Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: S+bCL6AhKFJIZYWP/o1SyzrFC4Jy0ue06sk11et0xkA=
Subject key identifier: 37:11:75:04:B8:F7:5E:CD:96:EE:1A:8E:5D:FB:D1:2F:E0:3F:77:6B
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 01A0EC6601350C8862A54E789AC3AB89B7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 0530
Signing time: Tue 29 Sep 2026 09:01:42 +0000
Manifest this update: Tue 29 Sep 2026 09:01:42 +0000
Manifest next update: Wed 30 Sep 2026 09:01:42 +0000
Files and hashes: 1: 4khbVFEEtELbVKjdX-EOY4D-84o.asa (hash: jJbuP4gphJUD/kkuEq/w+9/whek2vyfSwhJa4fmVm8Y=)
2: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
3: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
4: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: hdKIlsSIhVpDNXsNX6sdrTW89Xdxnw+TRN4/hEvIX80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:01:35:0c:88:62:a5:4e:78:9a:c3:ab:89:b7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Sep 29 09:01:42 2026 GMT
Not After : Sep 30 09:01:42 2026 GMT
Subject: CN=37117504b8f75ecd96ee1a8e5dfbd12fe03f776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:3f:e9:6b:5f:8b:f5:cc:c9:5f:52:b1:df:
ad:cc:5d:0c:76:7c:b9:ad:9e:e9:04:f3:ca:2b:fe:
b6:df:5e:d0:d7:d1:bf:cc:82:99:70:77:e5:c7:69:
1c:75:d6:ae:cb:5d:61:34:ed:70:99:c7:cf:db:7f:
50:97:6f:59:e6:09:51:c8:8a:b8:a2:a4:f2:34:61:
87:33:cb:16:93:9b:9a:18:67:94:ba:64:40:1d:82:
75:83:2f:e4:3f:8a:40:2a:d3:dc:2d:bc:39:6a:79:
b2:ac:ae:bb:51:1a:10:91:88:2a:7c:c9:76:26:16:
0c:1c:67:7c:70:40:91:18:a9:2a:21:ce:f0:08:8f:
59:d2:15:26:78:96:81:de:32:aa:64:70:e2:71:04:
00:8b:d6:6a:4a:61:44:7a:47:4a:df:1e:88:1b:72:
9e:be:a1:5a:43:bc:aa:9b:57:40:73:9d:96:21:27:
50:d6:4b:19:76:67:d1:48:e8:9d:1f:e5:e2:6b:1e:
c2:d5:fe:f1:ec:f2:87:71:e8:7d:bd:43:b4:49:56:
bb:c4:96:42:d1:a3:90:74:1e:45:8f:fb:57:dd:c6:
76:04:a3:14:9a:43:37:b6:25:d5:bd:53:dc:81:31:
12:81:80:cf:e4:12:5c:1c:b1:e7:36:d4:ab:f9:1a:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:75:04:B8:F7:5E:CD:96:EE:1A:8E:5D:FB:D1:2F:E0:3F:77:6B
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:32:d2:36:f8:9a:a7:1e:90:f9:d0:6c:03:bc:84:8a:d1:
f7:74:47:4e:f8:ff:3d:b4:9e:13:34:26:32:9f:a7:93:d4:ae:
dc:27:6f:42:ce:9e:2f:ef:b9:2e:5d:12:b3:15:db:77:43:81:
f5:29:61:32:45:42:97:8f:2e:53:80:9b:03:c4:9f:39:b3:e0:
e3:ef:0a:d3:ef:25:f7:2b:c9:a0:3e:72:5c:aa:9f:e4:f7:ec:
58:30:14:76:3c:75:a6:b2:78:a5:9a:99:59:a3:f3:2b:9b:4b:
8a:db:a5:2a:76:b2:fe:ab:39:09:75:f9:5f:0d:c8:76:72:ab:
38:19:15:0d:a3:07:13:df:5c:e1:1c:61:58:45:26:94:63:35:
bc:a2:53:8a:53:92:95:5c:35:b9:3f:9b:af:8d:c3:7c:c3:93:
6b:30:af:cf:cf:3c:d3:90:b0:00:c5:f8:b8:e9:00:5c:8d:d4:
3a:b9:b0:4c:99:07:fb:ad:ff:f3:7b:dd:91:a2:7e:44:55:fd:
fd:c0:ba:6d:ac:36:8a:20:97:62:2f:1d:68:59:88:dc:f9:32:
7e:62:f4:59:be:00:e8:d9:55:fb:6e:6f:3e:0d:38:78:4f:ed:
fd:9d:a8:58:0a:dd:9d:ca:5c:38:cf:67:43:5c:6d:d8:60:aa:
2d:86:32:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZgE1DIhipU54msOribekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDA5MzIxNzJhYTJkMWM3N2M0YmI5ODM3MGFhYjNkZTZh
YzM0NTcwHhcNMjYwOTI5MDkwMTQyWhcNMjYwOTMwMDkwMTQyWjAzMTEwLwYDVQQD
EygzNzExNzUwNGI4Zjc1ZWNkOTZlZTFhOGU1ZGZiZDEyZmUwM2Y3NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgA/6Wtfi/XMyV9Ssd+tzF0Mdny5
rZ7pBPPKK/62317Q19G/zIKZcHflx2kcddauy11hNO1wmcfP239Ql29Z5glRyIq4
oqTyNGGHM8sWk5uaGGeUumRAHYJ1gy/kP4pAKtPcLbw5anmyrK67URoQkYgqfMl2
JhYMHGd8cECRGKkqIc7wCI9Z0hUmeJaB3jKqZHDicQQAi9ZqSmFEekdK3x6IG3Ke
vqFaQ7yqm1dAc52WISdQ1ksZdmfRSOidH+Xiax7C1f7x7PKHceh9vUO0SVa7xJZC
0aOQdB5Fj/tX3cZ2BKMUmkM3tiXVvVPcgTESgYDP5BJcHLHnNtSr+RoMeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcRdQS4917Nlu4ajl370S/gP3drMB8GA1UdIwQY
MBaAFGXQkyFyqi0cd8S7mDcKqz3mrDRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMt
MWVkZGU2YzlkOTZhLzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMtMWVkZGU2YzlkOTZh
LzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH4y0jb4
mqcekPnQbAO8hIrR93RHTvj/PbSeEzQmMp+nk9Su3CdvQs6eL++5Ll0SsxXbd0OB
9SlhMkVCl48uU4CbA8SfObPg4+8K0+8l9yvJoD5yXKqf5PfsWDAUdjx1prJ4pZqZ
WaPzK5tLitulKnay/qs5CXX5Xw3IdnKrOBkVDaMHE99c4RxhWEUmlGM1vKJTilOS
lVw1uT+br43DfMOTazCvz88805CwAMX4uOkAXI3UOrmwTJkH+63/83vdkaJ+RFX9
/cC6baw2iiCXYi8daFmI3PkyfmL0Wb4A6NlV+25vPg04eE/t/Z2oWArdncpcOM9n
Q1xt2GCqLYYy3w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 18:08:27 2026 by rpki-client