Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: LwYmdaexSsYtMQrn6Ak/VNy72GOhw3EBvenpa282bCE=
Subject key identifier: 41:49:54:35:7A:33:78:BB:0E:1C:D0:7D:7E:42:B8:D3:20:DD:57:87
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 01A111847D05410F008AB9051B84379AA569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 079B
Signing time: Tue 06 Oct 2026 14:00:57 +0000
Manifest this update: Tue 06 Oct 2026 14:00:57 +0000
Manifest next update: Wed 07 Oct 2026 14:00:57 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: eF2GMv5fReto+M2SNBdgd+T2fAWDKSwMZXWQpvBSM0o=)
2: aQ9gfy4fYC0VC08rI5UWZXPKETo.roa (hash: 3nT5m1pplYfTGimm9tivPlp5Ti9zXf+dDwmifgJXGYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:7d:05:41:0f:00:8a:b9:05:1b:84:37:9a:a5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Oct 6 14:00:57 2026 GMT
Not After : Oct 7 14:00:57 2026 GMT
Subject: CN=414954357a3378bb0e1cd07d7e42b8d320dd5787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:61:8f:31:11:16:61:19:91:c0:00:ab:66:
66:ff:63:fb:4c:d2:08:36:5b:16:f4:c1:a6:20:24:
5d:16:d9:f2:e7:6c:8f:fd:15:93:62:03:48:86:be:
12:da:9d:88:0b:72:4a:87:08:05:3a:b6:c6:56:fa:
ac:ed:01:35:72:70:1d:44:a3:76:4e:32:fe:2d:ab:
6c:a2:60:16:5d:d1:41:53:61:2b:03:d5:eb:36:ce:
c3:ff:c0:28:6c:b3:0d:2c:e8:4c:a2:fb:25:af:cf:
54:19:34:e4:00:51:66:ce:a3:91:f6:51:f8:1d:7f:
24:f4:cf:8b:64:c4:e6:29:89:1d:67:c8:16:33:89:
e0:59:c2:a8:02:9c:60:75:3f:d2:c2:d1:dd:c4:8e:
89:e9:65:31:4f:db:6c:71:54:ce:ae:aa:4d:f1:3b:
64:20:60:92:6d:f3:e7:ae:69:73:8e:6c:69:f7:58:
db:93:de:f8:98:49:24:2e:80:86:a9:d9:8c:90:26:
8b:51:02:5b:26:a0:22:66:12:cc:c9:e4:2d:11:3b:
fb:b2:5f:24:75:9e:9b:fa:3e:df:60:66:68:6a:32:
51:8c:d8:c1:98:4b:39:41:19:0a:3b:f6:dd:a3:9c:
35:47:36:f2:37:19:03:46:8a:31:df:f4:1a:73:8e:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:49:54:35:7A:33:78:BB:0E:1C:D0:7D:7E:42:B8:D3:20:DD:57:87
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:00:5c:37:4a:68:5f:2a:1c:af:7c:fc:c4:11:df:65:5e:0c:
76:17:6d:2e:cf:5d:5f:b4:d6:24:89:d3:f8:3c:16:9a:1a:09:
00:6a:ee:d8:0b:8b:79:eb:ad:49:75:a0:1e:2a:94:0b:70:30:
fa:f5:3a:92:f4:56:28:9a:82:6a:e5:47:92:ac:ec:ca:d7:d6:
83:eb:8e:2d:ff:05:46:e8:1a:a0:b0:88:26:1e:1e:ba:56:a1:
52:0a:9a:ec:b5:6d:f1:b5:ca:39:da:13:1a:d0:91:3b:02:25:
f2:4c:10:8b:c0:86:14:8a:09:e5:ca:10:48:13:9b:3e:a0:40:
d6:43:5e:89:48:1a:5c:8a:68:76:65:1b:11:f3:fd:59:0d:68:
f4:25:c7:8e:f4:be:78:a0:46:2e:0c:54:31:06:86:6c:20:78:
87:d7:37:ad:c1:57:28:ab:a9:eb:ee:59:4f:d0:22:79:5d:5e:
97:92:56:4d:ed:66:19:bd:77:9e:08:5e:0c:72:3e:f3:ab:52:
d6:9e:f2:21:03:01:7e:0d:97:b3:d7:26:c2:37:fb:b1:a1:a9:
9d:fe:96:7e:41:cb:52:6f:db:04:e9:7c:28:ea:b5:cf:1c:78:
7c:7f:de:92:a2:04:74:e9:1f:19:b0:e6:59:0a:68:f6:a6:17:
ae:e2:68:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERhH0FQQ8AirkFG4Q3mqVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2
N2VlZmEwHhcNMjYxMDA2MTQwMDU3WhcNMjYxMDA3MTQwMDU3WjAzMTEwLwYDVQQD
Eyg0MTQ5NTQzNTdhMzM3OGJiMGUxY2QwN2Q3ZTQyYjhkMzIwZGQ1Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+VhjzERFmEZkcAAq2Zm/2P7TNII
NlsW9MGmICRdFtny52yP/RWTYgNIhr4S2p2IC3JKhwgFOrbGVvqs7QE1cnAdRKN2
TjL+LatsomAWXdFBU2ErA9XrNs7D/8AobLMNLOhMovslr89UGTTkAFFmzqOR9lH4
HX8k9M+LZMTmKYkdZ8gWM4ngWcKoApxgdT/SwtHdxI6J6WUxT9tscVTOrqpN8Ttk
IGCSbfPnrmlzjmxp91jbk974mEkkLoCGqdmMkCaLUQJbJqAiZhLMyeQtETv7sl8k
dZ6b+j7fYGZoajJRjNjBmEs5QRkKO/bdo5w1RzbyNxkDRoox3/Qac47unwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFJVDV6M3i7DhzQfX5CuNMg3VeHMB8GA1UdIwQY
MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt
YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4
LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwBcN0po
Xyocr3z8xBHfZV4MdhdtLs9dX7TWJInT+DwWmhoJAGru2AuLeeutSXWgHiqUC3Aw
+vU6kvRWKJqCauVHkqzsytfWg+uOLf8FRugaoLCIJh4eulahUgqa7LVt8bXKOdoT
GtCROwIl8kwQi8CGFIoJ5coQSBObPqBA1kNeiUgaXIpodmUbEfP9WQ1o9CXHjvS+
eKBGLgxUMQaGbCB4h9c3rcFXKKup6+5ZT9AieV1el5JWTe1mGb13ngheDHI+86tS
1p7yIQMBfg2Xs9cmwjf7saGpnf6WfkHLUm/bBOl8KOq1zxx4fH/ekqIEdOkfGbDm
WQpo9qYXruJomQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:47:19 2026 by rpki-client