Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: R9hw558pFy5FHAIyuOyF3SRjTrkbp8JSg4cWVXC+RPE=
Subject key identifier: EE:07:DF:21:31:EC:8C:2B:A6:2C:55:C2:F5:79:12:FC:76:5A:5D:16
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 01A08942E77A7CD1D92B3147B3A3462AAC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 162A
Signing time: Thu 10 Sep 2026 03:00:58 +0000
Manifest this update: Thu 10 Sep 2026 03:00:58 +0000
Manifest next update: Fri 11 Sep 2026 03:00:58 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: Kh4dQ1DHNPIf6RnmhVCH3Xvk+lBY0MTDJtAz7D7fLR8=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:e7:7a:7c:d1:d9:2b:31:47:b3:a3:46:2a:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Sep 10 03:00:58 2026 GMT
Not After : Sep 11 03:00:58 2026 GMT
Subject: CN=ee07df2131ec8c2ba62c55c2f57912fc765a5d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e1:09:ea:0b:2f:58:9b:60:cc:40:f6:b2:4b:
d0:d5:6e:17:b2:3d:45:31:97:d2:b1:17:d8:23:df:
34:00:1d:f0:4e:b3:b5:00:6a:4c:e7:09:33:f7:5e:
81:cf:9e:25:c2:36:8c:eb:db:2c:35:ad:68:cb:45:
91:0e:da:52:b3:06:23:af:d7:f0:79:20:1e:58:41:
f9:8b:07:3a:8b:8b:ec:dc:3c:77:e9:30:20:df:e3:
61:50:b3:df:cc:c4:62:17:36:6b:91:4f:a7:85:5a:
9f:91:95:ff:c2:75:ae:00:86:55:5d:99:a2:de:8d:
86:f4:58:21:a9:b4:3f:0e:de:d4:b6:4f:39:45:32:
e6:31:98:c5:26:3a:7a:33:ed:33:d3:14:2c:45:71:
f4:63:5d:aa:3c:68:c5:6b:90:af:36:7e:96:9c:13:
10:78:41:e5:d2:af:a4:f3:c4:7b:26:18:42:5d:93:
b2:7f:c7:3b:b5:2f:b7:1a:1e:4c:6e:8c:4a:a8:92:
a7:13:c4:d9:51:98:75:c8:18:67:2e:56:41:8a:fb:
e2:d5:43:24:c1:66:f0:a4:8a:90:ad:20:5a:58:5e:
a5:92:2f:78:11:c9:1b:be:ac:f8:3c:e7:7c:09:b1:
c7:d8:fd:89:49:4d:a7:c3:f5:71:2c:f5:81:cf:4f:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:DF:21:31:EC:8C:2B:A6:2C:55:C2:F5:79:12:FC:76:5A:5D:16
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:38:00:e8:df:6d:88:64:1c:29:d9:3f:ee:aa:fa:75:03:
66:61:01:21:df:0f:56:40:bc:5d:06:86:2e:21:df:39:e7:bd:
36:cc:a1:73:52:76:3a:d7:38:2f:1c:47:07:44:b7:2f:e6:f1:
2c:cc:13:11:18:84:77:c3:c0:e6:5e:8c:4e:30:e1:3f:fb:1d:
71:57:e2:6a:01:07:07:6c:fb:f7:90:8b:77:20:d7:f1:89:1d:
f2:4a:b4:61:66:1a:a5:c3:b7:c4:2e:f6:10:44:9c:16:77:98:
9f:61:38:c1:c9:d3:b4:85:7b:cb:db:0a:64:cd:2d:36:1f:45:
1e:22:f1:eb:ef:9b:fb:39:9e:49:96:f2:d8:e4:8e:42:b2:df:
3a:d0:54:12:7b:24:e9:6e:5d:e0:10:f8:45:e2:5a:af:75:b2:
45:90:07:2a:3d:0b:7c:d2:3c:45:d6:2c:27:8e:e6:66:64:03:
90:1f:70:d9:b8:f4:65:4e:81:07:bd:2d:02:1f:87:3c:b3:1c:
b7:9c:c8:98:cb:bf:5a:5f:46:aa:1f:ff:6b:33:b4:b2:56:98:
8c:4b:ec:a1:57:59:f6:1e:36:bf:98:0c:cc:84:42:91:c3:a8:
0c:c8:d5:79:fc:f6:09:36:dd:91:95:e6:0e:83:50:5d:4a:7b:
8c:de:15:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQud6fNHZKzFHs6NGKqxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjYwOTEwMDMwMDU4WhcNMjYwOTExMDMwMDU4WjAzMTEwLwYDVQQD
EyhlZTA3ZGYyMTMxZWM4YzJiYTYyYzU1YzJmNTc5MTJmYzc2NWE1ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uEJ6gsvWJtgzED2skvQ1W4Xsj1F
MZfSsRfYI980AB3wTrO1AGpM5wkz916Bz54lwjaM69ssNa1oy0WRDtpSswYjr9fw
eSAeWEH5iwc6i4vs3Dx36TAg3+NhULPfzMRiFzZrkU+nhVqfkZX/wnWuAIZVXZmi
3o2G9FghqbQ/Dt7Utk85RTLmMZjFJjp6M+0z0xQsRXH0Y12qPGjFa5CvNn6WnBMQ
eEHl0q+k88R7JhhCXZOyf8c7tS+3Gh5MboxKqJKnE8TZUZh1yBhnLlZBivvi1UMk
wWbwpIqQrSBaWF6lki94Eckbvqz4POd8CbHH2P2JSU2nw/VxLPWBz09B2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4H3yEx7IwrpixVwvV5Evx2Wl0WMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/s4AOjf
bYhkHCnZP+6q+nUDZmEBId8PVkC8XQaGLiHfOee9Nsyhc1J2Otc4LxxHB0S3L+bx
LMwTERiEd8PA5l6MTjDhP/sdcVfiagEHB2z795CLdyDX8Ykd8kq0YWYapcO3xC72
EEScFneYn2E4wcnTtIV7y9sKZM0tNh9FHiLx6++b+zmeSZby2OSOQrLfOtBUEnsk
6W5d4BD4ReJar3WyRZAHKj0LfNI8RdYsJ47mZmQDkB9w2bj0ZU6BB70tAh+HPLMc
t5zImMu/Wl9Gqh//azO0slaYjEvsoVdZ9h42v5gMzIRCkcOoDMjVefz2CTbdkZXm
DoNQXUp7jN4VHA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:54:06 2026 by rpki-client