Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: DKJi+PEPr/CbIM9yQcSJDm5kjXhF4rh2+HwVK+Zl/gk=
Subject key identifier: E8:91:72:DF:7A:75:C0:0D:7E:59:EC:E7:60:14:EE:BB:11:FC:7C:24
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 01A19C592F65CA6DE6781DBF7F93F003BF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 06A0
Signing time: Mon 02 Nov 2026 13:00:52 +0000
Manifest this update: Mon 02 Nov 2026 13:00:52 +0000
Manifest next update: Tue 03 Nov 2026 13:00:52 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: YkJxSWImjggEC4oktb5VSr/6RlOMr343yAegWzKZDHk=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:59:2f:65:ca:6d:e6:78:1d:bf:7f:93:f0:03:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Nov 2 13:00:52 2026 GMT
Not After : Nov 3 13:00:52 2026 GMT
Subject: CN=e89172df7a75c00d7e59ece76014eebb11fc7c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:18:fa:ce:08:ef:84:67:85:b6:e5:44:2e:
c1:83:b0:a7:78:24:0c:2e:5d:8d:10:02:63:b0:4d:
3d:f6:97:73:ce:8f:2b:0f:29:d3:8f:ed:32:2a:05:
06:27:3c:30:27:ca:8b:a6:69:b6:fd:f9:ce:69:aa:
15:d4:f2:15:18:ec:68:c7:82:ce:e6:e0:25:e9:a1:
ab:65:20:2f:5f:eb:ef:38:d9:b5:88:b5:5f:4c:95:
05:e4:45:e2:75:21:22:f2:98:b9:1f:71:e2:88:d5:
0c:65:af:2d:40:00:93:92:27:1d:d8:2a:84:ac:75:
06:9d:56:37:08:64:ce:5e:1d:d3:23:1a:9c:ae:81:
40:98:72:48:6f:ab:ae:67:66:ed:fc:3e:8f:eb:72:
7e:25:45:2d:51:3b:a4:ab:71:eb:0d:bd:1e:8f:ea:
75:58:99:d7:fa:7f:ac:e8:3c:8c:8d:4b:db:8a:06:
93:43:f4:d9:98:05:e8:6d:12:2d:78:16:2d:bb:cb:
9d:0a:4b:c0:42:5a:c0:50:95:8f:d1:45:dc:30:f0:
43:8d:47:7c:f8:27:92:d0:82:98:a0:ec:5e:39:bc:
99:ca:35:47:96:88:93:99:1e:ab:b4:27:d7:8f:5f:
e1:36:0f:15:0c:e2:27:1f:d6:e1:83:63:1f:ab:15:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:72:DF:7A:75:C0:0D:7E:59:EC:E7:60:14:EE:BB:11:FC:7C:24
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:23:e4:68:37:af:16:ca:24:5c:92:54:65:a6:c9:0d:88:c3:
b6:f6:bb:d8:5c:f6:17:41:41:5c:47:f4:a6:42:0d:08:63:15:
70:40:9e:ce:d8:75:c8:f0:f5:38:81:85:d4:28:61:b0:d2:0e:
7a:9f:a9:d8:c4:d4:d9:50:a9:40:3c:c6:12:05:b1:82:10:00:
02:f9:a6:a4:45:5b:78:aa:25:fc:64:cd:68:f0:88:13:0d:f0:
2c:b9:02:f3:19:37:85:ac:22:52:a2:56:7b:29:56:34:24:bf:
28:be:29:a0:d4:16:2d:ca:24:70:60:44:6a:80:e7:81:8f:85:
5e:70:a9:f6:a3:48:de:19:d6:06:9c:a9:aa:68:5e:a0:08:7c:
db:06:45:e8:a3:be:11:99:ad:00:79:6d:7d:96:d9:ca:31:89:
f5:b9:e1:69:6d:1b:be:be:4c:2a:ad:cf:1b:8e:e1:f0:c9:d7:
9b:0c:b2:9d:4e:ae:70:af:62:3c:ea:1e:61:0c:39:70:53:b8:
c9:13:fc:95:a7:78:4e:49:e9:74:ec:98:9c:2a:6e:13:a4:b6:
80:09:a4:46:23:a4:4e:75:f6:e7:ed:c0:d5:2e:7a:aa:48:c1:
5f:e2:eb:93:1f:57:1c:6c:e4:0c:55:80:4e:c8:eb:7d:0b:46:
43:2c:ba:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGcWS9lym3meB2/f5PwA796MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjYxMTAyMTMwMDUyWhcNMjYxMTAzMTMwMDUyWjAzMTEwLwYDVQQD
EyhlODkxNzJkZjdhNzVjMDBkN2U1OWVjZTc2MDE0ZWViYjExZmM3YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVMY+s4I74RnhbblRC7Bg7CneCQM
Ll2NEAJjsE099pdzzo8rDynTj+0yKgUGJzwwJ8qLpmm2/fnOaaoV1PIVGOxox4LO
5uAl6aGrZSAvX+vvONm1iLVfTJUF5EXidSEi8pi5H3HiiNUMZa8tQACTkicd2CqE
rHUGnVY3CGTOXh3TIxqcroFAmHJIb6uuZ2bt/D6P63J+JUUtUTukq3HrDb0ej+p1
WJnX+n+s6DyMjUvbigaTQ/TZmAXobRIteBYtu8udCkvAQlrAUJWP0UXcMPBDjUd8
+CeS0IKYoOxeObyZyjVHloiTmR6rtCfXj1/hNg8VDOInH9bhg2MfqxWkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiRct96dcANflns52AU7rsR/HwkMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCPkaDev
FsokXJJUZabJDYjDtva72Fz2F0FBXEf0pkINCGMVcECezth1yPD1OIGF1ChhsNIO
ep+p2MTU2VCpQDzGEgWxghAAAvmmpEVbeKol/GTNaPCIEw3wLLkC8xk3hawiUqJW
eylWNCS/KL4poNQWLcokcGBEaoDngY+FXnCp9qNI3hnWBpypqmheoAh82wZF6KO+
EZmtAHltfZbZyjGJ9bnhaW0bvr5MKq3PG47h8MnXmwyynU6ucK9iPOoeYQw5cFO4
yRP8lad4TknpdOyYnCpuE6S2gAmkRiOkTnX25+3A1S56qkjBX+Lrkx9XHGzkDFWA
TsjrfQtGQyy61g==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:16:16 2026 by rpki-client