Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: QMc6gd2B+tDrll/dMvnr0mdhbyz5kDcUXZF5OlcsDik=
Subject key identifier: 4C:DF:FF:08:FB:21:D0:09:5E:9B:BB:22:02:E8:28:15:D8:70:AD:6B
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 01A08F0DAECC6169CF8A2C4BE90C6926B622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 112E
Signing time: Fri 11 Sep 2026 06:00:33 +0000
Manifest this update: Fri 11 Sep 2026 06:00:33 +0000
Manifest next update: Sat 12 Sep 2026 06:00:33 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: rngW5hy37pBzf7y8MUtroEO0a65/yEvuafQ6gGi2v58=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0d:ae:cc:61:69:cf:8a:2c:4b:e9:0c:69:26:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Sep 11 06:00:33 2026 GMT
Not After : Sep 12 06:00:33 2026 GMT
Subject: CN=4cdfff08fb21d0095e9bbb2202e82815d870ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:43:39:39:64:2b:79:89:ce:04:8d:5f:f8:
2a:34:cc:f2:8a:2d:7e:79:f4:b4:b6:ed:eb:0a:3f:
82:bb:ce:c7:7c:db:93:68:59:09:8b:df:1b:dd:d1:
c5:68:6a:af:3a:67:ee:1e:38:da:d2:0b:72:7d:28:
ff:86:a0:c3:5d:2f:79:19:bd:83:48:bc:d4:d8:2c:
cd:49:b3:57:3a:d2:9e:8c:1b:d7:ef:da:a3:18:a5:
8e:e6:45:81:5e:0c:7c:a2:2a:63:e3:46:24:ff:c8:
2a:78:1c:1b:1d:98:ff:ab:9a:14:b7:84:47:b8:14:
3d:04:ea:7d:30:be:ba:b5:24:ca:da:2c:87:33:7d:
1c:e0:66:02:26:58:82:5d:dd:f3:c5:b5:db:b0:44:
fb:cc:0d:2e:90:6f:21:c8:7c:f6:ab:ba:6b:e9:9f:
63:2d:5c:f3:f7:e2:19:1f:ba:7a:27:b2:c4:80:df:
81:b0:ae:34:7d:4a:3d:69:b0:bd:3d:4f:24:65:b5:
b2:f4:1c:a1:ef:a5:c7:ee:56:25:c7:cd:bb:df:a8:
ff:d3:c8:88:3e:09:1c:c6:6b:06:e2:97:84:fe:1c:
22:5e:26:88:f0:36:61:41:ec:b2:b4:e4:ec:ce:07:
79:18:0f:50:54:9a:47:29:58:3e:4e:50:08:84:89:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:FF:08:FB:21:D0:09:5E:9B:BB:22:02:E8:28:15:D8:70:AD:6B
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bc:4d:76:9b:91:6e:15:bd:3f:9d:4b:61:36:0b:b3:42:51:
2a:3b:b6:47:f0:bf:e3:70:0d:1a:52:40:2d:41:a9:91:8e:22:
27:25:07:70:3a:d7:f7:25:ab:e6:7b:8c:bd:52:2f:a6:ee:e4:
97:9f:2e:df:6c:38:fc:55:6a:0d:19:24:bc:58:ab:fa:31:d5:
96:08:c6:7e:09:b3:95:f4:2c:b8:5d:e8:05:b1:ac:27:5a:cd:
6f:94:6a:f5:25:54:d6:b4:00:25:91:f4:02:f9:8a:b5:eb:82:
80:d3:64:39:12:84:08:79:2b:92:04:48:9b:ac:4b:8d:0f:e0:
8b:6a:52:5b:27:5a:32:75:95:fd:78:b6:0c:a3:8c:33:db:78:
c1:5c:88:cc:48:6f:f5:86:2a:c2:40:5f:bd:15:dd:bf:d4:7c:
7c:74:82:02:28:33:ab:09:1e:f0:43:01:a5:a2:fe:82:1b:3c:
08:e4:80:c8:93:39:c0:62:13:70:e8:6a:74:4a:14:cc:c7:01:
17:76:03:2d:28:39:73:f0:a0:2f:36:87:75:b5:30:79:1b:42:
b4:8b:f8:86:c1:e3:57:7b:51:50:54:62:d0:9b:19:d1:b2:6a:
52:40:75:cb:ed:42:e2:ea:5e:3c:54:7b:a4:95:10:b6:80:43:
12:b2:bb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPDa7MYWnPiixL6QxpJrYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MDg5OTEzMzMyOWZhYTViNTcxNmIxYzk1ZmJhZjkzMDIx
ZmJjNjEwHhcNMjYwOTExMDYwMDMzWhcNMjYwOTEyMDYwMDMzWjAzMTEwLwYDVQQD
Eyg0Y2RmZmYwOGZiMjFkMDA5NWU5YmJiMjIwMmU4MjgxNWQ4NzBhZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU1DOTlkK3mJzgSNX/gqNMzyii1+
efS0tu3rCj+Cu87HfNuTaFkJi98b3dHFaGqvOmfuHjja0gtyfSj/hqDDXS95Gb2D
SLzU2CzNSbNXOtKejBvX79qjGKWO5kWBXgx8oipj40Yk/8gqeBwbHZj/q5oUt4RH
uBQ9BOp9ML66tSTK2iyHM30c4GYCJliCXd3zxbXbsET7zA0ukG8hyHz2q7pr6Z9j
LVzz9+IZH7p6J7LEgN+BsK40fUo9abC9PU8kZbWy9Byh76XH7lYlx82736j/08iI
PgkcxmsG4peE/hwiXiaI8DZhQeyytOTszgd5GA9QVJpHKVg+TlAIhIni3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzf/wj7IdAJXpu7IgLoKBXYcK1rMB8GA1UdIwQY
MBaAFGYImRMzKfqltXFrHJX7r5MCH7xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAt
ZWI4YTQ1M2JjNTZlLzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAtZWI4YTQ1M2JjNTZl
LzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLxNdpuR
bhW9P51LYTYLs0JRKju2R/C/43ANGlJALUGpkY4iJyUHcDrX9yWr5nuMvVIvpu7k
l58u32w4/FVqDRkkvFir+jHVlgjGfgmzlfQsuF3oBbGsJ1rNb5Rq9SVU1rQAJZH0
AvmKteuCgNNkORKECHkrkgRIm6xLjQ/gi2pSWydaMnWV/Xi2DKOMM9t4wVyIzEhv
9YYqwkBfvRXdv9R8fHSCAigzqwke8EMBpaL+ghs8COSAyJM5wGITcOhqdEoUzMcB
F3YDLSg5c/CgLzaHdbUweRtCtIv4hsHjV3tRUFRi0JsZ0bJqUkB1y+1C4upePFR7
pJUQtoBDErK7ig==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:14 2026 by rpki-client