Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: ywRXtsz7SHFrNozw1dbLzJ8Dz6BdrGi+kDuEZkqtcnM=
Subject key identifier: AD:B4:70:0C:1E:51:6E:97:C0:3C:96:AE:3D:CA:BF:A5:3E:F5:0A:27
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 01A194690939D26A41E0A11C21CF04EBC5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1AD2
Signing time: Sun 01 Nov 2026 00:01:13 +0000
Manifest this update: Sun 01 Nov 2026 00:01:13 +0000
Manifest next update: Mon 02 Nov 2026 00:01:13 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: r0reGo/XZbPjkzLvKSRaoMonODI5EY3EzC2R6YLxBsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:69:09:39:d2:6a:41:e0:a1:1c:21:cf:04:eb:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Nov 1 00:01:13 2026 GMT
Not After : Nov 2 00:01:13 2026 GMT
Subject: CN=adb4700c1e516e97c03c96ae3dcabfa53ef50a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:08:e9:ac:58:4c:ac:e5:5e:1d:02:bb:88:
56:ae:37:c8:af:88:96:20:ad:96:05:b3:e1:a9:f1:
4a:e5:1e:bc:76:28:bc:6c:d7:b3:2b:7f:0b:c0:0c:
fd:fd:f2:12:2f:a8:61:b5:fd:2e:fc:b6:64:eb:01:
dc:cc:85:61:d5:f1:03:a0:04:57:5d:21:c8:86:e4:
97:dd:54:80:b1:0e:44:3c:68:5a:42:29:16:2e:7d:
fd:26:ae:62:b0:c9:3b:b4:fa:93:57:7a:33:21:a6:
0c:03:26:c0:2c:81:b4:52:6f:74:50:af:ba:0e:4f:
2c:4a:4d:73:ec:84:85:15:86:1b:0f:38:e0:6a:2e:
8c:f6:0f:5e:e4:b6:af:c4:73:5c:c2:8b:00:ec:89:
31:34:07:5c:ea:81:82:54:74:6c:f9:63:c0:dc:19:
61:5b:5c:59:42:11:78:92:49:65:70:46:c7:6f:62:
70:2d:05:58:10:62:00:f5:b7:b1:2a:e8:84:35:7d:
f5:df:40:46:8e:89:3b:08:a8:d7:be:d3:bf:24:59:
2f:0d:7b:60:df:c4:e5:fa:f2:9c:f3:a2:93:7b:50:
eb:e3:19:05:43:0c:8c:ec:ab:22:cd:3d:83:12:67:
c6:a7:28:c3:80:9b:56:d5:f3:b4:51:19:e9:d0:18:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:70:0C:1E:51:6E:97:C0:3C:96:AE:3D:CA:BF:A5:3E:F5:0A:27
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0f:f2:29:c9:e1:d1:ad:10:08:c6:71:bf:45:45:25:31:3e:
f6:2c:70:e1:ac:ea:02:18:6f:c6:77:82:db:7d:5e:c8:95:d8:
24:cd:d4:f7:28:af:b9:13:01:4b:0a:82:db:d6:c2:68:2a:c6:
ea:ca:51:6a:a9:36:ff:20:24:d9:1c:2a:32:1e:8a:c7:2a:73:
56:7f:0a:c8:54:75:00:12:83:fc:d0:c0:2b:33:89:d1:24:cb:
a0:e1:f6:23:72:11:c5:9a:cc:73:2b:55:6c:34:57:8b:8a:52:
3e:9b:56:5d:18:01:19:d7:ae:af:76:54:67:d9:5a:f7:6e:19:
cc:f1:ec:21:d7:a0:46:ac:5d:df:33:59:75:10:26:5a:f1:da:
ca:59:1e:ef:e6:1d:99:96:e4:72:95:fe:5b:8c:af:30:98:04:
c7:82:fd:6c:a5:d7:2e:7c:c1:50:53:6c:ac:d2:62:2e:7e:03:
4e:d4:58:27:78:78:91:02:c5:e2:c6:9c:67:c5:fb:47:d4:19:
14:f9:db:16:65:86:fb:63:39:c9:70:f8:16:bb:f2:c5:e8:be:
cd:eb:b6:1d:c1:a1:c8:6d:bc:b1:0b:6a:7e:83:0c:94:48:57:
0e:19:9c:93:3d:bf:53:d6:98:3a:07:43:dd:31:c9:fc:cb:47:
16:ed:88:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGUaQk50mpB4KEcIc8E68XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri
ODQ3NGQwHhcNMjYxMTAxMDAwMTEzWhcNMjYxMTAyMDAwMTEzWjAzMTEwLwYDVQQD
EyhhZGI0NzAwYzFlNTE2ZTk3YzAzYzk2YWUzZGNhYmZhNTNlZjUwYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33cI6axYTKzlXh0Cu4hWrjfIr4iW
IK2WBbPhqfFK5R68dii8bNezK38LwAz9/fISL6hhtf0u/LZk6wHczIVh1fEDoARX
XSHIhuSX3VSAsQ5EPGhaQikWLn39Jq5isMk7tPqTV3ozIaYMAybALIG0Um90UK+6
Dk8sSk1z7ISFFYYbDzjgai6M9g9e5LavxHNcwosA7IkxNAdc6oGCVHRs+WPA3Blh
W1xZQhF4kkllcEbHb2JwLQVYEGIA9bexKuiENX3130BGjok7CKjXvtO/JFkvDXtg
38Tl+vKc86KTe1Dr4xkFQwyM7KsizT2DEmfGpyjDgJtW1fO0URnp0BgoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK20cAweUW6XwDyWrj3Kv6U+9QonMB8GA1UdIwQY
MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt
ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi
LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeA/yKcnh
0a0QCMZxv0VFJTE+9ixw4azqAhhvxneC231eyJXYJM3U9yivuRMBSwqC29bCaCrG
6spRaqk2/yAk2RwqMh6KxypzVn8KyFR1ABKD/NDAKzOJ0STLoOH2I3IRxZrMcytV
bDRXi4pSPptWXRgBGdeur3ZUZ9la924ZzPHsIdegRqxd3zNZdRAmWvHaylke7+Yd
mZbkcpX+W4yvMJgEx4L9bKXXLnzBUFNsrNJiLn4DTtRYJ3h4kQLF4sacZ8X7R9QZ
FPnbFmWG+2M5yXD4Frvyxei+zeu2HcGhyG28sQtqfoMMlEhXDhmckz2/U9aYOgdD
3THJ/MtHFu2Iyw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:53:27 2026 by rpki-client