Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: 6TIAtVu5104DnYMOWLSregQkZFYHoi0JMisG4gjOySQ=
Subject key identifier: D1:3E:A9:85:FB:2D:42:EB:0F:9A:45:32:E0:81:94:67:92:79:B4:B5
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01A18CE64F2F6FA275347B699D6A50BCC414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 13:01:06 +0000
Manifest this update: Fri 30 Oct 2026 13:01:06 +0000
Manifest next update: Sat 31 Oct 2026 13:01:06 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: R5Me4hpR6MwbRpuwilWo5UpnSxr0afxWPF4g0V9zv5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:e6:4f:2f:6f:a2:75:34:7b:69:9d:6a:50:bc:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Oct 30 13:01:06 2026 GMT
Not After : Oct 31 13:01:06 2026 GMT
Subject: CN=d13ea985fb2d42eb0f9a4532e08194679279b4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:01:a7:45:9c:9d:e2:96:b2:48:cb:36:6b:
38:51:cf:1c:58:31:d4:db:38:45:ac:57:75:74:81:
62:5a:16:7f:dd:60:eb:49:1b:1f:72:c0:a5:75:6c:
3d:eb:93:c7:ee:0e:53:75:19:18:03:77:01:40:18:
4c:d9:9d:16:cc:0a:c1:e8:28:f1:1c:0a:7f:20:d7:
1a:40:f7:1c:11:7d:82:9e:f1:46:c7:b3:cb:91:ed:
75:5d:20:1b:98:88:4b:cc:71:19:e8:70:26:c0:5d:
60:f2:89:54:a3:04:00:8f:00:81:0e:ac:2d:f4:48:
3a:94:22:61:83:3a:d3:e7:f8:5d:0c:b0:6f:c6:52:
64:78:41:f4:5e:fe:54:5b:0f:3c:12:4b:69:b9:f9:
68:4a:64:14:75:00:a7:ae:a1:9a:f5:0f:cb:8c:a7:
3b:c2:be:75:d6:b0:01:57:dd:cd:dd:ac:ac:6c:3f:
a1:c5:2b:c6:e2:d9:77:ac:4d:cc:99:07:7f:e8:ff:
80:ca:8d:6d:27:f2:d7:70:95:d9:4e:ef:42:37:6e:
cf:bb:ca:0c:cf:19:18:80:2b:ad:59:4e:37:42:a7:
1d:72:76:8e:d9:39:de:5b:72:14:0c:5e:c2:27:e1:
11:a7:72:1c:f3:8b:62:1d:83:1e:72:e9:f0:8c:59:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:A9:85:FB:2D:42:EB:0F:9A:45:32:E0:81:94:67:92:79:B4:B5
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fd:cb:95:60:59:08:9b:fe:36:80:39:82:e1:ff:09:71:c5:
90:78:e5:0a:4f:06:e7:7d:47:2e:a8:2a:db:af:71:64:aa:d2:
a3:9b:6f:2c:4a:06:df:a3:55:3a:d1:56:5e:9a:0a:89:6a:84:
68:b8:5e:00:63:95:cd:de:d0:7f:b5:f8:f5:e2:58:97:35:1c:
96:50:32:64:ab:6d:57:6c:80:a9:82:02:47:55:7b:b1:37:ca:
44:67:fe:ac:c4:86:2b:ad:aa:a5:40:2a:07:8e:88:16:3c:ba:
aa:0b:eb:f9:b3:78:39:45:6f:4f:5e:1b:d7:51:1d:be:4e:a9:
6e:c6:15:67:88:75:ad:d5:9c:9f:54:ce:32:c0:1f:7c:9a:90:
ca:1f:c9:97:33:de:77:56:3a:cc:7a:5b:08:2f:29:81:f7:03:
86:53:b8:b5:d4:f2:e6:9a:41:ef:50:ae:bf:29:6e:b8:4b:ea:
60:33:90:a0:62:93:78:05:60:bf:1b:92:d8:f9:fa:29:62:60:
fd:c2:1d:5c:7f:61:1e:99:6b:37:96:ef:d1:c5:83:6e:5d:a3:
a0:20:10:53:94:15:16:f3:fc:5a:7a:d1:02:09:90:ff:cc:79:
4f:8c:42:db:40:b9:12:77:29:b1:28:9c:2b:e4:2d:0c:37:a8:
b3:58:9b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGM5k8vb6J1NHtpnWpQvMQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5
NDc1MmIwHhcNMjYxMDMwMTMwMTA2WhcNMjYxMDMxMTMwMTA2WjAzMTEwLwYDVQQD
EyhkMTNlYTk4NWZiMmQ0MmViMGY5YTQ1MzJlMDgxOTQ2NzkyNzliNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmABp0WcneKWskjLNms4Uc8cWDHU
2zhFrFd1dIFiWhZ/3WDrSRsfcsCldWw965PH7g5TdRkYA3cBQBhM2Z0WzArB6Cjx
HAp/INcaQPccEX2CnvFGx7PLke11XSAbmIhLzHEZ6HAmwF1g8olUowQAjwCBDqwt
9Eg6lCJhgzrT5/hdDLBvxlJkeEH0Xv5UWw88EktpufloSmQUdQCnrqGa9Q/LjKc7
wr511rABV93N3aysbD+hxSvG4tl3rE3MmQd/6P+Ayo1tJ/LXcJXZTu9CN27Pu8oM
zxkYgCutWU43QqcdcnaO2TneW3IUDF7CJ+ERp3Ic84tiHYMecunwjFkcvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE+qYX7LULrD5pFMuCBlGeSebS1MB8GA1UdIwQY
MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt
YzE0ZmFmNDNiZTE0LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0
LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf3LlWBZ
CJv+NoA5guH/CXHFkHjlCk8G531HLqgq269xZKrSo5tvLEoG36NVOtFWXpoKiWqE
aLheAGOVzd7Qf7X49eJYlzUcllAyZKttV2yAqYICR1V7sTfKRGf+rMSGK62qpUAq
B46IFjy6qgvr+bN4OUVvT14b11Edvk6pbsYVZ4h1rdWcn1TOMsAffJqQyh/JlzPe
d1Y6zHpbCC8pgfcDhlO4tdTy5ppB71CuvyluuEvqYDOQoGKTeAVgvxuS2Pn6KWJg
/cIdXH9hHplrN5bv0cWDbl2joCAQU5QVFvP8WnrRAgmQ/8x5T4xC20C5EncpsSic
K+QtDDeos1ibuw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:25:29 2026 by rpki-client