Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: QABO+NL4wLS2g6BniSi32j6CRrIPbUH/foNs92BD+fY=
Subject key identifier: 09:D9:01:D0:E6:EE:4F:E8:3B:30:D1:9F:DE:6B:EA:E0:0E:71:11:4B
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 01A17627AE8183947B5C4EF2E0C774EDAA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:01:14 +0000
Manifest this update: Mon 26 Oct 2026 03:01:14 +0000
Manifest next update: Tue 27 Oct 2026 03:01:14 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: 6i8Y8O35HSqecf70NAab5aNDH3yOIRsh0Jn7CnE9GrE=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:ae:81:83:94:7b:5c:4e:f2:e0:c7:74:ed:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Oct 26 03:01:14 2026 GMT
Not After : Oct 27 03:01:14 2026 GMT
Subject: CN=09d901d0e6ee4fe83b30d19fde6beae00e71114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:28:23:2f:ce:53:d0:d7:e0:f4:4f:bb:22:
b0:8a:0d:29:ac:d4:da:cc:b4:fd:aa:06:e2:1b:95:
a7:7c:f4:ac:03:33:b4:48:00:d0:35:8e:74:68:7e:
cb:8b:1e:d5:12:f6:26:ea:fc:33:88:ab:3b:64:53:
18:d0:d6:7a:b4:b8:33:b3:af:6c:ef:d4:d5:41:84:
eb:25:8b:28:77:14:c7:17:f9:2f:d7:20:9a:2f:31:
53:a2:e3:08:dd:82:17:da:26:f9:72:71:68:e0:7e:
ab:b8:df:84:7c:97:77:41:22:55:22:7a:9a:3b:a6:
86:e2:44:73:c3:cc:4e:d9:b3:7e:65:9c:d5:0b:66:
cd:66:45:ef:6a:37:6c:d0:01:e7:00:9c:c1:5f:d7:
c4:16:fb:92:62:cb:d9:67:72:1c:11:e3:93:a9:62:
8c:d3:40:24:af:0c:3e:6c:24:5b:9e:5f:83:7f:66:
8f:bf:08:c8:b9:51:f6:57:44:3c:32:6e:1d:0b:db:
bd:42:e5:a6:58:55:1a:73:89:73:98:e1:bd:6b:c1:
9f:d1:d5:3a:b3:b4:8b:78:a4:7e:05:f2:30:f8:c1:
d2:5f:ce:dd:38:eb:47:83:ab:48:14:2e:49:9f:ea:
ad:f6:54:b7:a9:1d:17:7f:a7:6b:92:d3:f3:db:fe:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:01:D0:E6:EE:4F:E8:3B:30:D1:9F:DE:6B:EA:E0:0E:71:11:4B
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:51:76:8f:a2:4a:aa:79:c5:da:b5:bf:ab:ae:a3:9c:39:
f1:bc:28:ad:28:cf:20:6a:ea:fd:43:f6:30:37:ec:3e:f6:e1:
09:5a:b7:dc:5e:07:b1:4a:1a:c5:4a:a1:93:62:61:0f:e2:b3:
9a:f6:56:a7:4d:54:ba:e0:ac:a9:53:3e:a1:c2:94:c1:ae:0e:
4d:84:6a:6e:ba:98:9b:58:db:8d:b8:88:72:2d:76:2d:94:19:
9b:de:cd:66:ec:4c:3e:1c:dd:0d:5f:99:39:fb:c6:7e:d1:2b:
38:d5:13:fc:5c:12:40:b5:3a:b9:a1:ac:1c:49:3d:f0:9b:d8:
42:4b:7e:79:94:c0:8f:29:6c:ac:c7:14:99:41:75:c4:db:30:
5f:b1:2a:dc:4d:cc:d9:17:dc:80:f1:36:d9:02:ab:f9:41:b4:
6f:60:78:b8:40:d7:ee:19:ab:e3:0d:35:c1:1c:08:3e:f3:e6:
bb:df:f4:6b:1a:43:30:66:ad:85:7f:a7:4e:be:3d:ae:97:ee:
ab:d6:ef:67:f3:e9:34:e8:34:d6:b5:9c:8e:c6:2a:3b:63:7a:
5e:6b:c4:90:ee:c7:51:11:26:f0:b7:3c:7f:35:bb:97:d5:43:
cd:36:5b:9b:01:1c:6b:0e:48:75:e3:f2:9d:5c:2e:c0:fe:d0:
68:46:72:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2J66Bg5R7XE7y4Md07aoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjEwYTIxZTRlNDZlOTkyYzg3ZjZiMzg4MjYwYjZmY2M2
MmVmYjcwHhcNMjYxMDI2MDMwMTE0WhcNMjYxMDI3MDMwMTE0WjAzMTEwLwYDVQQD
EygwOWQ5MDFkMGU2ZWU0ZmU4M2IzMGQxOWZkZTZiZWFlMDBlNzExMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GsoIy/OU9DX4PRPuyKwig0prNTa
zLT9qgbiG5WnfPSsAzO0SADQNY50aH7Lix7VEvYm6vwziKs7ZFMY0NZ6tLgzs69s
79TVQYTrJYsodxTHF/kv1yCaLzFTouMI3YIX2ib5cnFo4H6ruN+EfJd3QSJVInqa
O6aG4kRzw8xO2bN+ZZzVC2bNZkXvajds0AHnAJzBX9fEFvuSYsvZZ3IcEeOTqWKM
00Akrww+bCRbnl+Df2aPvwjIuVH2V0Q8Mm4dC9u9QuWmWFUac4lzmOG9a8Gf0dU6
s7SLeKR+BfIw+MHSX87dOOtHg6tIFC5Jn+qt9lS3qR0Xf6drktPz2/5IhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnZAdDm7k/oOzDRn95r6uAOcRFLMB8GA1UdIwQY
MBaAFGYhCiHk5G6ZLIf2s4gmC2/MYu+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt
YzU0MDFmNmQ5MWQxLzEvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx
LzEvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf1Rdo+i
Sqp5xdq1v6uuo5w58bworSjPIGrq/UP2MDfsPvbhCVq33F4HsUoaxUqhk2JhD+Kz
mvZWp01UuuCsqVM+ocKUwa4OTYRqbrqYm1jbjbiIci12LZQZm97NZuxMPhzdDV+Z
OfvGftErONUT/FwSQLU6uaGsHEk98JvYQkt+eZTAjylsrMcUmUF1xNswX7Eq3E3M
2RfcgPE22QKr+UG0b2B4uEDX7hmr4w01wRwIPvPmu9/0axpDMGathX+nTr49rpfu
q9bvZ/PpNOg01rWcjsYqO2N6XmvEkO7HUREm8Lc8fzW7l9VDzTZbmwEcaw5IdePy
nVwuwP7QaEZyjw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:52:10 2026 by rpki-client