Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: ykcQ+v97qy4kFoT3JWSffEeHdXveNrSwdvTW6NBIVRg=
Subject key identifier: D0:26:BC:DA:8E:27:61:05:FC:CF:BF:EC:87:F6:BB:0E:1A:FB:5A:99
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01A17BF1DA220D3A1865663E7F847AD17C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0A7D
Signing time: Tue 27 Oct 2026 06:00:09 +0000
Manifest this update: Tue 27 Oct 2026 06:00:09 +0000
Manifest next update: Wed 28 Oct 2026 06:00:09 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: +SP3966djjHaysVuj9SVTteghql9IiSyU/hCzxFoA2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:da:22:0d:3a:18:65:66:3e:7f:84:7a:d1:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Oct 27 06:00:09 2026 GMT
Not After : Oct 28 06:00:09 2026 GMT
Subject: CN=d026bcda8e276105fccfbfec87f6bb0e1afb5a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:9d:ed:7d:7a:c4:55:25:94:64:3c:ac:91:
7c:8a:6e:17:99:3d:aa:17:d0:70:ee:32:8f:f4:09:
fe:4f:bf:38:3f:c5:23:23:62:92:16:fd:dc:45:24:
d2:99:6a:80:59:b3:80:cd:dc:1d:47:c4:6d:d2:0e:
e9:23:38:19:80:f5:43:24:09:37:53:26:a3:80:ef:
56:fb:27:c4:19:8e:0e:bd:0b:58:eb:f4:eb:22:3a:
00:e7:8a:76:38:9a:1d:a9:7a:fc:7f:24:c0:0c:59:
cd:76:a1:de:a0:cb:5d:ff:24:0a:23:66:44:ae:9f:
4e:ba:93:46:1b:a1:88:e3:6b:43:91:c0:41:75:23:
19:bf:37:8c:c3:8f:31:fd:07:4f:23:1a:8f:da:98:
e7:14:e0:a2:26:f7:ab:77:4c:aa:d8:ce:cf:b2:6b:
b3:3c:78:6f:3e:7e:ea:80:92:a9:a1:1d:31:b6:41:
72:29:bc:d8:0c:d6:99:3e:c0:23:89:a6:e9:29:eb:
14:51:a1:fa:e3:be:74:0f:ed:c6:92:91:1f:ad:f6:
ff:e5:95:42:d3:e1:a7:6d:dc:be:27:74:e7:53:f6:
fb:94:fc:95:8f:ec:ba:7f:96:1b:ae:89:14:8a:07:
82:2b:87:de:81:66:32:cf:de:a4:d2:08:88:78:30:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:BC:DA:8E:27:61:05:FC:CF:BF:EC:87:F6:BB:0E:1A:FB:5A:99
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:11:a2:f2:78:fb:6e:c9:a0:74:45:21:d3:f9:f9:b6:46:60:
d9:75:c1:cc:0a:4b:cb:0e:ae:e6:00:50:ba:e9:fa:fb:55:01:
db:a6:75:ab:1a:c4:de:93:0e:03:57:93:0d:f6:5d:d5:d4:de:
04:0c:44:8b:9f:64:e9:f7:96:10:03:cb:94:4f:7b:77:63:47:
18:23:c2:85:96:89:56:48:32:f1:c7:20:c2:e0:6f:b2:de:f6:
ab:ee:d4:20:6c:e6:8b:18:ea:2b:7c:ba:f4:ca:46:d9:d8:88:
e6:36:fa:f8:d5:e4:5c:e8:bb:8d:17:a2:11:b3:2f:0c:99:bb:
5c:f0:fa:1a:b6:55:2f:02:bd:98:46:07:a3:11:89:b7:da:20:
a0:22:fe:44:60:d7:6b:c3:1a:f7:c9:c7:5c:16:04:a7:ac:34:
59:06:03:37:b5:2d:1d:a3:3e:22:e2:99:40:23:ea:ca:42:e2:
91:4e:cd:68:92:f4:fe:73:f8:67:31:a0:c4:fb:e4:2c:d6:c0:
44:6e:ae:e3:73:74:2b:7d:48:78:1b:a4:bc:73:e9:d9:18:17:
aa:b2:75:c7:ba:64:04:8d:db:5a:ab:8c:ce:75:60:9c:8a:fb:
47:4f:12:d2:aa:83:94:cd:47:b0:39:4a:dc:d6:5b:ee:3f:3d:
e3:67:63:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78doiDToYZWY+f4R60XxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm
NDI3NzUwHhcNMjYxMDI3MDYwMDA5WhcNMjYxMDI4MDYwMDA5WjAzMTEwLwYDVQQD
EyhkMDI2YmNkYThlMjc2MTA1ZmNjZmJmZWM4N2Y2YmIwZTFhZmI1YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72Od7X16xFUllGQ8rJF8im4XmT2q
F9Bw7jKP9An+T784P8UjI2KSFv3cRSTSmWqAWbOAzdwdR8Rt0g7pIzgZgPVDJAk3
UyajgO9W+yfEGY4OvQtY6/TrIjoA54p2OJodqXr8fyTADFnNdqHeoMtd/yQKI2ZE
rp9OupNGG6GI42tDkcBBdSMZvzeMw48x/QdPIxqP2pjnFOCiJverd0yq2M7Psmuz
PHhvPn7qgJKpoR0xtkFyKbzYDNaZPsAjiabpKesUUaH64750D+3GkpEfrfb/5ZVC
0+Gnbdy+J3TnU/b7lPyVj+y6f5YbrokUigeCK4fegWYyz96k0giIeDAvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAmvNqOJ2EF/M+/7If2uw4a+1qZMB8GA1UdIwQY
MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt
YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx
LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhGi8nj7
bsmgdEUh0/n5tkZg2XXBzApLyw6u5gBQuun6+1UB26Z1qxrE3pMOA1eTDfZd1dTe
BAxEi59k6feWEAPLlE97d2NHGCPChZaJVkgy8ccgwuBvst72q+7UIGzmixjqK3y6
9MpG2diI5jb6+NXkXOi7jReiEbMvDJm7XPD6GrZVLwK9mEYHoxGJt9ogoCL+RGDX
a8Ma98nHXBYEp6w0WQYDN7UtHaM+IuKZQCPqykLikU7NaJL0/nP4ZzGgxPvkLNbA
RG6u43N0K31IeBukvHPp2RgXqrJ1x7pkBI3bWquMznVgnIr7R08S0qqDlM1HsDlK
3NZb7j8942djdA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:34 2026 by rpki-client