Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: rz0cymL0neXSu8NvYR8sg/fcbDvkeX3H36Sccb/Exdc=
Subject key identifier: 22:0E:B9:36:31:FD:1E:12:91:33:23:98:91:CC:70:2A:27:5D:27:34
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01A089430C2B76CDBDED6BACC7D05EA5B90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 065A
Signing time: Thu 10 Sep 2026 03:01:07 +0000
Manifest this update: Thu 10 Sep 2026 03:01:07 +0000
Manifest next update: Fri 11 Sep 2026 03:01:07 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: 7JjSPa1zXM8cn9zbhLnz/YWi+cMmA3PFaGUohLyz1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:0c:2b:76:cd:bd:ed:6b:ac:c7:d0:5e:a5:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Sep 10 03:01:07 2026 GMT
Not After : Sep 11 03:01:07 2026 GMT
Subject: CN=220eb93631fd1e129133239891cc702a275d2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:39:7f:d9:9f:00:fa:8b:8f:b7:3a:23:d2:
7e:74:02:d4:96:32:b3:eb:b4:70:c2:7d:88:49:36:
ad:a1:ca:ea:32:94:f5:d8:31:82:5e:af:91:66:6e:
80:07:4a:5a:d8:3c:db:69:12:0c:9f:bf:55:82:85:
d0:44:49:14:82:c5:29:85:6b:77:98:e1:26:cd:f0:
00:35:0a:2a:f9:51:29:4a:b6:ce:f6:83:59:e0:1a:
f6:2c:82:21:c2:21:9a:00:00:07:34:24:a4:6d:e7:
f0:85:3e:07:68:fd:db:d2:7a:0d:4c:3b:de:6e:d1:
b4:3b:fd:7e:ee:ea:f5:94:bf:7a:5a:bd:50:4b:a9:
f6:d7:b0:d3:5a:92:b5:41:48:b8:1d:f0:76:29:eb:
10:16:b8:b4:6a:c2:63:a6:f0:f7:ab:35:d4:63:ad:
90:17:e9:93:6f:20:e3:ac:99:8c:0f:80:86:ca:1a:
79:cb:06:e9:79:e8:5d:98:eb:a7:ec:a6:75:6c:0e:
ea:a9:af:92:1a:ed:f1:0a:16:2c:23:02:fb:0b:17:
30:f1:0d:77:14:82:92:2a:80:78:63:68:29:63:22:
4e:14:d1:eb:65:c1:8b:63:f3:03:58:bf:aa:a8:ab:
ad:f2:80:36:e6:72:d2:52:ae:1c:30:cd:14:ed:aa:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:B9:36:31:FD:1E:12:91:33:23:98:91:CC:70:2A:27:5D:27:34
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0a:7b:25:c3:4d:77:85:70:8d:4d:00:14:04:25:80:ed:71:
96:0d:e9:d2:17:a8:79:75:b4:2b:d6:4d:37:63:c5:83:85:7c:
17:ff:95:52:60:69:0d:8a:10:ed:41:a5:39:b4:53:2b:6c:53:
08:2f:56:e7:b8:eb:d1:4b:2a:f5:2f:ba:1b:43:3e:26:08:5a:
b3:2e:e7:c8:88:dd:3c:55:d3:e6:b3:1e:ac:3d:9d:2c:e3:f2:
03:0e:ff:2a:8a:68:10:24:6b:09:06:40:f6:aa:ba:5c:d8:9a:
15:c6:e1:2d:29:3c:f0:9a:00:4d:c8:de:22:fb:9b:c5:0d:53:
04:24:89:c0:29:2c:1d:ff:b5:59:cc:99:65:fe:ea:53:99:c5:
a0:c9:7c:6f:77:ad:55:05:ea:a7:ee:15:01:d5:52:1e:db:27:
52:65:e2:c8:d7:da:95:03:4d:56:24:20:5a:40:44:c1:73:e8:
fd:f7:d6:ef:1e:73:20:a8:11:e2:4f:30:7a:d2:8c:89:95:b9:
5f:93:c7:79:f3:bf:b3:6a:93:89:0d:57:74:32:2c:82:90:ef:
0f:9c:b0:35:fd:84:f8:fc:2f:91:51:09:df:ed:35:73:fd:05:
b8:cb:f9:00:2c:18:e7:10:f6:fa:a5:ff:e7:13:86:e2:14:4a:
9f:af:00:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQwwrds297Wusx9BepbkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm
OTM4MjcwHhcNMjYwOTEwMDMwMTA3WhcNMjYwOTExMDMwMTA3WjAzMTEwLwYDVQQD
EygyMjBlYjkzNjMxZmQxZTEyOTEzMzIzOTg5MWNjNzAyYTI3NWQyNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0M5f9mfAPqLj7c6I9J+dALUljKz
67Rwwn2ISTatocrqMpT12DGCXq+RZm6AB0pa2DzbaRIMn79VgoXQREkUgsUphWt3
mOEmzfAANQoq+VEpSrbO9oNZ4Br2LIIhwiGaAAAHNCSkbefwhT4HaP3b0noNTDve
btG0O/1+7ur1lL96Wr1QS6n217DTWpK1QUi4HfB2KesQFri0asJjpvD3qzXUY62Q
F+mTbyDjrJmMD4CGyhp5ywbpeehdmOun7KZ1bA7qqa+SGu3xChYsIwL7Cxcw8Q13
FIKSKoB4Y2gpYyJOFNHrZcGLY/MDWL+qqKut8oA25nLSUq4cMM0U7aoJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIOuTYx/R4SkTMjmJHMcConXSc0MB8GA1UdIwQY
MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt
ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm
LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwp7JcNN
d4VwjU0AFAQlgO1xlg3p0heoeXW0K9ZNN2PFg4V8F/+VUmBpDYoQ7UGlObRTK2xT
CC9W57jr0Usq9S+6G0M+Jghasy7nyIjdPFXT5rMerD2dLOPyAw7/KopoECRrCQZA
9qq6XNiaFcbhLSk88JoATcjeIvubxQ1TBCSJwCksHf+1WcyZZf7qU5nFoMl8b3et
VQXqp+4VAdVSHtsnUmXiyNfalQNNViQgWkBEwXPo/ffW7x5zIKgR4k8wetKMiZW5
X5PHefO/s2qTiQ1XdDIsgpDvD5ywNf2E+PwvkVEJ3+01c/0FuMv5ACwY5xD2+qX/
5xOG4hRKn68ABw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:18 2026 by rpki-client