Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: Cel0jITQoru1sLEM+CUmb9gNyrVCax9bXgoLBiB00vE=
Subject key identifier: 51:33:68:DF:5F:35:68:DC:4D:1B:00:AF:7B:DB:F0:66:38:E5:39:BE
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 01A08942FA28D2B0C81977E42BB746E33814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 03:01:02 +0000
Manifest this update: Thu 10 Sep 2026 03:01:02 +0000
Manifest next update: Fri 11 Sep 2026 03:01:02 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: VTEZAxnsbH/bm/chq380A9cvdSz+kTplwtQxxksja1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:fa:28:d2:b0:c8:19:77:e4:2b:b7:46:e3:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Sep 10 03:01:02 2026 GMT
Not After : Sep 11 03:01:02 2026 GMT
Subject: CN=513368df5f3568dc4d1b00af7bdbf06638e539be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:f1:fe:6e:f1:d1:6a:c0:d8:27:e8:fe:28:
5a:4a:80:75:49:23:bb:7b:4d:40:11:c7:0b:e6:dd:
75:e3:cc:49:4c:45:26:a6:d6:9e:50:91:00:89:fd:
98:df:a6:69:1a:e8:1e:2d:c5:40:4d:b2:f8:1d:db:
75:46:36:1c:15:13:43:4b:dc:d1:58:2b:52:cf:c5:
33:e8:77:86:07:48:75:6f:4e:63:35:8f:32:4e:e4:
c4:fb:9d:54:ac:7a:74:f3:07:bc:4d:ab:42:e3:55:
e3:b1:98:7b:40:a3:a1:19:ab:25:78:99:08:b3:48:
1c:db:4d:66:64:05:1a:e7:c6:b2:d6:63:32:f5:28:
6b:c5:36:b4:c3:48:3e:e8:33:eb:16:77:24:9b:07:
0e:78:59:2b:dc:0d:6f:2d:cf:0f:05:39:0e:23:9f:
34:54:09:be:3e:cb:37:5a:b8:11:8d:c3:9f:e3:bc:
b1:22:ad:a7:74:26:48:c8:6e:72:cd:3e:f5:aa:db:
d1:41:a0:09:38:9b:09:75:f9:16:63:dd:fe:ae:c1:
64:bb:66:72:8a:c4:00:29:c6:a4:ca:67:52:73:93:
b0:b5:05:6c:e6:67:a5:c1:24:a0:4a:6e:ab:d6:6c:
c1:c4:10:34:8c:b4:9f:54:e8:95:b2:41:59:81:00:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:68:DF:5F:35:68:DC:4D:1B:00:AF:7B:DB:F0:66:38:E5:39:BE
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:1d:66:19:b9:c7:c9:3a:e7:5a:59:41:65:d3:d0:42:69:
93:d9:1a:44:f3:c6:17:75:f4:eb:03:2b:a8:37:83:98:ce:90:
ec:c9:2a:a3:e4:84:eb:c4:b2:76:2c:06:eb:c7:f1:a5:4b:8b:
8e:40:94:29:cb:85:0a:98:a1:d7:07:c4:12:19:83:2c:89:87:
ff:94:77:cd:f8:bb:ab:35:07:ad:d5:b6:63:62:f6:f1:19:4f:
c6:19:e1:2a:10:32:a6:99:8b:ab:89:c5:af:67:64:a6:38:24:
32:b4:19:be:b1:7a:b3:6c:c9:0d:7c:86:c6:56:c1:57:66:19:
3b:fc:18:9c:80:f5:d3:25:e0:45:0a:59:cb:a3:2e:de:3f:a3:
0e:31:63:5c:7d:2b:d0:fb:69:6d:d2:49:12:5d:41:f0:9a:1e:
0e:3a:c0:66:1d:45:b5:a2:c5:dc:81:0c:a9:f5:7c:fd:b4:5d:
4b:9c:bd:c7:55:a7:d4:77:13:37:7d:16:28:a6:c6:ee:23:bb:
78:ef:a6:2a:44:c3:d3:46:cd:42:88:69:02:c9:6c:60:87:a3:
f2:99:c8:b9:82:54:14:d0:ae:d4:55:1a:72:2e:8c:b4:8f:74:
f2:27:10:7c:83:81:13:c9:a3:ec:5d:ba:d9:b7:62:2e:67:f3:
51:96:57:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQvoo0rDIGXfkK7dG4zgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzI5Yjk4OTA0YTJlY2U4NDgyZTBmMjU4ZjVjMzRmZWFk
NThjZTIwHhcNMjYwOTEwMDMwMTAyWhcNMjYwOTExMDMwMTAyWjAzMTEwLwYDVQQD
Eyg1MTMzNjhkZjVmMzU2OGRjNGQxYjAwYWY3YmRiZjA2NjM4ZTUzOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNXx/m7x0WrA2Cfo/ihaSoB1SSO7
e01AEccL5t1148xJTEUmptaeUJEAif2Y36ZpGugeLcVATbL4Hdt1RjYcFRNDS9zR
WCtSz8Uz6HeGB0h1b05jNY8yTuTE+51UrHp08we8TatC41XjsZh7QKOhGasleJkI
s0gc201mZAUa58ay1mMy9ShrxTa0w0g+6DPrFnckmwcOeFkr3A1vLc8PBTkOI580
VAm+Pss3WrgRjcOf47yxIq2ndCZIyG5yzT71qtvRQaAJOJsJdfkWY93+rsFku2Zy
isQAKcakymdSc5OwtQVs5melwSSgSm6r1mzBxBA0jLSfVOiVskFZgQCkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEzaN9fNWjcTRsAr3vb8GY45Tm+MB8GA1UdIwQY
MBaAFP8ym5iQSi7OhILg8lj1w0/q1YziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMt
M2RmNDcxYzAxYzllLzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMtM2RmNDcxYzAxYzll
LzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/EdZhm5
x8k651pZQWXT0EJpk9kaRPPGF3X06wMrqDeDmM6Q7Mkqo+SE68SydiwG68fxpUuL
jkCUKcuFCpih1wfEEhmDLImH/5R3zfi7qzUHrdW2Y2L28RlPxhnhKhAyppmLq4nF
r2dkpjgkMrQZvrF6s2zJDXyGxlbBV2YZO/wYnID10yXgRQpZy6Mu3j+jDjFjXH0r
0PtpbdJJEl1B8JoeDjrAZh1FtaLF3IEMqfV8/bRdS5y9x1Wn1HcTN30WKKbG7iO7
eO+mKkTD00bNQohpAslsYIej8pnIuYJUFNCu1FUaci6MtI908icQfIOBE8mj7F26
2bdiLmfzUZZXxA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:38 2026 by rpki-client