Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: 2OYVErIjZdaMJn2FMiJcXc8i7gD34YdWYY4RAY7yurI=
Subject key identifier: ED:FA:A0:61:92:3E:46:B9:0A:ED:93:C1:C5:6A:26:5C:39:5F:1E:A9
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 01A03826ABBAA14789481B230BD5B0D38F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 01B2
Signing time: Tue 25 Aug 2026 09:00:53 +0000
Manifest this update: Tue 25 Aug 2026 09:00:53 +0000
Manifest next update: Wed 26 Aug 2026 09:00:53 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: obdehlFVtesrhfId9e1ZXeaweUDdtE4yWakIGl0MOzc=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:26:ab:ba:a1:47:89:48:1b:23:0b:d5:b0:d3:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Aug 25 09:00:53 2026 GMT
Not After : Aug 26 09:00:53 2026 GMT
Subject: CN=edfaa061923e46b90aed93c1c56a265c395f1ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:79:9e:7e:c3:30:ab:25:77:f3:ee:45:97:
6b:20:25:59:e1:f1:7a:1a:b5:79:cf:e4:57:c6:ea:
a9:35:6a:71:54:8d:8d:94:06:3c:20:37:a4:b0:ed:
40:d8:76:c8:74:49:98:42:c8:30:c3:ef:57:35:6a:
c1:e0:a8:f6:80:f1:3d:64:0c:c6:b3:31:17:3f:76:
fe:72:0e:9a:71:57:15:1e:83:48:7b:45:5b:a4:79:
99:a0:2d:6b:55:79:3f:c1:95:13:90:81:63:1d:a6:
f7:29:1c:0c:93:cc:7a:c8:7d:17:7e:9a:f5:94:7d:
78:f2:92:31:64:38:16:a3:ed:6e:3b:f1:5a:a3:ed:
26:34:2e:b9:0d:99:09:ee:d7:f0:fb:75:7f:2b:b0:
f6:02:da:8d:98:1f:7f:1d:de:be:d0:ef:1c:f9:2d:
d2:bf:c0:8b:6d:0b:b7:9d:92:f6:8e:fa:a7:d6:a5:
c7:7e:4f:7e:0d:0c:7a:53:d0:34:a0:8c:e9:4f:68:
d1:1f:f5:59:32:fe:62:a4:b5:3b:47:5e:ed:30:66:
68:3b:ca:2a:aa:7e:29:b1:cc:f7:fc:20:ce:6e:bd:
6d:04:87:29:0e:14:75:19:2e:96:fd:22:4e:e3:42:
a4:30:6f:c0:48:c9:4c:da:32:56:df:c7:9f:c2:f4:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:A0:61:92:3E:46:B9:0A:ED:93:C1:C5:6A:26:5C:39:5F:1E:A9
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:fc:a4:79:65:27:7b:26:5b:74:38:07:3f:51:29:61:5e:
c3:d5:07:42:eb:d0:bb:dd:b3:72:d6:c5:f4:cd:a4:3f:12:44:
7d:0b:86:9c:50:9e:d5:9f:96:a4:fd:1b:9d:48:ab:3a:ce:4e:
e8:d5:98:b6:bf:42:5d:c3:d6:a4:e4:55:cc:f0:b5:3b:cc:76:
55:b8:b0:12:c9:aa:d4:be:e6:df:46:8e:06:5f:1d:bf:13:1f:
0b:fd:12:88:a0:e4:13:6a:3b:df:14:c9:48:59:2e:06:ab:59:
71:a1:ef:40:74:41:6a:d1:e6:e7:20:7a:d8:04:89:f3:6c:39:
ff:b8:2e:c2:01:aa:2d:9b:ff:f8:25:ef:60:7b:df:28:08:e6:
34:f2:35:25:55:d2:22:6f:1c:8c:63:2a:06:59:00:a9:a2:a8:
85:0d:05:f7:ec:ec:75:de:6a:8f:05:d2:9c:35:76:26:31:ac:
18:62:91:e4:19:6a:38:98:18:0a:3f:e1:f8:b8:e6:5d:5a:20:
2b:ae:3b:57:f8:bd:02:55:17:e0:c7:41:29:88:ed:61:7b:d8:
9b:eb:1c:ba:bb:3d:0f:89:16:37:b7:d5:63:ed:c5:87:65:60:
13:7f:4b:af:4b:17:86:c6:85:5c:9a:1d:d7:c6:a6:30:7a:53:
cd:6e:0b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA4Jqu6oUeJSBsjC9Ww048cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmE5NzlkZDA4ZGJlMDNjMTc0OGEwMjJmYTY2NTRkMzYx
MTk0MGYwHhcNMjYwODI1MDkwMDUzWhcNMjYwODI2MDkwMDUzWjAzMTEwLwYDVQQD
EyhlZGZhYTA2MTkyM2U0NmI5MGFlZDkzYzFjNTZhMjY1YzM5NWYxZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ55nn7DMKsld/PuRZdrICVZ4fF6
GrV5z+RXxuqpNWpxVI2NlAY8IDeksO1A2HbIdEmYQsgww+9XNWrB4Kj2gPE9ZAzG
szEXP3b+cg6acVcVHoNIe0VbpHmZoC1rVXk/wZUTkIFjHab3KRwMk8x6yH0Xfpr1
lH148pIxZDgWo+1uO/Fao+0mNC65DZkJ7tfw+3V/K7D2AtqNmB9/Hd6+0O8c+S3S
v8CLbQu3nZL2jvqn1qXHfk9+DQx6U9A0oIzpT2jRH/VZMv5ipLU7R17tMGZoO8oq
qn4pscz3/CDObr1tBIcpDhR1GS6W/SJO40KkMG/ASMlM2jJW38efwvTGQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO36oGGSPka5Cu2TwcVqJlw5Xx6pMB8GA1UdIwQY
MBaAFGe6l53Qjb4DwXSKAi+mZU02EZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAt
MDE0NGZkNzdlYmU0LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAtMDE0NGZkNzdlYmU0
LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEr8pHll
J3smW3Q4Bz9RKWFew9UHQuvQu92zctbF9M2kPxJEfQuGnFCe1Z+WpP0bnUirOs5O
6NWYtr9CXcPWpORVzPC1O8x2VbiwEsmq1L7m30aOBl8dvxMfC/0SiKDkE2o73xTJ
SFkuBqtZcaHvQHRBatHm5yB62ASJ82w5/7guwgGqLZv/+CXvYHvfKAjmNPI1JVXS
Im8cjGMqBlkAqaKohQ0F9+zsdd5qjwXSnDV2JjGsGGKR5BlqOJgYCj/h+LjmXVog
K647V/i9AlUX4MdBKYjtYXvYm+scurs9D4kWN7fVY+3Fh2VgE39Lr0sXhsaFXJod
18amMHpTzW4Lfg==
-----END CERTIFICATE-----
Generated at Tue Aug 25 18:33:35 2026 by rpki-client