Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: U/G7FsEZHEyd8DKQ5S9HX6dIE05D76grhZUPaFpxVbQ=
Subject key identifier: 55:79:7B:D8:75:45:94:17:2E:CC:4A:EB:DD:2E:6B:B0:98:B7:86:7E
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01A03E29035FEBF5C7DF4975BF761A262138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0B92
Signing time: Wed 26 Aug 2026 13:01:10 +0000
Manifest this update: Wed 26 Aug 2026 13:01:10 +0000
Manifest next update: Thu 27 Aug 2026 13:01:10 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: /D481uMJVAnYbFimiiII0a+M175xg1i1GiLgdzrNpEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:29:03:5f:eb:f5:c7:df:49:75:bf:76:1a:26:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Aug 26 13:01:10 2026 GMT
Not After : Aug 27 13:01:10 2026 GMT
Subject: CN=55797bd8754594172ecc4aebdd2e6bb098b7867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:e8:7a:d4:13:1a:bd:a2:3e:35:01:4e:df:
cd:15:62:af:a1:ff:56:fb:22:2a:d5:ce:aa:5e:12:
71:19:30:c9:c9:6a:69:14:e2:bb:b3:d1:2d:4f:b4:
38:e0:ce:a3:5f:70:b2:1b:5e:cb:65:2d:10:9d:74:
14:9e:65:b6:d6:ce:b3:ef:d9:84:44:e9:9f:ba:90:
13:cd:f8:18:59:fa:1a:9d:29:0e:8b:eb:0d:93:f6:
4b:68:f0:c1:0e:a2:93:3d:4b:da:41:17:5e:9e:c5:
35:33:f2:c2:e0:df:87:be:f8:d4:0f:ef:e7:90:ef:
e7:b8:0b:9b:09:ba:bf:ff:e9:5a:69:ad:79:be:66:
fb:77:4d:e0:87:9b:fa:92:16:e1:1f:43:36:40:5c:
b0:4e:66:6a:2f:3c:ea:a9:26:30:79:c8:d6:63:3a:
d6:19:90:e9:5c:b3:a6:e3:d6:9f:49:ff:6f:57:1a:
c1:40:68:ea:bc:5d:00:ed:b4:6b:5e:5e:96:c5:d3:
53:62:f9:54:99:53:13:8b:c0:ce:ef:a7:81:1d:9d:
12:a7:a1:a9:fd:70:c0:cb:62:ee:00:48:03:5c:cc:
f1:f4:9e:88:25:3c:64:bf:50:21:44:e4:37:29:95:
a2:2c:bf:0f:66:4c:c3:48:7b:c0:6d:98:15:b7:11:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:7B:D8:75:45:94:17:2E:CC:4A:EB:DD:2E:6B:B0:98:B7:86:7E
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:86:ab:e8:f4:8c:b4:32:03:5e:8b:d3:af:51:cc:d1:c1:34:
72:d6:ba:14:97:58:c5:64:a7:8b:51:19:df:56:43:0e:94:93:
e8:50:dd:08:8d:5d:8c:5a:fe:bf:55:74:6a:59:3a:35:8d:01:
65:0b:e7:2c:5c:dc:00:8f:6e:4e:fa:6f:e6:0c:07:30:ae:c4:
48:6f:dc:9f:5d:8c:03:d6:99:b4:2e:c1:a5:f8:0f:cb:64:9c:
a5:04:e4:c1:11:4e:19:00:1a:c3:f4:97:d6:99:6d:0e:09:b0:
4b:c9:0a:7e:76:74:b9:f2:f1:4a:07:47:e2:b6:ab:6d:01:b7:
d0:ff:76:48:71:78:c6:1f:3b:15:a7:0e:52:51:60:c7:d8:bc:
36:9d:21:f1:88:19:fc:8c:12:09:31:77:1d:9a:fd:17:c9:ff:
c7:4d:3b:40:21:64:56:84:fd:17:6f:0d:e9:41:8e:f6:c8:02:
fd:c3:e6:91:36:c2:fe:f5:ae:4f:b5:74:b4:65:e7:89:53:e4:
d2:c8:1d:c3:c8:00:b1:b1:d2:b5:a6:57:25:6a:b3:94:12:7d:
fa:4e:4d:7e:ff:57:49:52:40:33:20:17:62:1f:0d:aa:9a:d3:
be:6a:81:95:c0:01:bb:5c:82:f0:7f:35:e8:65:4b:0a:23:5e:
d5:70:8c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+KQNf6/XH30l1v3YaJiE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjYwODI2MTMwMTEwWhcNMjYwODI3MTMwMTEwWjAzMTEwLwYDVQQD
Eyg1NTc5N2JkODc1NDU5NDE3MmVjYzRhZWJkZDJlNmJiMDk4Yjc4NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrfoetQTGr2iPjUBTt/NFWKvof9W
+yIq1c6qXhJxGTDJyWppFOK7s9EtT7Q44M6jX3CyG17LZS0QnXQUnmW21s6z79mE
ROmfupATzfgYWfoanSkOi+sNk/ZLaPDBDqKTPUvaQRdensU1M/LC4N+HvvjUD+/n
kO/nuAubCbq//+laaa15vmb7d03gh5v6khbhH0M2QFywTmZqLzzqqSYwecjWYzrW
GZDpXLOm49afSf9vVxrBQGjqvF0A7bRrXl6WxdNTYvlUmVMTi8DO76eBHZ0Sp6Gp
/XDAy2LuAEgDXMzx9J6IJTxkv1AhROQ3KZWiLL8PZkzDSHvAbZgVtxGDqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV5e9h1RZQXLsxK690ua7CYt4Z+MB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4ar6PSM
tDIDXovTr1HM0cE0cta6FJdYxWSni1EZ31ZDDpST6FDdCI1djFr+v1V0alk6NY0B
ZQvnLFzcAI9uTvpv5gwHMK7ESG/cn12MA9aZtC7BpfgPy2ScpQTkwRFOGQAaw/SX
1pltDgmwS8kKfnZ0ufLxSgdH4rarbQG30P92SHF4xh87FacOUlFgx9i8Np0h8YgZ
/IwSCTF3HZr9F8n/x007QCFkVoT9F28N6UGO9sgC/cPmkTbC/vWuT7V0tGXniVPk
0sgdw8gAsbHStaZXJWqzlBJ9+k5Nfv9XSVJAMyAXYh8NqprTvmqBlcABu1yC8H81
6GVLCiNe1XCMww==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:02:32 2026 by rpki-client