkwYjNlNTQ5M2Q0
LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9133eXg
JQKN4iOalbxMUNQj0idwkqeuwvW7YuN3CNAg3LU+Eq321UqUjehJTo3VpyklW+NY
mCgZHue9ZUXpVaTzrJ3PNFV9CzAuweQPL6FnipYfG4E8mWwjcD3n6Lt7Lvu+YCwv
FgL4NtIzJ3/0EFS9IidBsajf0nmgviGR98a2kneQRUxyDd1lWnsE9EfDDiYYIpF0
1fm0A4GapMhasJpSNHFoRMCLSqVnZ6EWFZHoRhu2g+3stN6sWVfwlwqdYZyZvElt
hEmZxtUNvm/IhpoRTJyWg7vYPqnKUZhF2RWtpke/Wgtun5l/EdMyAGbiBOlpAQOt
ArFy9eQdBdYfaw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:01 2026 by rpki-client