
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier: fWVPsurNau8UbqOB1ZPlk53MN/PCNZgQScO8YoNnnRM=
Subject key identifier: 0A:21:74:3F:1D:C9:63:7D:AF:42:F7:96:57:3C:F8:BB:F7:7C:FC:06
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A06EDEC0890D5137C5D7B4BC98A06808F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number: 0CF7
Signing time: Sat 05 Sep 2026 00:01:27 +0000
Manifest this update: Sat 05 Sep 2026 00:01:27 +0000
Manifest next update: Sun 06 Sep 2026 00:01:27 +0000
Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
2: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
3: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
4: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
5: 98oECme-w_GgSaFmZh37RLhYD9g.roa (hash: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=)
6: AH6LIrlbNI1-7jc6_mfP3cKpZas.roa (hash: Cd72THvjuZ43WZBdJkQ5+DWE2lKyF5Q8G1oiHQ4Vu5U=)
7: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (hash: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=)
8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
14: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (hash: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=)
15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: 0JbG0Xgh5UD94KU3sIsySIl1+/1hig7hg5dfE1xUQvc=)
20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
21: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (hash: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=)
22: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
23: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
24: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
28: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (hash: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=)
29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
30: urz4_AKUeHVYjJAJbjRXtg7l6R0.roa (hash: Lc5cV4YVr/KMErRPjabqXug9W3uT5uCRR+WjWueC5dU=)
31: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
32: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:c0:89:0d:51:37:c5:d7:b4:bc:98:a0:68:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 5 00:01:27 2026 GMT
Not After : Sep 6 00:01:27 2026 GMT
Subject: CN=0a21743f1dc9637daf42f796573cf8bbf77cfc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:fd:23:d9:ed:75:23:21:f3:73:f3:3a:4a:
fd:f9:8b:27:43:23:15:9f:6d:57:b6:e9:90:14:51:
37:d9:30:bd:bb:d4:70:e7:06:da:7e:65:f7:6d:f0:
38:00:7e:1b:49:64:75:0b:d4:5d:83:05:b0:85:e5:
a3:66:e2:41:97:27:3a:e5:00:fa:ba:89:11:c8:49:
24:fd:20:5f:3c:65:1e:01:07:53:07:e5:9d:87:f0:
d0:db:20:59:9d:51:b2:be:98:20:39:00:b8:10:36:
79:ea:c7:75:93:4d:ac:72:5f:0a:b4:21:3f:c8:0a:
65:2a:d6:4b:e3:53:0e:fb:4b:4d:3e:87:c7:70:68:
83:22:11:7f:42:17:d9:be:b3:20:a2:b8:38:02:1f:
30:8f:14:ae:3e:af:fc:81:54:e1:b4:df:ba:1b:fb:
cc:2f:98:ec:92:4d:69:23:5b:f0:3c:7b:6b:a1:1b:
49:57:26:80:1c:a7:53:31:ab:07:67:b8:93:1e:1e:
b0:68:48:c3:b9:e5:db:24:1f:33:2b:99:3e:56:f6:
fa:b8:37:10:3b:55:af:80:eb:45:f2:5f:8f:53:43:
16:e8:ab:f7:a2:5a:a9:6d:20:3e:0c:ee:5b:dd:84:
13:aa:7e:91:54:42:38:30:47:43:eb:8e:bc:27:61:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:21:74:3F:1D:C9:63:7D:AF:42:F7:96:57:3C:F8:BB:F7:7C:FC:06
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:9f:a5:34:8a:b9:71:f4:fc:bb:2e:0b:dd:eb:e7:26:52:
63:88:08:3c:8d:d6:93:a4:18:ab:ba:27:4a:32:8d:13:0b:9a:
49:42:bf:20:7c:da:09:3e:4a:70:77:9d:23:d9:51:0f:9b:f8:
0a:98:30:92:95:30:8c:aa:26:35:23:94:0b:43:60:61:93:46:
6e:80:26:4e:65:de:6d:d6:0d:11:e2:a9:fd:2c:c4:2c:38:81:
21:ad:e6:96:9c:72:1d:cf:71:12:c7:6e:ad:b2:67:30:42:87:
0d:1c:c0:b0:62:8e:e1:02:9f:e2:13:d7:cd:d0:ad:45:e7:34:
12:22:a8:48:48:8a:52:df:cf:e1:0f:a8:40:23:5d:f2:ca:ac:
f1:fe:f7:3b:2e:c1:3b:b7:af:f4:e7:71:2a:76:54:e1:ab:e7:
f7:ae:93:d4:14:33:12:c5:0c:cf:e7:4a:3a:30:69:7a:e9:e4:
a5:26:8b:2a:db:df:95:54:06:92:ea:e0:bc:41:f1:3b:13:8f:
54:a6:ca:89:2d:1f:e8:ac:ad:01:f5:c9:1c:21:5a:39:5a:c1:
2f:80:b3:28:08:b8:e5:b5:2d:52:ed:e2:89:63:30:2f:04:d9:
ab:fb:b5:d5:32:c4:a8:bc:52:f5:fd:8d:57:5b:ca:ea:ac:75:
a2:dc:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:23 2026 by rpki-client