Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: HxFVXVOIJ8Ww3Hq6saot8s+jmJkroRyGVqjRwDhA/84=
Subject key identifier: 44:25:64:6D:BE:31:2E:59:AE:0B:CA:B1:32:26:C2:02:6A:D7:AC:DF
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 01A001DDB1916768CDA572E1A9B19A708D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 09B1
Signing time: Fri 14 Aug 2026 20:01:41 +0000
Manifest this update: Fri 14 Aug 2026 20:01:41 +0000
Manifest next update: Sat 15 Aug 2026 20:01:41 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: 8+ao2s57TNPpYl3nf+t2jrSMyFINBdQYGRpVrrFE+gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:b1:91:67:68:cd:a5:72:e1:a9:b1:9a:70:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Aug 14 20:01:41 2026 GMT
Not After : Aug 15 20:01:41 2026 GMT
Subject: CN=4425646dbe312e59ae0bcab13226c2026ad7acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:41:29:24:47:e0:1a:bc:be:1c:6d:18:e6:
96:29:f6:93:56:bc:86:73:a1:3a:d4:95:5d:12:23:
64:4f:cd:98:60:82:c5:6e:8d:11:82:ca:0f:8e:84:
11:57:00:a9:cb:a5:69:df:a6:f0:46:ed:e4:f2:2e:
ba:e5:f0:9e:f5:8f:83:f5:6a:70:96:fe:4e:45:ba:
67:9d:38:b0:17:ad:13:fe:21:31:cf:b8:6a:84:e3:
ad:bb:95:69:da:06:e8:62:51:03:ca:b3:48:02:a7:
94:e7:c3:9d:6f:dd:ab:9a:bf:bd:ed:b7:26:b6:12:
30:66:db:36:c7:0b:87:72:e6:5a:bc:16:cb:af:db:
2c:1c:38:f0:3f:a8:96:d7:b3:78:97:c3:d9:89:fb:
cb:bc:52:8d:c7:d9:72:d3:72:e4:c1:2c:7e:4e:05:
e1:16:51:90:4e:82:2c:ce:6d:63:1a:93:dd:ab:01:
d2:4f:9c:95:58:64:31:aa:1e:4c:f7:2a:a4:40:90:
83:84:87:8e:21:6f:3c:01:01:4e:68:9b:63:65:0e:
b8:25:03:cb:ec:ca:0c:5b:29:58:a5:a0:99:00:65:
ee:7a:71:af:f9:59:69:99:87:3e:6c:e3:9d:3f:d4:
1d:f8:9b:05:7a:cd:6c:42:65:b2:db:9e:23:95:2b:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:64:6D:BE:31:2E:59:AE:0B:CA:B1:32:26:C2:02:6A:D7:AC:DF
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:84:b0:1b:7b:5b:93:ac:c3:4d:d2:cb:78:bf:05:3a:aa:
77:09:9b:dc:1c:c5:49:c6:bb:6d:98:87:82:4c:69:a0:ad:7d:
ba:be:7b:b3:68:4d:fa:19:ca:64:18:aa:1a:82:12:e9:82:69:
b8:31:02:2f:4f:7a:da:92:2c:a5:ad:e9:25:2f:09:c9:6f:b5:
34:03:07:96:28:29:9f:01:66:6c:f5:f1:5b:b9:76:c0:8f:51:
bc:b5:09:25:40:c5:5f:b2:a6:7e:7b:e3:16:2c:01:95:fa:1f:
94:f9:db:dc:16:32:00:5b:1f:e3:7d:c4:b0:3f:49:7c:b6:26:
29:2f:57:dc:38:20:b7:35:b2:69:d3:56:68:24:12:65:2e:13:
53:90:bb:74:50:39:56:82:70:31:03:b3:b3:7e:f7:4d:88:51:
cd:b5:0e:0b:ff:10:17:95:ad:a9:7a:e6:c1:39:60:29:5f:c2:
64:77:81:da:ea:f3:8b:58:77:8c:f1:6a:53:65:58:7f:41:f7:
9f:29:ba:83:5e:9b:8f:9c:a2:a5:ba:c9:2f:3d:db:5f:d3:3d:
cc:34:00:3d:b3:a6:f6:a2:cd:f7:7e:3b:b6:21:16:62:bd:77:
33:0c:ca:ab:5f:96:53:3a:64:a8:40:9e:db:6b:99:65:25:3b:
7c:cd:74:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3bGRZ2jNpXLhqbGacI0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjYwODE0MjAwMTQxWhcNMjYwODE1MjAwMTQxWjAzMTEwLwYDVQQD
Eyg0NDI1NjQ2ZGJlMzEyZTU5YWUwYmNhYjEzMjI2YzIwMjZhZDdhY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlblBKSRH4Bq8vhxtGOaWKfaTVryG
c6E61JVdEiNkT82YYILFbo0RgsoPjoQRVwCpy6Vp36bwRu3k8i665fCe9Y+D9Wpw
lv5ORbpnnTiwF60T/iExz7hqhOOtu5Vp2gboYlEDyrNIAqeU58Odb92rmr+97bcm
thIwZts2xwuHcuZavBbLr9ssHDjwP6iW17N4l8PZifvLvFKNx9ly03LkwSx+TgXh
FlGQToIszm1jGpPdqwHST5yVWGQxqh5M9yqkQJCDhIeOIW88AQFOaJtjZQ64JQPL
7MoMWylYpaCZAGXuenGv+VlpmYc+bOOdP9Qd+JsFes1sQmWy254jlStFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQlZG2+MS5ZrgvKsTImwgJq16zfMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfCEsBt7
W5Osw03Sy3i/BTqqdwmb3BzFSca7bZiHgkxpoK19ur57s2hN+hnKZBiqGoIS6YJp
uDECL0962pIspa3pJS8JyW+1NAMHligpnwFmbPXxW7l2wI9RvLUJJUDFX7Kmfnvj
FiwBlfoflPnb3BYyAFsf433EsD9JfLYmKS9X3DggtzWyadNWaCQSZS4TU5C7dFA5
VoJwMQOzs373TYhRzbUOC/8QF5WtqXrmwTlgKV/CZHeB2urzi1h3jPFqU2VYf0H3
nym6g16bj5yipbrJLz3bX9M9zDQAPbOm9qLN9347tiEWYr13MwzKq1+WUzpkqECe
22uZZSU7fM10Yg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:59 2026 by rpki-client