Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: T30fIqmHELl5QMSC5oo145galD7SpwRF5Ca0+q8VGvo=
Subject key identifier: 42:BD:06:2D:EE:EA:FD:83:C6:21:A4:B3:C1:CF:C7:3B:EC:E8:C5:2C
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01A184F5FAC2CAD377E59D7C08262CFFA103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 1433
Signing time: Thu 29 Oct 2026 00:01:15 +0000
Manifest this update: Thu 29 Oct 2026 00:01:15 +0000
Manifest next update: Fri 30 Oct 2026 00:01:15 +0000
Files and hashes: 1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: 1r89k3HOxHl700ARwV5Pjg8kC2YQshvtslJTFb4oxE8=)
2: i6AwdNAuTyJSHPf_YsyDqvl5Cd0.roa (hash: mZrKPX4LOnWOHZfVoTbvehW4RscQhxVRB6W3fx72ccU=)
3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f5:fa:c2:ca:d3:77:e5:9d:7c:08:26:2c:ff:a1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Oct 29 00:01:15 2026 GMT
Not After : Oct 30 00:01:15 2026 GMT
Subject: CN=42bd062deeeafd83c621a4b3c1cfc73bece8c52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:d1:1a:30:8f:e3:ab:b2:20:15:ff:6d:9e:
39:58:60:a0:e0:37:31:4c:0f:af:e3:2f:b0:72:b0:
2b:84:ce:8d:ea:02:c7:1d:50:c6:cd:92:61:7d:97:
cf:7f:2c:db:fb:44:bf:a4:47:c0:3c:ff:14:ce:8b:
a6:be:b6:22:c0:be:30:04:e7:35:92:75:58:c3:c2:
be:d5:0e:c4:d7:83:9c:e2:94:f3:27:b3:5b:ec:94:
26:5a:9b:f4:58:c0:64:0e:62:39:43:f8:24:b9:95:
4d:5b:56:96:db:3e:91:4f:3c:b7:ec:40:a6:6c:24:
52:d3:b1:32:56:64:2a:fb:93:3f:86:39:94:a2:2a:
90:0d:a1:44:dc:23:2b:36:9f:55:5a:99:7b:a5:9a:
5a:29:05:ce:95:fb:a0:52:0c:2e:a6:19:f4:64:4e:
b8:4b:7b:14:07:2f:cc:0e:24:8f:75:94:fc:31:8d:
2e:45:95:75:5b:ef:42:43:bf:b7:f3:21:f8:62:99:
93:24:0b:6e:a4:39:04:90:89:84:24:49:4c:52:7e:
c0:3e:6a:f3:d9:ec:aa:24:e0:34:5d:76:12:7d:36:
63:2e:b5:c2:d3:fc:03:ef:70:a7:a6:4f:24:3a:0a:
eb:21:89:60:f4:63:9c:5a:cf:da:28:4b:fb:23:57:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:06:2D:EE:EA:FD:83:C6:21:A4:B3:C1:CF:C7:3B:EC:E8:C5:2C
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:19:59:35:0c:66:67:3f:a1:25:c3:f9:f7:79:d6:db:0d:
2f:1e:b7:3e:98:11:bd:49:a9:8f:ca:8e:85:b4:0c:eb:ed:e7:
d1:78:d3:7b:b7:5c:3a:c6:16:c0:d9:e8:83:77:01:65:23:11:
a9:60:86:b0:62:0e:2c:d9:59:d9:f6:38:90:9a:4a:08:3e:53:
bf:b2:d0:44:1c:0f:54:a4:1b:60:e3:fa:ed:f7:e2:ad:c3:0f:
cb:b6:6b:c3:4c:d1:da:64:92:08:db:99:75:d8:09:44:f0:fb:
8b:5e:7f:4c:ed:60:d0:d2:5c:48:a0:b6:0c:c6:56:eb:d5:d2:
44:1b:69:e7:f9:c4:d3:90:46:64:af:8d:e5:57:ec:2d:bf:f1:
14:5d:55:08:f8:8b:2c:c2:be:d8:1f:de:11:5c:79:86:c4:01:
09:d9:7c:ae:7a:32:af:13:10:c6:3c:15:81:fd:0c:fe:3f:19:
ff:04:78:85:a7:cd:db:79:66:a1:64:a0:fb:f0:cc:1c:c8:ab:
6c:d4:4a:b0:b5:3d:45:60:ed:80:a3:88:68:5a:52:03:a5:e7:
80:cb:77:1d:fc:b7:d3:cc:39:cf:ad:bc:8c:58:b5:4b:3a:05:
ef:b0:af:78:0f:d9:7b:1b:19:74:f0:ae:9e:14:df:ca:de:96:
3c:46:cc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGE9frCytN35Z18CCYs/6EDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh
N2Y4ZjYwHhcNMjYxMDI5MDAwMTE1WhcNMjYxMDMwMDAwMTE1WjAzMTEwLwYDVQQD
Eyg0MmJkMDYyZGVlZWFmZDgzYzYyMWE0YjNjMWNmYzczYmVjZThjNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyHRGjCP46uyIBX/bZ45WGCg4Dcx
TA+v4y+wcrArhM6N6gLHHVDGzZJhfZfPfyzb+0S/pEfAPP8UzoumvrYiwL4wBOc1
knVYw8K+1Q7E14Oc4pTzJ7Nb7JQmWpv0WMBkDmI5Q/gkuZVNW1aW2z6RTzy37ECm
bCRS07EyVmQq+5M/hjmUoiqQDaFE3CMrNp9VWpl7pZpaKQXOlfugUgwuphn0ZE64
S3sUBy/MDiSPdZT8MY0uRZV1W+9CQ7+38yH4YpmTJAtupDkEkImEJElMUn7APmrz
2eyqJOA0XXYSfTZjLrXC0/wD73Cnpk8kOgrrIYlg9GOcWs/aKEv7I1fBQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK9Bi3u6v2DxiGks8HPxzvs6MUsMB8GA1UdIwQY
MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt
NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh
LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcgZWTUM
Zmc/oSXD+fd51tsNLx63PpgRvUmpj8qOhbQM6+3n0XjTe7dcOsYWwNnog3cBZSMR
qWCGsGIOLNlZ2fY4kJpKCD5Tv7LQRBwPVKQbYOP67ffircMPy7Zrw0zR2mSSCNuZ
ddgJRPD7i15/TO1g0NJcSKC2DMZW69XSRBtp5/nE05BGZK+N5VfsLb/xFF1VCPiL
LMK+2B/eEVx5hsQBCdl8rnoyrxMQxjwVgf0M/j8Z/wR4hafN23lmoWSg+/DMHMir
bNRKsLU9RWDtgKOIaFpSA6XngMt3Hfy308w5z628jFi1SzoF77CveA/ZexsZdPCu
nhTfyt6WPEbMNw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:58:00 2026 by rpki-client