Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: 0zmnNrRpVYvjaFB4hrvBdqDLckRDlxVKSTyZJPpjXnU=
Subject key identifier: B0:E8:F1:FF:98:A5:43:EE:F8:A4:AA:06:AF:98:8F:5F:5A:25:70:C0
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 01A17A717C7B7DD6833BF8134B1BB12DB6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 1668
Signing time: Mon 26 Oct 2026 23:00:19 +0000
Manifest this update: Mon 26 Oct 2026 23:00:19 +0000
Manifest next update: Tue 27 Oct 2026 23:00:19 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: QvsnN2y7qbyZDjxnFP8dLkpMGZ8FtWMWJTmUUmXLC4Q=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:7c:7b:7d:d6:83:3b:f8:13:4b:1b:b1:2d:b6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Oct 26 23:00:19 2026 GMT
Not After : Oct 27 23:00:19 2026 GMT
Subject: CN=b0e8f1ff98a543eef8a4aa06af988f5f5a2570c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:16:2e:0d:c0:41:44:28:fc:c1:98:a8:a9:
2a:d9:d1:23:a4:69:30:62:e7:af:a3:1d:54:c2:7f:
95:49:96:6f:82:46:bd:a1:22:24:db:af:57:33:62:
53:dc:a2:15:41:cb:ef:73:05:64:a5:e5:be:0c:cd:
f6:d5:55:50:32:17:2e:f2:92:7c:bd:44:c8:e5:32:
4c:cb:82:84:e5:40:7b:ac:fd:45:8c:1f:96:eb:e9:
cd:c9:f7:03:df:7f:9d:ef:b8:e9:cd:4b:ef:81:9d:
06:f1:cb:16:59:f5:8b:8c:7e:86:11:88:e9:09:b6:
d2:0c:af:31:95:a1:0e:c9:b4:89:4d:8e:c6:7a:50:
67:bd:0e:23:59:0b:f4:ff:74:4c:62:e6:f3:43:f2:
9f:a7:da:c8:ca:14:6c:4d:ed:c5:e4:e0:58:26:68:
5e:53:d9:11:56:be:c3:27:8a:7a:cc:fd:7e:44:5c:
ad:49:0b:d9:5b:20:4c:bf:d9:41:f6:35:ba:06:3c:
57:91:2d:c2:f3:56:fe:bb:8e:15:83:55:13:f9:ab:
d0:14:88:ef:e2:0b:e2:49:da:b4:2a:15:a6:0a:37:
f9:66:46:bc:22:a2:3d:85:a8:02:cc:7c:c1:e2:33:
de:72:61:b6:f1:a6:b4:4a:24:29:7d:a7:7c:b3:39:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:F1:FF:98:A5:43:EE:F8:A4:AA:06:AF:98:8F:5F:5A:25:70:C0
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:61:8c:8e:9e:32:c4:89:25:5d:1c:2c:d5:0d:94:3c:19:
ed:a5:40:99:34:ba:7b:e2:a7:e4:32:48:71:5b:f8:7e:44:73:
47:98:48:cc:49:40:53:d5:5b:59:9b:ce:b4:6b:bb:07:1f:1d:
50:5e:b0:7f:f3:c6:91:a6:a2:03:63:b9:12:2e:bb:1e:14:5d:
b4:c3:7f:a9:ea:3d:2b:c4:aa:c7:9a:e7:39:63:01:85:3f:c8:
c8:e5:d6:3e:d6:eb:a1:d8:7e:fd:ca:5d:61:b7:35:f5:89:b5:
37:eb:82:fb:23:22:40:49:be:6b:e7:58:a6:d6:91:ca:a4:34:
50:20:9e:94:56:2b:ad:1e:70:ed:ec:9d:75:56:85:f2:47:82:
13:89:b7:62:4f:34:40:c2:1e:aa:4a:09:b4:06:17:75:a5:c8:
16:43:f4:ed:a0:d4:14:84:41:e4:c7:1e:7c:68:33:a5:e9:b3:
e8:ff:21:02:5f:72:b4:e7:9a:94:d5:6f:fc:73:6d:c5:44:bf:
88:0b:c0:9e:b7:82:fc:b0:36:1e:af:b9:ca:77:91:05:9c:cf:
df:60:dd:58:76:b5:84:40:d6:b9:2d:95:47:8e:e1:81:94:9f:
1b:5b:8f:ec:6e:f3:c0:42:d7:b4:2e:29:14:6f:bd:ce:21:53:
83:81:da:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cXx7fdaDO/gTSxuxLbavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1
YTgzZWEwHhcNMjYxMDI2MjMwMDE5WhcNMjYxMDI3MjMwMDE5WjAzMTEwLwYDVQQD
EyhiMGU4ZjFmZjk4YTU0M2VlZjhhNGFhMDZhZjk4OGY1ZjVhMjU3MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNkWLg3AQUQo/MGYqKkq2dEjpGkw
Yuevox1Uwn+VSZZvgka9oSIk269XM2JT3KIVQcvvcwVkpeW+DM321VVQMhcu8pJ8
vUTI5TJMy4KE5UB7rP1FjB+W6+nNyfcD33+d77jpzUvvgZ0G8csWWfWLjH6GEYjp
CbbSDK8xlaEOybSJTY7GelBnvQ4jWQv0/3RMYubzQ/Kfp9rIyhRsTe3F5OBYJmhe
U9kRVr7DJ4p6zP1+RFytSQvZWyBMv9lB9jW6BjxXkS3C81b+u44Vg1UT+avQFIjv
4gviSdq0KhWmCjf5Zka8IqI9hagCzHzB4jPecmG28aa0SiQpfad8sznoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDo8f+YpUPu+KSqBq+Yj19aJXDAMB8GA1UdIwQY
MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt
MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2
LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldVhjI6e
MsSJJV0cLNUNlDwZ7aVAmTS6e+Kn5DJIcVv4fkRzR5hIzElAU9VbWZvOtGu7Bx8d
UF6wf/PGkaaiA2O5Ei67HhRdtMN/qeo9K8Sqx5rnOWMBhT/IyOXWPtbrodh+/cpd
Ybc19Ym1N+uC+yMiQEm+a+dYptaRyqQ0UCCelFYrrR5w7eyddVaF8keCE4m3Yk80
QMIeqkoJtAYXdaXIFkP07aDUFIRB5McefGgzpemz6P8hAl9ytOealNVv/HNtxUS/
iAvAnreC/LA2Hq+5yneRBZzP32DdWHa1hEDWuS2VR47hgZSfG1uP7G7zwELXtC4p
FG+9ziFTg4HaoA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:58:26 2026 by rpki-client