Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: sOhws7+OI+BypZoFZdwWtJMrCNo4qFXJcKvY32p/hfs=
Subject key identifier: 42:7A:08:8D:C4:D2:2E:A2:C3:26:10:57:FF:BD:EA:C5:E6:C6:11:8C
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 01A14383EEFD1BE9CAFB6848DD1BC66A3428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0DCB
Signing time: Fri 16 Oct 2026 07:01:22 +0000
Manifest this update: Fri 16 Oct 2026 07:01:22 +0000
Manifest next update: Sat 17 Oct 2026 07:01:22 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: qiU0A3p9kTvw1AbQ1JSpYl/EBR0sRIT6UuoiVfaR0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:83:ee:fd:1b:e9:ca:fb:68:48:dd:1b:c6:6a:34:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Oct 16 07:01:22 2026 GMT
Not After : Oct 17 07:01:22 2026 GMT
Subject: CN=427a088dc4d22ea2c3261057ffbdeac5e6c6118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:cd:b9:91:a7:e7:79:46:e3:1b:21:9d:27:
73:0c:7d:56:8e:1f:eb:93:83:65:63:2f:63:bb:9f:
46:4c:66:96:ca:45:50:88:69:5c:ba:d6:38:8e:7c:
eb:47:0b:9d:a2:54:85:29:5d:e5:55:20:b6:78:f4:
39:b1:40:33:08:05:64:f0:f3:09:f6:3e:d0:3b:74:
d5:f5:48:fa:76:37:d0:5c:85:69:85:69:56:a8:40:
9d:b3:5b:5c:38:ac:63:8b:6e:1b:ad:82:a2:de:8a:
9a:89:45:38:7a:46:60:e9:95:07:c8:be:c0:d3:36:
7c:37:fe:67:0f:a5:9d:4f:6c:65:41:56:43:ed:e1:
b0:45:f3:b7:dd:f3:df:f6:b5:eb:d0:1d:80:9a:36:
cf:ba:99:e0:f9:3d:fa:d8:b7:55:14:75:df:cb:84:
ba:4b:af:3c:4f:e9:61:41:59:7f:6d:23:fe:54:93:
2c:a7:c1:ef:bd:9f:55:15:c0:d6:73:25:bf:3a:c6:
08:79:9c:87:76:6b:b4:53:c6:35:29:14:ba:09:41:
c1:cd:dd:83:a4:cd:e4:0c:fc:da:b2:6d:5b:61:a0:
16:59:b7:16:e3:7c:69:15:66:e0:a1:9b:b5:a7:fe:
91:61:7e:74:21:9b:ab:2a:30:8c:b7:3e:03:0b:71:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:08:8D:C4:D2:2E:A2:C3:26:10:57:FF:BD:EA:C5:E6:C6:11:8C
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:d3:68:cf:ae:1c:47:f8:7f:1c:d4:e2:89:f9:45:2f:a2:
af:d5:50:71:93:9b:2e:98:66:78:e7:67:59:a7:18:9f:46:b3:
3a:12:5e:b7:76:9d:ad:28:bd:cb:2b:2b:fd:16:79:a7:d4:43:
aa:31:95:24:86:5a:c6:31:e2:4f:df:65:89:17:b5:37:ff:fd:
49:7d:18:de:42:85:be:d2:e3:c2:28:99:1b:1c:c1:7e:04:30:
b1:e7:f9:ea:31:49:28:4d:2d:06:60:7c:6d:dc:94:20:38:89:
94:48:89:f9:bc:d8:0a:39:16:61:98:ad:d6:0c:9d:74:1b:7e:
57:aa:ee:ef:4a:5e:3d:09:14:82:a6:2b:0e:25:67:dd:45:44:
68:44:81:fd:fd:24:bb:a1:f7:04:c8:db:86:dc:4f:1e:4c:eb:
d9:e0:1b:8d:70:ac:9d:9c:07:87:71:7d:c8:fa:22:7c:5a:f4:
a0:53:ee:28:04:03:2f:63:61:c0:19:5c:6e:07:73:9e:a9:d7:
23:9e:d0:8a:98:73:d0:4e:00:af:84:29:55:bc:81:0f:ab:23:
17:1d:8f:6e:53:0e:c6:d4:04:6c:d6:63:c4:0f:fa:cb:91:0c:
7b:f3:0a:ea:ce:b6:bc:2e:aa:50:04:82:15:50:b2:8e:84:19:
a1:65:5f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFDg+79G+nK+2hI3RvGajQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQwZTM5ZDc4ZmM2MjAyMjU1YTViNGFkYjU0NTgzZDlk
ZWRkY2UwHhcNMjYxMDE2MDcwMTIyWhcNMjYxMDE3MDcwMTIyWjAzMTEwLwYDVQQD
Eyg0MjdhMDg4ZGM0ZDIyZWEyYzMyNjEwNTdmZmJkZWFjNWU2YzYxMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqErNuZGn53lG4xshnSdzDH1Wjh/r
k4NlYy9ju59GTGaWykVQiGlcutY4jnzrRwudolSFKV3lVSC2ePQ5sUAzCAVk8PMJ
9j7QO3TV9Uj6djfQXIVphWlWqECds1tcOKxji24brYKi3oqaiUU4ekZg6ZUHyL7A
0zZ8N/5nD6WdT2xlQVZD7eGwRfO33fPf9rXr0B2AmjbPupng+T362LdVFHXfy4S6
S688T+lhQVl/bSP+VJMsp8HvvZ9VFcDWcyW/OsYIeZyHdmu0U8Y1KRS6CUHBzd2D
pM3kDPzasm1bYaAWWbcW43xpFWbgoZu1p/6RYX50IZurKjCMtz4DC3H0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ6CI3E0i6iwyYQV/+96sXmxhGMMB8GA1UdIwQY
MBaAFM0tDjnXj8YgIlWltK21RYPZ3t3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQt
MWExOTc5MmExZDI2LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQtMWExOTc5MmExZDI2
LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8zTaM+u
HEf4fxzU4on5RS+ir9VQcZObLphmeOdnWacYn0azOhJet3adrSi9yysr/RZ5p9RD
qjGVJIZaxjHiT99liRe1N//9SX0Y3kKFvtLjwiiZGxzBfgQwsef56jFJKE0tBmB8
bdyUIDiJlEiJ+bzYCjkWYZit1gyddBt+V6ru70pePQkUgqYrDiVn3UVEaESB/f0k
u6H3BMjbhtxPHkzr2eAbjXCsnZwHh3F9yPoifFr0oFPuKAQDL2NhwBlcbgdznqnX
I57Qiphz0E4Ar4QpVbyBD6sjFx2PblMOxtQEbNZjxA/6y5EMe/MK6s62vC6qUASC
FVCyjoQZoWVfeg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 11:50:43 2026 by rpki-client