Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: 3CDaA3iAARyeWpsutAYaDDvihUtqrqsWv6mUuNh2f44=
Subject key identifier: EC:F7:CC:65:21:71:CB:99:C4:00:A4:CF:54:6C:F3:91:F4:20:46:6C
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 01A17E185D7141A951A432FB052291D70D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 17D3
Signing time: Tue 27 Oct 2026 16:01:28 +0000
Manifest this update: Tue 27 Oct 2026 16:01:28 +0000
Manifest next update: Wed 28 Oct 2026 16:01:28 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: RmDBz5t9yFf51BVLmPhqkKnTcxdLMt0Pl5Z9Oa3OS04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:5d:71:41:a9:51:a4:32:fb:05:22:91:d7:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Oct 27 16:01:28 2026 GMT
Not After : Oct 28 16:01:28 2026 GMT
Subject: CN=ecf7cc652171cb99c400a4cf546cf391f420466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:f1:36:00:c7:33:66:d3:42:af:bd:55:23:
73:cd:0d:34:2e:8a:87:a0:b8:6e:ea:51:a9:b5:61:
78:7e:7a:19:51:79:25:56:66:0b:eb:c3:fc:57:34:
9e:a8:87:ee:eb:24:f4:94:ec:d4:67:08:64:fc:f2:
40:75:d6:08:9c:2d:eb:9a:d4:19:1e:c0:84:3d:06:
de:53:b6:46:ae:b3:b6:88:34:e9:48:ee:91:a9:93:
dd:f4:a8:f9:c1:d2:46:63:8c:c0:a8:07:72:f3:64:
eb:13:fd:f4:12:72:90:e0:34:ef:bd:4b:78:6c:94:
78:f6:ea:71:5a:a1:fc:a3:57:f5:c9:6b:17:d4:3b:
f7:d7:8b:b2:ca:fc:f7:cb:7e:30:9a:84:5d:e8:fb:
44:bd:7a:cb:83:61:15:db:ca:cb:78:57:6e:b7:de:
da:fe:19:25:85:aa:9f:3d:ae:49:8f:59:7c:c5:88:
d8:e8:42:86:cd:ff:99:dd:4f:8b:aa:ba:b5:42:9c:
ee:3c:43:cd:85:57:a6:a9:9b:61:7b:12:33:1a:e1:
04:81:3b:c2:06:1c:4c:1c:c6:3c:5d:a1:4d:c9:2e:
10:e6:ce:bc:38:9c:9c:5e:38:13:90:8b:5b:99:83:
44:df:88:e3:65:88:cd:90:74:ce:89:8f:2c:0d:c7:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:CC:65:21:71:CB:99:C4:00:A4:CF:54:6C:F3:91:F4:20:46:6C
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e0:21:64:c7:73:a1:ef:c7:36:fa:0c:a4:99:8e:ee:db:85:
fe:cd:7b:19:41:c0:c0:45:b7:f7:61:c1:9f:af:41:a0:94:14:
8f:b4:67:63:e1:2b:5d:1f:7c:b1:5e:85:81:52:04:17:49:15:
ed:20:11:26:4f:b4:76:d6:c2:d0:e6:38:e5:7f:7a:b5:e2:9b:
a5:07:f3:26:04:9f:43:41:eb:35:74:52:e4:1b:15:89:66:40:
1a:e2:8d:02:e5:3f:8d:27:09:b6:6d:28:47:b8:7e:5b:d0:4b:
9d:56:9f:4f:d8:13:76:c6:c2:89:79:40:b0:77:d9:42:1f:a6:
49:da:13:03:57:3d:c4:70:3e:18:df:02:73:1c:9f:bf:b0:aa:
8d:5b:d4:cf:ae:b3:bc:b1:ff:41:25:c9:61:e5:43:c7:81:98:
d3:9d:63:81:af:55:76:c8:e3:0d:6f:24:bc:bc:aa:28:8a:9a:
c0:f6:48:58:ca:22:e2:86:1e:cb:30:34:21:a3:b4:49:52:19:
5a:dd:e4:a1:ae:79:34:91:67:5c:83:72:64:5d:38:80:a3:e2:
56:7a:39:8d:d6:d1:94:9f:d3:3d:ae:f4:79:bb:ee:df:47:1d:
c1:ed:30:8f:94:0f:f6:ac:5b:2d:80:32:be:d4:5e:5e:1a:4d:
6c:89:e9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+GF1xQalRpDL7BSKR1w08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjYxMDI3MTYwMTI4WhcNMjYxMDI4MTYwMTI4WjAzMTEwLwYDVQQD
EyhlY2Y3Y2M2NTIxNzFjYjk5YzQwMGE0Y2Y1NDZjZjM5MWY0MjA0NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6TxNgDHM2bTQq+9VSNzzQ00LoqH
oLhu6lGptWF4fnoZUXklVmYL68P8VzSeqIfu6yT0lOzUZwhk/PJAddYInC3rmtQZ
HsCEPQbeU7ZGrrO2iDTpSO6RqZPd9Kj5wdJGY4zAqAdy82TrE/30EnKQ4DTvvUt4
bJR49upxWqH8o1f1yWsX1Dv314uyyvz3y34wmoRd6PtEvXrLg2EV28rLeFdut97a
/hklhaqfPa5Jj1l8xYjY6EKGzf+Z3U+Lqrq1QpzuPEPNhVemqZthexIzGuEEgTvC
BhxMHMY8XaFNyS4Q5s68OJycXjgTkItbmYNE34jjZYjNkHTOiY8sDceTgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz3zGUhccuZxACkz1Rs85H0IEZsMB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOAhZMdz
oe/HNvoMpJmO7tuF/s17GUHAwEW392HBn69BoJQUj7RnY+ErXR98sV6FgVIEF0kV
7SARJk+0dtbC0OY45X96teKbpQfzJgSfQ0HrNXRS5BsViWZAGuKNAuU/jScJtm0o
R7h+W9BLnVafT9gTdsbCiXlAsHfZQh+mSdoTA1c9xHA+GN8Ccxyfv7CqjVvUz66z
vLH/QSXJYeVDx4GY051jga9VdsjjDW8kvLyqKIqawPZIWMoi4oYeyzA0IaO0SVIZ
Wt3koa55NJFnXINyZF04gKPiVno5jdbRlJ/TPa70ebvu30cdwe0wj5QP9qxbLYAy
vtReXhpNbInpyQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:16:43 2026 by rpki-client