Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: EjdIgVdxIChVQzJ4mCnoPFPR2hbapmANI5rvoP1V+LA=
Subject key identifier: 63:D7:C2:A6:91:68:32:E7:0C:8D:3E:68:3A:C5:9D:6A:2E:DE:37:E3
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 01A174A7297730EFB7EAE53A0659BA697FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1A54
Signing time: Sun 25 Oct 2026 20:01:14 +0000
Manifest this update: Sun 25 Oct 2026 20:01:14 +0000
Manifest next update: Mon 26 Oct 2026 20:01:14 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: zs6fcs2O+zRNyNLMh1wuvbmg8nZmbDaefH9s+0ajTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a7:29:77:30:ef:b7:ea:e5:3a:06:59:ba:69:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Oct 25 20:01:14 2026 GMT
Not After : Oct 26 20:01:14 2026 GMT
Subject: CN=63d7c2a6916832e70c8d3e683ac59d6a2ede37e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:fc:68:d6:99:7b:ae:12:84:00:5e:39:e9:
27:21:20:2a:59:90:b8:07:06:ec:83:71:31:8f:a6:
64:36:0c:69:35:0f:bc:e0:61:8f:7d:ee:5c:55:43:
c7:1d:d9:b5:3d:10:cc:a8:99:17:db:cf:4f:13:e2:
b6:6d:e2:b4:9c:b3:57:8d:a2:a9:94:cf:a9:6d:b8:
38:32:f2:26:15:75:ac:82:1f:83:06:36:02:b4:01:
d2:6b:6d:12:5a:af:ff:db:06:e9:1f:6b:18:bb:a8:
e3:49:8e:76:f0:9a:34:e2:49:29:85:45:33:d6:9d:
20:12:1e:70:20:f9:8d:b8:ec:af:14:66:15:32:d5:
69:26:d1:72:9e:e4:0f:cd:fb:9d:56:f7:94:8d:48:
9a:73:0c:be:4f:b4:55:91:33:ce:ed:cb:82:f9:54:
b7:23:e2:a5:f6:ad:8c:cf:dc:2d:0c:7f:65:4b:0d:
8d:75:53:d6:78:65:01:72:ae:24:19:44:07:f5:ef:
4f:22:93:54:9a:b3:60:1f:27:dc:7b:2b:5d:b9:08:
3f:41:d9:c6:4a:f1:0c:b4:f8:cc:b9:28:91:4b:49:
a9:7b:90:0a:5c:6c:f2:ff:88:23:06:b0:16:24:b5:
18:f3:c8:cc:37:ed:15:40:3b:cd:da:aa:d6:ff:58:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:C2:A6:91:68:32:E7:0C:8D:3E:68:3A:C5:9D:6A:2E:DE:37:E3
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:8f:c1:90:ad:50:9f:dd:e4:1c:d1:8b:9e:49:ad:d5:fe:
cc:20:f3:7c:28:39:d9:51:8b:b3:a8:66:4a:7d:24:e5:41:b6:
d1:17:87:7e:c0:f6:7a:0a:87:84:64:7e:1c:95:c8:11:48:44:
8c:a6:a7:4a:d9:d3:44:9f:ea:d8:a2:e4:c0:36:7d:d9:a6:21:
06:8c:59:d4:cc:44:ea:04:e3:e6:4b:32:23:22:d5:37:02:2f:
59:f0:1f:65:24:2e:03:c2:dd:9f:2d:89:23:f7:6b:61:8d:f9:
f0:f5:ac:ac:db:db:42:d4:72:b4:1c:57:23:59:d0:ba:d7:7c:
2b:38:1f:3c:b6:ee:af:fa:0d:23:54:9f:37:72:30:8b:30:c0:
54:53:93:a9:23:02:3e:7f:4a:ee:60:3d:00:de:3e:98:74:1b:
75:85:c3:79:9c:88:6b:55:01:ff:a1:76:96:49:7d:17:e5:7e:
0c:38:02:fd:d8:13:ab:c6:cc:e0:f3:f1:57:90:43:9e:ca:e8:
5b:e8:90:2b:1f:a6:1d:36:70:d2:1c:75:79:2c:9e:a4:3e:16:
3d:05:53:08:c2:b6:ec:7f:c0:e7:28:1d:c3:f9:73:14:04:b0:
56:cb:22:14:0c:1b:f6:50:28:22:03:d4:5f:0e:66:f8:b8:7b:
2e:d0:c6:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0pyl3MO+36uU6Blm6aX+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh
MDhjZGYwHhcNMjYxMDI1MjAwMTE0WhcNMjYxMDI2MjAwMTE0WjAzMTEwLwYDVQQD
Eyg2M2Q3YzJhNjkxNjgzMmU3MGM4ZDNlNjgzYWM1OWQ2YTJlZGUzN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi/8aNaZe64ShABeOeknISAqWZC4
Bwbsg3Exj6ZkNgxpNQ+84GGPfe5cVUPHHdm1PRDMqJkX289PE+K2beK0nLNXjaKp
lM+pbbg4MvImFXWsgh+DBjYCtAHSa20SWq//2wbpH2sYu6jjSY528Jo04kkphUUz
1p0gEh5wIPmNuOyvFGYVMtVpJtFynuQPzfudVveUjUiacwy+T7RVkTPO7cuC+VS3
I+Kl9q2Mz9wtDH9lSw2NdVPWeGUBcq4kGUQH9e9PIpNUmrNgHyfceytduQg/QdnG
SvEMtPjMuSiRS0mpe5AKXGzy/4gjBrAWJLUY88jMN+0VQDvN2qrW/1gFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPXwqaRaDLnDI0+aDrFnWou3jfjMB8GA1UdIwQY
MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt
NzhkMTE0NGFkOTY3LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3
LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEKPwZCt
UJ/d5BzRi55JrdX+zCDzfCg52VGLs6hmSn0k5UG20ReHfsD2egqHhGR+HJXIEUhE
jKanStnTRJ/q2KLkwDZ92aYhBoxZ1MxE6gTj5ksyIyLVNwIvWfAfZSQuA8Ldny2J
I/drYY358PWsrNvbQtRytBxXI1nQutd8KzgfPLbur/oNI1SfN3IwizDAVFOTqSMC
Pn9K7mA9AN4+mHQbdYXDeZyIa1UB/6F2lkl9F+V+DDgC/dgTq8bM4PPxV5BDnsro
W+iQKx+mHTZw0hx1eSyepD4WPQVTCMK27H/A5ygdw/lzFASwVssiFAwb9lAoIgPU
Xw5m+Lh7LtDGDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:03:31 2026 by rpki-client