Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: PGj/zup4h3N0WIyQ5dD1qhoOlcPdtVyxdxVETx/44kw=
Subject key identifier: F8:08:B2:88:EF:FF:A4:86:DC:60:7C:54:CF:18:A6:2D:DD:05:AC:A8
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 01A03C713AA603DE2EA56DF6D0896BBE0572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 100D
Signing time: Wed 26 Aug 2026 05:00:48 +0000
Manifest this update: Wed 26 Aug 2026 05:00:48 +0000
Manifest next update: Thu 27 Aug 2026 05:00:48 +0000
Files and hashes: 1: pKievJotd0Vwu1YJE0cQcf-DltY.roa (hash: h+T203a1jd44mMy05CeC2wpUpgb3MOkiNaLP9bVt08U=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: qCCNzOYaJnaT+u9Oavi54DxuAUr0fG821B1g9IlbIa0=)
3: zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa (hash: s24/aX3H/IMCq17F9HBTclHDEpfjAqO3H7tgCV+Qz94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:3a:a6:03:de:2e:a5:6d:f6:d0:89:6b:be:05:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Aug 26 05:00:48 2026 GMT
Not After : Aug 27 05:00:48 2026 GMT
Subject: CN=f808b288efffa486dc607c54cf18a62ddd05aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:ac:21:47:d7:c1:9d:85:c8:e3:7b:8d:a7:
ed:e8:1d:08:39:fb:ef:ea:bf:4a:aa:54:76:78:d7:
91:20:27:78:3d:55:c5:c8:12:6e:a5:2a:4d:79:fa:
3f:0b:87:65:45:d0:a2:8f:47:66:e9:27:58:94:49:
e9:e1:e5:b4:45:91:1b:64:28:ea:4a:43:34:2f:ee:
0b:e3:38:62:99:1a:73:74:71:b4:f0:c5:24:9f:ca:
c5:b7:56:00:9c:3c:ff:60:e5:f4:51:62:6a:29:c1:
e1:64:04:f1:17:18:7a:44:e5:73:0e:a9:06:87:41:
a5:9e:c3:90:3c:00:db:58:e5:37:aa:eb:df:12:64:
a5:85:6f:d1:e5:de:35:07:1e:0d:e1:50:e1:04:42:
ee:48:68:56:d9:a0:a8:29:9d:c9:f7:9d:47:86:7c:
2d:32:11:a0:c7:7d:ec:a9:be:31:87:43:96:cc:f2:
1e:8d:fc:2d:60:79:77:be:69:a0:96:4d:67:60:fd:
d3:da:b9:a0:20:57:a3:24:1a:20:e6:e3:56:ef:ab:
84:e3:d4:2b:a9:50:58:74:40:8e:2c:bd:6e:a0:1a:
02:6c:cc:0f:80:b6:cc:19:fa:c5:cd:36:26:f9:bd:
bd:5e:cc:48:93:ab:8b:b2:85:b1:2c:bc:a0:fb:a2:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:B2:88:EF:FF:A4:86:DC:60:7C:54:CF:18:A6:2D:DD:05:AC:A8
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5c:dc:30:c5:d3:7d:a8:55:1d:19:a6:b9:22:0b:19:44:ee:
67:2c:56:e7:d4:a5:14:e0:36:4c:d0:6a:2d:d9:09:93:c8:de:
c9:bb:d4:dd:ad:b6:8c:e2:0b:b3:50:19:68:e7:d4:fb:c6:f9:
c9:3b:7a:4f:3e:36:b2:9c:a8:25:56:0d:c0:cd:af:17:df:4f:
65:79:cd:d1:d2:f2:c9:dd:dd:76:ed:d3:39:da:62:b0:5b:59:
d5:21:12:b7:30:83:fe:07:c5:61:25:65:c7:5e:3f:34:c7:a7:
58:12:04:fd:6f:c0:97:9d:86:c7:94:6f:41:43:30:1a:c9:ee:
e7:33:a2:3d:b5:46:25:35:ed:cd:8a:4a:a2:42:48:b5:05:1e:
1a:28:cc:df:1b:c9:c5:d9:3b:66:29:34:3a:83:6d:a3:4e:14:
04:85:d0:d6:50:0a:cb:db:ef:8a:1d:0f:f2:a3:44:1a:ca:5d:
64:ed:9e:9a:8a:a1:d0:8f:e4:e5:85:0a:69:f8:34:0c:82:4d:
da:78:f7:9a:42:83:b0:6b:a5:a5:f9:47:09:b5:c2:e8:85:b8:
bb:f8:30:c4:d7:33:e7:ea:f0:a3:0e:50:19:82:ea:30:77:e8:
a9:77:59:4b:bb:3c:75:4f:26:23:89:64:c7:e6:09:1d:f4:db:
02:a2:2b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8cTqmA94upW320IlrvgVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjg0M2NlMTUyMjlhODAyM2Q5N2ZhMjdhMzdlNTkyNzhi
MmJmZDcwHhcNMjYwODI2MDUwMDQ4WhcNMjYwODI3MDUwMDQ4WjAzMTEwLwYDVQQD
EyhmODA4YjI4OGVmZmZhNDg2ZGM2MDdjNTRjZjE4YTYyZGRkMDVhY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaGsIUfXwZ2FyON7jaft6B0IOfvv
6r9KqlR2eNeRICd4PVXFyBJupSpNefo/C4dlRdCij0dm6SdYlEnp4eW0RZEbZCjq
SkM0L+4L4zhimRpzdHG08MUkn8rFt1YAnDz/YOX0UWJqKcHhZATxFxh6ROVzDqkG
h0GlnsOQPADbWOU3quvfEmSlhW/R5d41Bx4N4VDhBELuSGhW2aCoKZ3J951Hhnwt
MhGgx33sqb4xh0OWzPIejfwtYHl3vmmglk1nYP3T2rmgIFejJBog5uNW76uE49Qr
qVBYdECOLL1uoBoCbMwPgLbMGfrFzTYm+b29XsxIk6uLsoWxLLyg+6LbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgIsojv/6SG3GB8VM8Ypi3dBayoMB8GA1UdIwQY
MBaAFM9oQ84VIpqAI9l/ono35ZJ4sr/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2Mt
NjRjZDE5NGY3ZjRmLzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2MtNjRjZDE5NGY3ZjRm
LzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1zcMMXT
fahVHRmmuSILGUTuZyxW59SlFOA2TNBqLdkJk8jeybvU3a22jOILs1AZaOfU+8b5
yTt6Tz42spyoJVYNwM2vF99PZXnN0dLyyd3ddu3TOdpisFtZ1SEStzCD/gfFYSVl
x14/NMenWBIE/W/Al52Gx5RvQUMwGsnu5zOiPbVGJTXtzYpKokJItQUeGijM3xvJ
xdk7Zik0OoNto04UBIXQ1lAKy9vvih0P8qNEGspdZO2emoqh0I/k5YUKafg0DIJN
2nj3mkKDsGulpflHCbXC6IW4u/gwxNcz5+rwow5QGYLqMHfoqXdZS7s8dU8mI4lk
x+YJHfTbAqIrBA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:47 2026 by rpki-client