Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: +XWk3zjwcP81xJ5u570LfvOpmyaidsjNQyQaD4vlNow=
Subject key identifier: A3:13:CF:52:78:75:9E:93:B1:47:99:9E:54:C9:D2:03:C9:2A:05:5D
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 01A181190BE23ACE445E09ACB50482DA5088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1588
Signing time: Wed 28 Oct 2026 06:01:04 +0000
Manifest this update: Wed 28 Oct 2026 06:01:04 +0000
Manifest next update: Thu 29 Oct 2026 06:01:04 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: lyDPwlqjFbLkCItUSp5LipwVQ+Z08VY0Ivy4YHMQmxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:0b:e2:3a:ce:44:5e:09:ac:b5:04:82:da:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Oct 28 06:01:04 2026 GMT
Not After : Oct 29 06:01:04 2026 GMT
Subject: CN=a313cf5278759e93b147999e54c9d203c92a055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:89:54:6f:f8:4e:1d:12:4a:e6:8c:6a:b7:
d6:f6:ff:67:56:bc:db:8f:ca:50:a6:50:17:63:50:
10:b0:71:22:e5:70:75:a9:4b:85:c6:db:3a:55:27:
fa:d4:cc:36:48:1d:7c:bc:61:cf:06:7c:c8:92:da:
17:d6:23:0f:b3:d2:a1:c7:8a:f9:81:7d:c2:08:4b:
bd:0b:24:d4:99:e5:3a:eb:6b:b7:4e:dd:cf:49:66:
4d:dd:a0:b8:62:7c:d7:5d:a5:81:c4:29:45:a9:aa:
d9:89:88:a8:36:2a:24:d5:98:7b:de:b8:cf:ff:cc:
b7:6b:f7:57:0f:fb:c0:9e:e5:e8:92:32:01:bf:1a:
7a:87:84:7a:f1:6f:61:7d:b4:60:63:9b:79:5f:33:
eb:22:15:81:7a:1d:85:ff:db:75:da:e2:aa:24:aa:
eb:48:45:40:a6:ad:df:ac:57:56:5f:a6:0f:5c:9e:
9a:95:bf:a3:d9:45:81:25:0f:b3:83:a0:16:37:3c:
db:fc:c1:eb:2a:51:56:9b:4e:65:40:36:0a:3b:0d:
34:e6:26:23:05:34:48:7e:18:aa:fe:02:9c:3b:ff:
3d:c0:32:88:f8:c0:ec:6a:09:5a:0f:59:64:96:35:
40:cd:53:fc:97:65:ed:a4:76:eb:4b:af:b3:3a:89:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:13:CF:52:78:75:9E:93:B1:47:99:9E:54:C9:D2:03:C9:2A:05:5D
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:eb:c2:82:6d:9f:18:e9:9b:02:4f:6b:20:47:50:de:6d:
4a:ba:ae:ff:17:8c:f6:14:49:43:d5:35:3f:94:dd:4e:f8:84:
cf:54:17:b6:c3:79:74:c1:b6:48:95:a1:23:d7:6b:9c:cb:d0:
e0:3c:f0:87:8f:fd:32:75:cc:58:7c:34:21:72:66:fa:4c:ee:
6e:48:33:6b:71:8d:11:89:86:30:13:11:c6:76:98:50:96:53:
f2:c5:57:69:a9:69:3d:99:8a:fb:6f:4b:61:cc:eb:70:7a:a7:
11:81:72:e1:55:ed:07:81:0e:ef:4b:fc:21:ad:fa:0e:ad:85:
5e:a8:f3:82:0d:d5:8e:22:93:5d:d4:c5:cc:8d:53:48:57:98:
91:25:61:db:1b:ed:b8:7a:d9:62:65:54:cb:58:1a:2a:21:1e:
db:da:db:e1:77:d5:b4:d4:ac:20:28:d4:c9:50:82:7a:bb:f2:
d5:12:9c:a1:85:8e:2f:26:a1:24:44:98:5a:0e:23:57:b1:c9:
6a:8b:52:56:f0:b9:bd:cf:3c:06:05:f7:0f:63:3b:22:94:83:
e4:d8:ed:0f:e1:3e:64:56:cf:a0:73:64:0d:d9:21:bd:ef:e1:
d7:5e:8c:8f:30:44:fe:8c:91:25:26:ae:66:5a:bd:03:ca:9b:
63:a0:60:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGQviOs5EXgmstQSC2lCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl
ZDIxMzgwHhcNMjYxMDI4MDYwMTA0WhcNMjYxMDI5MDYwMTA0WjAzMTEwLwYDVQQD
EyhhMzEzY2Y1Mjc4NzU5ZTkzYjE0Nzk5OWU1NGM5ZDIwM2M5MmEwNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQOJVG/4Th0SSuaMarfW9v9nVrzb
j8pQplAXY1AQsHEi5XB1qUuFxts6VSf61Mw2SB18vGHPBnzIktoX1iMPs9Khx4r5
gX3CCEu9CyTUmeU662u3Tt3PSWZN3aC4YnzXXaWBxClFqarZiYioNiok1Zh73rjP
/8y3a/dXD/vAnuXokjIBvxp6h4R68W9hfbRgY5t5XzPrIhWBeh2F/9t12uKqJKrr
SEVApq3frFdWX6YPXJ6alb+j2UWBJQ+zg6AWNzzb/MHrKlFWm05lQDYKOw005iYj
BTRIfhiq/gKcO/89wDKI+MDsaglaD1lkljVAzVP8l2XtpHbrS6+zOolYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMTz1J4dZ6TsUeZnlTJ0gPJKgVdMB8GA1UdIwQY
MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt
ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1
LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS7rwoJt
nxjpmwJPayBHUN5tSrqu/xeM9hRJQ9U1P5TdTviEz1QXtsN5dMG2SJWhI9drnMvQ
4Dzwh4/9MnXMWHw0IXJm+kzubkgza3GNEYmGMBMRxnaYUJZT8sVXaalpPZmK+29L
YczrcHqnEYFy4VXtB4EO70v8Ia36Dq2FXqjzgg3VjiKTXdTFzI1TSFeYkSVh2xvt
uHrZYmVUy1gaKiEe29rb4XfVtNSsICjUyVCCervy1RKcoYWOLyahJESYWg4jV7HJ
aotSVvC5vc88BgX3D2M7IpSD5NjtD+E+ZFbPoHNkDdkhve/h116MjzBE/oyRJSau
Zlq9A8qbY6Bgyg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:25:53 2026 by rpki-client