Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: v8+xPyrZcwTVQ6ZNVMZaN5UVoF/SsLgs2oPqUCX0xLY=
Subject key identifier: DE:37:E0:D7:0C:9D:FD:51:BC:73:95:1C:6C:B5:EA:B6:71:B9:8B:48
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 01A0B6C0179CA7A3D91957D8A8BBAC2B9F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1A5B
Signing time: Fri 18 Sep 2026 23:00:37 +0000
Manifest this update: Fri 18 Sep 2026 23:00:37 +0000
Manifest next update: Sat 19 Sep 2026 23:00:37 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: wwsuP5YS4/de+khTHx0Ig5TXhVAK+Zx07iTTZ+FVMHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:c0:17:9c:a7:a3:d9:19:57:d8:a8:bb:ac:2b:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Sep 18 23:00:37 2026 GMT
Not After : Sep 19 23:00:37 2026 GMT
Subject: CN=de37e0d70c9dfd51bc73951c6cb5eab671b98b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:42:d4:48:f6:9a:b7:c6:f7:9e:e0:0d:6d:
c3:52:89:7a:72:05:8c:92:ad:28:ea:7d:1d:31:a1:
92:50:bb:75:62:af:2d:fa:1f:41:da:bd:4e:32:12:
4f:ed:c4:48:19:c1:bb:b6:84:41:3b:70:7a:2b:2f:
e4:6c:5a:10:fe:29:e7:e3:54:21:2f:da:52:b2:6c:
ae:a0:71:4f:2a:f6:e0:7d:79:85:3f:f6:fd:da:8a:
c4:ac:44:6f:32:38:b8:27:2a:45:18:7e:09:1e:89:
d0:31:3f:14:b6:2f:38:66:73:e2:5a:bc:97:ad:61:
8c:08:43:bf:e5:e6:14:17:d3:44:6e:9d:11:56:e4:
d0:9c:52:c3:94:18:43:41:6c:63:0b:e9:c3:0d:da:
e5:7c:45:ae:d8:ef:9c:15:78:40:85:f6:0d:ee:9d:
2a:02:c4:a9:63:da:c9:64:7e:4d:95:84:c3:b4:a7:
2c:fe:e9:d1:f9:7f:1c:62:64:e9:4c:c6:25:5e:07:
69:75:66:f9:81:e3:8e:6f:b5:6f:0a:46:ee:43:bf:
97:dd:f7:78:2c:36:a2:23:d0:1b:94:ac:92:21:34:
ce:e6:4b:31:ad:f0:8f:53:31:88:6a:8e:2c:fb:be:
ba:85:c4:49:ef:09:01:bf:b2:89:7d:08:24:80:11:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:E0:D7:0C:9D:FD:51:BC:73:95:1C:6C:B5:EA:B6:71:B9:8B:48
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:db:20:8d:70:8d:b2:e5:cb:14:4d:a5:77:92:f3:22:41:
13:4e:12:bc:06:22:13:0f:04:a6:e5:0f:90:e7:6d:28:c9:58:
f7:c1:c0:b9:c4:14:30:82:e0:41:97:e9:60:e6:13:20:81:23:
87:16:a8:7c:34:d7:32:cc:75:8d:20:e4:4d:b9:f1:47:c1:76:
ba:d7:ca:36:d1:26:7c:cb:bf:6d:a3:0e:df:81:e5:1b:51:f4:
7a:50:0f:bd:c1:86:29:b8:55:23:7f:9b:71:30:5d:49:79:ad:
1b:51:c3:6a:94:31:51:cf:d2:38:d1:d0:c9:b3:df:c1:07:3a:
c6:c6:9f:9f:a4:fb:ed:4f:b1:f6:ea:e5:5c:11:da:1a:f0:1d:
8e:b6:98:ee:e7:e3:3c:bd:9f:0b:d5:34:cf:63:7e:8a:c8:84:
a4:47:57:d0:e1:29:b5:5d:e1:c8:10:83:27:8a:6d:f1:28:e2:
53:c7:e0:d5:5f:dc:33:3c:b3:86:98:7f:8a:ec:00:fd:77:8e:
cd:a5:2e:ff:2c:9b:4b:0d:6f:bc:b9:12:4e:73:4a:46:2b:d9:
05:0b:07:65:20:49:d9:ff:8b:b8:15:ff:d7:dc:83:be:6c:9b:
33:8b:e6:1c:2a:e0:39:c3:0b:c2:41:b1:f4:65:54:5f:71:68:
d9:7d:82:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2wBecp6PZGVfYqLusK58iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjYwOTE4MjMwMDM3WhcNMjYwOTE5MjMwMDM3WjAzMTEwLwYDVQQD
EyhkZTM3ZTBkNzBjOWRmZDUxYmM3Mzk1MWM2Y2I1ZWFiNjcxYjk4YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvJC1Ej2mrfG957gDW3DUol6cgWM
kq0o6n0dMaGSULt1Yq8t+h9B2r1OMhJP7cRIGcG7toRBO3B6Ky/kbFoQ/inn41Qh
L9pSsmyuoHFPKvbgfXmFP/b92orErERvMji4JypFGH4JHonQMT8Uti84ZnPiWryX
rWGMCEO/5eYUF9NEbp0RVuTQnFLDlBhDQWxjC+nDDdrlfEWu2O+cFXhAhfYN7p0q
AsSpY9rJZH5NlYTDtKcs/unR+X8cYmTpTMYlXgdpdWb5geOOb7VvCkbuQ7+X3fd4
LDaiI9AblKySITTO5ksxrfCPUzGIao4s+766hcRJ7wkBv7KJfQgkgBFE3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN434NcMnf1RvHOVHGy16rZxuYtIMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF/bII1w
jbLlyxRNpXeS8yJBE04SvAYiEw8EpuUPkOdtKMlY98HAucQUMILgQZfpYOYTIIEj
hxaofDTXMsx1jSDkTbnxR8F2utfKNtEmfMu/baMO34HlG1H0elAPvcGGKbhVI3+b
cTBdSXmtG1HDapQxUc/SONHQybPfwQc6xsafn6T77U+x9urlXBHaGvAdjraY7ufj
PL2fC9U0z2N+isiEpEdX0OEptV3hyBCDJ4pt8SjiU8fg1V/cMzyzhph/iuwA/XeO
zaUu/yybSw1vvLkSTnNKRivZBQsHZSBJ2f+LuBX/19yDvmybM4vmHCrgOcMLwkGx
9GVUX3Fo2X2C+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:43:06 2026 by rpki-client