Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: lmfIJFW19N8uIf8QyVHxjx9B7uSJY2mzj+7hLeSEQrQ=
Subject key identifier: E0:45:AC:36:33:4A:1F:7F:F0:AD:D9:78:42:C6:D1:B4:6F:64:2F:F5
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 01A1697E546E1B9DB58A7F8698C096F44D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 114B
Signing time: Fri 23 Oct 2026 16:00:48 +0000
Manifest this update: Fri 23 Oct 2026 16:00:48 +0000
Manifest next update: Sat 24 Oct 2026 16:00:48 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: BdHkWLOAU7/FGOWvy0FANNN6dp76Fughvf1qktWwum4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:7e:54:6e:1b:9d:b5:8a:7f:86:98:c0:96:f4:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Oct 23 16:00:48 2026 GMT
Not After : Oct 24 16:00:48 2026 GMT
Subject: CN=e045ac36334a1f7ff0add97842c6d1b46f642ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:58:d9:94:b7:97:3a:89:e0:7e:59:33:3a:
7d:10:3d:9f:36:4a:2c:c8:79:f6:35:87:5f:53:3e:
46:81:f9:8d:57:7c:f3:0a:96:b5:3d:43:96:b3:cf:
b4:c0:49:01:50:59:28:39:89:c3:3c:77:84:89:18:
d4:58:69:7c:56:c6:1b:d1:9c:e4:7a:7b:9a:90:6c:
fb:b6:74:4d:bf:a4:aa:9e:3a:9b:93:4a:c7:65:a0:
d2:92:91:4d:ef:16:0d:3a:a8:9f:e2:c1:fd:da:f3:
61:44:5d:bb:81:fa:6b:27:d1:a6:04:76:db:67:4d:
0c:84:93:96:b3:8c:ac:9b:68:34:4d:e7:ee:6d:a9:
62:24:d4:e3:75:ba:c1:06:b6:d3:da:6b:ac:85:6e:
91:dc:3a:c2:97:a0:d0:01:c9:46:65:a3:75:b5:1a:
93:c8:82:29:c8:76:bb:fb:9b:ef:37:e4:d1:ca:d8:
ff:a4:66:5a:61:3e:2b:a5:fc:d2:7a:bc:91:1e:a5:
b0:d6:45:41:c5:5a:2d:bc:5b:1e:d2:b1:31:30:2d:
1a:fb:e1:8a:92:5f:ff:43:2c:46:ee:58:b3:ad:8c:
cf:44:e4:29:1a:56:25:c3:e7:30:60:11:d6:fa:29:
ed:48:f5:05:99:e2:46:c0:7a:f6:2f:fd:61:a8:8c:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:AC:36:33:4A:1F:7F:F0:AD:D9:78:42:C6:D1:B4:6F:64:2F:F5
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a5:0f:7c:41:cd:34:8d:8c:bf:ae:47:31:82:0f:1f:0f:aa:
df:8e:e4:cb:89:a5:43:89:d3:1b:4c:64:72:b7:1a:e1:59:f3:
2d:69:79:61:c9:5e:08:be:7c:1f:7a:ee:4a:c1:33:70:7e:67:
5b:3c:7c:6e:d5:cc:9b:12:bd:66:b7:09:52:54:88:b0:d5:b2:
1c:09:24:b1:90:a7:fa:19:b4:25:5a:84:d2:f4:f5:b5:9f:03:
95:92:56:5b:fb:19:2e:99:f4:da:98:47:ca:cf:31:46:2a:73:
b0:6d:6b:8f:7b:5b:55:06:41:93:2d:50:1f:84:71:dc:d5:47:
16:0c:d3:1d:b0:8a:da:c1:a4:62:60:36:fd:56:d9:c3:1b:76:
79:57:75:91:ff:e1:db:26:f4:26:2e:f1:3c:24:07:87:41:46:
b7:91:74:0a:2e:14:08:33:fe:d4:a3:77:37:c6:82:b8:9a:b9:
00:1e:10:15:d7:eb:77:2c:4b:a9:d3:39:52:f2:f7:e4:55:51:
c9:2c:31:4c:b8:ca:6e:89:f6:5f:71:87:b9:1d:88:67:1a:ac:
42:63:f7:03:d7:f5:02:8b:51:b8:e2:7b:78:24:d7:0f:9e:d4:
c0:6b:57:f3:56:47:d5:8f:4d:74:e2:3e:b4:15:e4:18:bd:5b:
c4:3c:41:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFpflRuG521in+GmMCW9E2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDYwMjM4ZDA2NjhkNDVhMDQxNjE4YWM1ZGY3NjdmNTlh
MGM0YWUwHhcNMjYxMDIzMTYwMDQ4WhcNMjYxMDI0MTYwMDQ4WjAzMTEwLwYDVQQD
EyhlMDQ1YWMzNjMzNGExZjdmZjBhZGQ5Nzg0MmM2ZDFiNDZmNjQyZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXJY2ZS3lzqJ4H5ZMzp9ED2fNkos
yHn2NYdfUz5GgfmNV3zzCpa1PUOWs8+0wEkBUFkoOYnDPHeEiRjUWGl8VsYb0Zzk
enuakGz7tnRNv6Sqnjqbk0rHZaDSkpFN7xYNOqif4sH92vNhRF27gfprJ9GmBHbb
Z00MhJOWs4ysm2g0TefubaliJNTjdbrBBrbT2mushW6R3DrCl6DQAclGZaN1tRqT
yIIpyHa7+5vvN+TRytj/pGZaYT4rpfzSeryRHqWw1kVBxVotvFse0rExMC0a++GK
kl//QyxG7lizrYzPROQpGlYlw+cwYBHW+intSPUFmeJGwHr2L/1hqIzAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBFrDYzSh9/8K3ZeELG0bRvZC/1MB8GA1UdIwQY
MBaAFM0GAjjQZo1FoEFhisXfdn9ZoMSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYt
N2ZiNmVhODk2MzdmLzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYtN2ZiNmVhODk2Mzdm
LzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6UPfEHN
NI2Mv65HMYIPHw+q347ky4mlQ4nTG0xkcrca4VnzLWl5YcleCL58H3ruSsEzcH5n
Wzx8btXMmxK9ZrcJUlSIsNWyHAkksZCn+hm0JVqE0vT1tZ8DlZJWW/sZLpn02phH
ys8xRipzsG1rj3tbVQZBky1QH4Rx3NVHFgzTHbCK2sGkYmA2/VbZwxt2eVd1kf/h
2yb0Ji7xPCQHh0FGt5F0Ci4UCDP+1KN3N8aCuJq5AB4QFdfrdyxLqdM5UvL35FVR
ySwxTLjKbon2X3GHuR2IZxqsQmP3A9f1AotRuOJ7eCTXD57UwGtX81ZH1Y9NdOI+
tBXkGL1bxDxBKg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 22:18:52 2026 by rpki-client