Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: Nbxi6D6t0NdZjSvoNTc5DzNRsdw7Y14NQ/9IM8o2US0=
Subject key identifier: 05:6F:D1:0E:A4:86:91:40:5B:11:9A:F7:E7:EB:28:EC:F2:0E:1F:F3
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 01A17C29586E25B2C8884904DF35E49417D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 0C35
Signing time: Tue 27 Oct 2026 07:00:46 +0000
Manifest this update: Tue 27 Oct 2026 07:00:46 +0000
Manifest next update: Wed 28 Oct 2026 07:00:46 +0000
Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: k9BbM6so2zWQ9d4NoGfXZrITwupoSEP3kNxMMhMeY0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:58:6e:25:b2:c8:88:49:04:df:35:e4:94:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Oct 27 07:00:46 2026 GMT
Not After : Oct 28 07:00:46 2026 GMT
Subject: CN=056fd10ea48691405b119af7e7eb28ecf20e1ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:f6:22:c1:da:33:b0:93:63:04:1b:39:f2:
04:ac:aa:21:3e:c6:7e:86:2a:0f:49:0b:7c:48:22:
4a:ba:6c:90:dd:75:2d:4e:66:c2:5a:47:da:aa:d9:
bc:be:a3:4e:50:87:43:3d:b1:85:5c:57:f2:2a:89:
d9:9d:84:cb:81:3d:a1:9b:7f:96:da:66:c7:d3:e0:
aa:19:ac:41:f8:3e:5e:bf:66:26:8c:45:ee:2b:fc:
57:71:f1:35:63:5c:20:9a:e1:68:c9:06:22:88:c4:
01:04:f1:c2:f6:52:f4:fa:62:36:b6:30:a9:49:89:
80:45:d0:8f:c9:ea:50:bb:38:9b:c9:93:9d:01:15:
84:f7:c2:88:dd:9c:8a:a0:cb:23:07:37:96:bd:06:
e0:a0:2a:e3:7a:b2:14:22:1c:e6:f7:a5:8c:36:10:
9f:88:0b:29:37:42:a5:db:7e:44:e5:8b:4c:6b:13:
13:f0:e7:1d:93:57:84:dc:04:51:36:ac:59:d6:52:
d6:b5:29:aa:9e:2f:ce:33:41:73:c6:45:4a:f0:84:
c6:3f:24:6e:16:64:2a:06:de:9a:f4:5c:7a:07:3e:
73:dd:8b:b8:d2:59:dc:35:b8:70:8a:64:9f:6c:03:
49:7f:ca:5a:0b:19:f7:99:1e:8a:a7:9b:00:8e:bd:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:D1:0E:A4:86:91:40:5B:11:9A:F7:E7:EB:28:EC:F2:0E:1F:F3
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0f:ac:5b:8c:22:6f:a7:56:c8:ba:58:fb:5b:e9:8c:cb:ac:
e0:98:34:9e:43:f9:12:45:d3:f0:5f:38:6a:f7:10:45:c0:ad:
03:c3:cc:36:0b:75:cd:af:06:1f:99:9e:83:e8:29:b1:cc:ab:
3d:f3:f8:00:80:71:3f:c3:2f:51:f0:5f:a4:d1:c5:fd:ab:12:
e9:19:55:5f:fa:6a:a7:44:de:e6:15:44:8c:06:bd:92:7a:5f:
c9:93:59:48:7c:13:c3:55:d5:8c:e6:c4:7e:13:02:03:cb:a8:
d8:63:b8:11:4c:64:fc:03:7c:e1:22:94:9f:3b:fc:a4:03:37:
36:b0:83:a0:1e:c3:b2:1d:41:72:a2:36:e3:4f:49:73:ad:c5:
80:40:99:65:ea:8f:d8:30:4a:d8:40:28:da:d3:b9:a6:b2:67:
bb:e4:4e:c4:74:13:8a:b4:95:05:1b:37:df:d3:4a:b4:d3:c4:
67:1c:75:a7:b9:1f:d8:eb:25:fe:ff:e1:0d:cf:69:f9:95:f3:
12:1d:1f:3a:61:9d:b3:cb:cd:57:8b:fe:2e:a0:86:43:02:0a:
07:9e:26:8d:b7:a6:33:05:fc:72:54:6d:8b:f2:87:11:ef:56:
a6:c7:1a:6b:50:84:ce:97:77:fc:57:33:9d:94:d2:14:05:3c:
c7:dd:ba:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KVhuJbLIiEkE3zXklBfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk
YzliYjYwHhcNMjYxMDI3MDcwMDQ2WhcNMjYxMDI4MDcwMDQ2WjAzMTEwLwYDVQQD
EygwNTZmZDEwZWE0ODY5MTQwNWIxMTlhZjdlN2ViMjhlY2YyMGUxZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pv2IsHaM7CTYwQbOfIErKohPsZ+
hioPSQt8SCJKumyQ3XUtTmbCWkfaqtm8vqNOUIdDPbGFXFfyKonZnYTLgT2hm3+W
2mbH0+CqGaxB+D5ev2YmjEXuK/xXcfE1Y1wgmuFoyQYiiMQBBPHC9lL0+mI2tjCp
SYmARdCPyepQuzibyZOdARWE98KI3ZyKoMsjBzeWvQbgoCrjerIUIhzm96WMNhCf
iAspN0Kl235E5YtMaxMT8Ocdk1eE3ARRNqxZ1lLWtSmqni/OM0FzxkVK8ITGPyRu
FmQqBt6a9Fx6Bz5z3Yu40lncNbhwimSfbANJf8paCxn3mR6Kp5sAjr2CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVv0Q6khpFAWxGa9+frKOzyDh/zMB8GA1UdIwQY
MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt
Mjk4MzhmNGFjNjBlLzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl
LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA+sW4wi
b6dWyLpY+1vpjMus4Jg0nkP5EkXT8F84avcQRcCtA8PMNgt1za8GH5meg+gpscyr
PfP4AIBxP8MvUfBfpNHF/asS6RlVX/pqp0Te5hVEjAa9knpfyZNZSHwTw1XVjObE
fhMCA8uo2GO4EUxk/AN84SKUnzv8pAM3NrCDoB7Dsh1BcqI2409Jc63FgECZZeqP
2DBK2EAo2tO5prJnu+ROxHQTirSVBRs339NKtNPEZxx1p7kf2Osl/v/hDc9p+ZXz
Eh0fOmGds8vNV4v+LqCGQwIKB54mjbemMwX8clRti/KHEe9Wpscaa1CEzpd3/Fcz
nZTSFAU8x926xw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:55 2026 by rpki-client