Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: AYUbKVkWHyKpHm5B+us7zWiBcDhh2x2TlOEOifNG9Kk=
Subject key identifier: A0:08:CE:D7:4E:6D:36:6B:67:CA:E3:6A:2D:6A:24:1B:4A:22:92:AF
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019F1C7C26AAFEE176C00F5C166CF913DAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1986
Signing time: Wed 01 Jul 2026 07:02:06 +0000
Manifest this update: Wed 01 Jul 2026 07:02:06 +0000
Manifest next update: Thu 02 Jul 2026 07:02:06 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: 7kJpCQ9wZ8lADZsLZnZu6PGwQddPhKIjB7kFBfpuxME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:7c:26:aa:fe:e1:76:c0:0f:5c:16:6c:f9:13:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jul 1 07:02:06 2026 GMT
Not After : Jul 2 07:02:06 2026 GMT
Subject: CN=a008ced74e6d366b67cae36a2d6a241b4a2292af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:0a:84:e9:98:0b:d6:69:41:ac:15:fe:6d:
a6:e1:5e:6b:13:d1:1c:29:de:bc:59:8f:10:25:e7:
8f:1c:ac:b7:55:f4:ed:2e:73:5b:b0:86:ab:02:79:
e0:2c:78:70:91:48:ba:3e:db:6e:27:7f:29:46:06:
a4:80:4a:3d:29:10:f0:a8:51:12:a7:80:07:6e:db:
5e:a2:78:eb:3b:e6:0d:38:d3:9f:72:10:1a:63:92:
b1:9c:bd:84:e3:cf:c8:f3:90:2d:bb:b7:e3:48:6d:
19:b1:97:ca:29:45:39:8d:8c:d1:e3:af:9a:c8:3b:
fd:d5:cd:10:c3:0c:56:bf:e0:46:77:b8:59:1e:63:
8d:c6:5c:b6:12:6e:1a:7d:c5:f4:80:10:15:cb:33:
40:70:c3:23:fa:50:aa:51:9f:03:19:e8:ea:c0:ab:
8f:ae:00:c3:65:f1:22:ba:4d:fd:1f:11:dd:eb:8e:
3d:b2:a2:e0:a2:36:0c:51:88:66:07:49:ab:59:70:
8b:fa:d8:d8:ce:a3:7a:9f:83:62:d2:b3:65:81:7f:
1a:02:a4:3b:14:e4:d3:de:bf:96:1f:84:ad:31:5f:
11:54:29:f6:64:46:9e:89:81:5a:c4:7e:99:36:24:
92:6d:bf:33:4f:6d:5c:b0:60:24:78:b4:92:71:81:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:CE:D7:4E:6D:36:6B:67:CA:E3:6A:2D:6A:24:1B:4A:22:92:AF
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:e9:bf:47:b1:f6:ec:97:6b:27:26:69:3d:a5:01:71:c0:
ec:5e:3d:a4:57:d4:a4:78:bb:9e:97:7c:b7:1c:ba:5f:ff:e3:
3c:2e:a1:9c:e2:f0:cc:ff:db:eb:9d:8d:da:b6:39:a1:2a:de:
00:b9:21:3a:b9:85:4e:c2:22:87:97:6e:12:b8:fc:38:21:ca:
35:92:58:35:4e:4d:64:ff:4c:89:19:71:1e:f5:26:5f:cc:a2:
2e:c8:05:ec:c2:5d:dd:07:9e:fe:60:7f:68:ed:64:c7:0b:5a:
01:88:8c:1b:fc:b0:6e:b7:77:b8:d0:13:23:26:fc:67:52:ec:
60:bd:a0:f0:60:04:71:89:f9:e1:70:e5:97:fa:20:d6:48:a4:
ae:ae:55:17:db:60:ce:f7:43:7f:34:94:0d:e3:82:6e:0d:e8:
74:4d:93:74:31:60:69:ac:9a:8f:f0:9b:70:0b:c8:2c:60:d6:
65:c1:ad:b3:22:6a:31:0b:33:e7:19:58:94:5c:79:e7:63:2e:
ba:37:08:58:ce:db:79:e0:d7:a8:c7:b3:f8:05:4c:3e:13:00:
a0:6a:f2:18:19:4b:df:71:9f:48:57:23:8e:f8:d6:46:bf:a8:
bc:ab:bb:ee:80:07:30:a8:79:7f:95:ea:34:93:1e:b6:24:a1:
df:2d:95:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8cfCaq/uF2wA9cFmz5E9qlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi
NDc5ODgwHhcNMjYwNzAxMDcwMjA2WhcNMjYwNzAyMDcwMjA2WjAzMTEwLwYDVQQD
EyhhMDA4Y2VkNzRlNmQzNjZiNjdjYWUzNmEyZDZhMjQxYjRhMjI5MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iAKhOmYC9ZpQawV/m2m4V5rE9Ec
Kd68WY8QJeePHKy3VfTtLnNbsIarAnngLHhwkUi6PttuJ38pRgakgEo9KRDwqFES
p4AHbtteonjrO+YNONOfchAaY5KxnL2E48/I85Atu7fjSG0ZsZfKKUU5jYzR46+a
yDv91c0QwwxWv+BGd7hZHmONxly2Em4afcX0gBAVyzNAcMMj+lCqUZ8DGejqwKuP
rgDDZfEiuk39HxHd6449sqLgojYMUYhmB0mrWXCL+tjYzqN6n4Ni0rNlgX8aAqQ7
FOTT3r+WH4StMV8RVCn2ZEaeiYFaxH6ZNiSSbb8zT21csGAkeLSScYFJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAIztdObTZrZ8rjai1qJBtKIpKvMB8GA1UdIwQY
MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt
OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw
LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1fpv0ex
9uyXaycmaT2lAXHA7F49pFfUpHi7npd8txy6X//jPC6hnOLwzP/b652N2rY5oSre
ALkhOrmFTsIih5duErj8OCHKNZJYNU5NZP9MiRlxHvUmX8yiLsgF7MJd3Qee/mB/
aO1kxwtaAYiMG/ywbrd3uNATIyb8Z1LsYL2g8GAEcYn54XDll/og1kikrq5VF9tg
zvdDfzSUDeOCbg3odE2TdDFgaayaj/CbcAvILGDWZcGtsyJqMQsz5xlYlFx552Mu
ujcIWM7beeDXqMez+AVMPhMAoGryGBlL33GfSFcjjvjWRr+ovKu77oAHMKh5f5Xq
NJMetiSh3y2VxA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 10:35:04 2026 by rpki-client