Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: P84YA4qUjPK4DGWaNUVreU7LG4ZLDRzXfVld7LxBgcc=
Subject key identifier: 9A:01:2C:F1:F6:29:C0:88:3A:86:68:B3:A2:D5:9B:30:77:B8:41:E3
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 01A17F61B4ECC50261C9F00D3451C9BBB7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0C05
Signing time: Tue 27 Oct 2026 22:01:11 +0000
Manifest this update: Tue 27 Oct 2026 22:01:11 +0000
Manifest next update: Wed 28 Oct 2026 22:01:11 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: stKgMq/nZFz4x8UPZA39xr/SGuMOj5JChHJfn77nU0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:b4:ec:c5:02:61:c9:f0:0d:34:51:c9:bb:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Oct 27 22:01:11 2026 GMT
Not After : Oct 28 22:01:11 2026 GMT
Subject: CN=9a012cf1f629c0883a8668b3a2d59b3077b841e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:c7:a1:fe:93:89:16:7f:4a:1a:fc:2b:97:
d9:a9:b8:9f:e7:e9:42:94:79:cb:e2:3d:a8:c8:d8:
8b:0d:6a:c3:95:db:35:1c:78:2b:07:c8:cb:92:4a:
cb:ac:76:be:49:e6:47:01:70:3c:71:3a:5e:6e:f4:
b4:10:3d:f2:df:e0:47:a6:f0:30:0a:c2:3d:38:db:
a1:a8:b9:74:2f:4b:39:f1:a6:2c:f4:5d:06:e1:54:
bc:12:60:5c:7c:5a:d1:24:07:4e:61:7a:cc:39:89:
67:e4:3e:ec:82:b0:8a:d7:52:ef:e8:4a:7c:11:a5:
2e:67:1a:d8:15:87:9f:a5:ca:0b:af:ca:1d:0d:7b:
97:ac:01:10:89:8f:e2:a9:0e:07:4b:24:a2:19:b3:
5c:d0:20:b7:c8:72:42:b1:d0:0f:a5:09:ae:0d:f0:
a0:7c:4f:b4:14:a6:f6:03:bc:74:24:f6:e5:d0:ac:
2c:16:ee:d9:ed:33:3f:9c:69:79:0f:1a:79:a6:64:
6c:a6:b7:f4:39:fe:38:73:78:e7:73:81:a7:b2:4f:
29:d1:7d:e7:d0:be:18:0f:c9:95:f0:7a:48:c3:28:
45:5e:4e:65:1e:d4:ef:32:01:a3:31:5c:27:f1:aa:
7b:e2:a3:9b:22:6d:81:fd:46:bd:d3:3e:46:fd:20:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:01:2C:F1:F6:29:C0:88:3A:86:68:B3:A2:D5:9B:30:77:B8:41:E3
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:b0:a6:11:22:df:45:ac:30:db:dc:9e:2f:43:be:4c:16:
c8:e3:56:24:1a:eb:06:49:e8:8a:3d:52:5b:92:67:8b:3c:59:
3b:8b:49:91:e3:c7:e5:2e:3f:5b:4f:93:23:8d:65:b3:07:f6:
15:3c:6b:5f:63:dc:e7:06:80:1f:9c:2f:9f:62:ec:0a:33:1a:
61:e9:4c:81:47:e1:e3:0b:81:a6:b2:b9:06:06:59:f8:58:77:
c0:26:34:60:7e:68:a7:aa:ca:62:c3:03:a2:39:91:46:32:35:
6b:d0:9d:57:3c:03:a8:61:cf:df:b3:57:bc:43:c3:2d:8b:7e:
f8:31:e7:bf:b1:91:0f:fb:bc:19:64:56:97:45:f0:c7:30:22:
75:f7:7d:5d:c5:14:4a:8e:e8:2f:09:81:cd:68:52:3d:74:d0:
f2:dc:b4:73:5d:ad:64:83:ee:00:55:c6:71:84:e0:53:8c:bd:
d3:24:9a:f8:a5:56:89:87:35:e6:f6:cf:6c:06:8a:b0:32:bf:
65:a7:f5:4f:fd:ba:b9:f8:36:57:e7:dd:a0:d6:54:2a:27:1c:
1f:48:f6:7d:6b:cc:ed:55:bb:af:d7:4d:ab:43:5c:8c:61:17:
f8:9e:b7:10:c4:da:08:75:40:90:2b:49:32:3c:71:e6:48:93:
32:8c:b3:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YbTsxQJhyfANNFHJu7erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjFlMjE4ODM4NDBiMTM2NWMzMzg1NzEzMTNiN2QzMmFh
ZDljNTcwHhcNMjYxMDI3MjIwMTExWhcNMjYxMDI4MjIwMTExWjAzMTEwLwYDVQQD
Eyg5YTAxMmNmMWY2MjljMDg4M2E4NjY4YjNhMmQ1OWIzMDc3Yjg0MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjvHof6TiRZ/Shr8K5fZqbif5+lC
lHnL4j2oyNiLDWrDlds1HHgrB8jLkkrLrHa+SeZHAXA8cTpebvS0ED3y3+BHpvAw
CsI9ONuhqLl0L0s58aYs9F0G4VS8EmBcfFrRJAdOYXrMOYln5D7sgrCK11Lv6Ep8
EaUuZxrYFYefpcoLr8odDXuXrAEQiY/iqQ4HSySiGbNc0CC3yHJCsdAPpQmuDfCg
fE+0FKb2A7x0JPbl0KwsFu7Z7TM/nGl5Dxp5pmRsprf0Of44c3jnc4Gnsk8p0X3n
0L4YD8mV8HpIwyhFXk5lHtTvMgGjMVwn8ap74qObIm2B/Ua90z5G/SAt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoBLPH2KcCIOoZos6LVmzB3uEHjMB8GA1UdIwQY
MBaAFGRh4hiDhAsTZcM4VxMTt9MqrZxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMt
MWMxYjk3NGZmYWZjLzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMtMWMxYjk3NGZmYWZj
LzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkWwphEi
30WsMNvcni9DvkwWyONWJBrrBknoij1SW5JnizxZO4tJkePH5S4/W0+TI41lswf2
FTxrX2Pc5waAH5wvn2LsCjMaYelMgUfh4wuBprK5BgZZ+Fh3wCY0YH5op6rKYsMD
ojmRRjI1a9CdVzwDqGHP37NXvEPDLYt++DHnv7GRD/u8GWRWl0XwxzAidfd9XcUU
So7oLwmBzWhSPXTQ8ty0c12tZIPuAFXGcYTgU4y90ySa+KVWiYc15vbPbAaKsDK/
Zaf1T/26ufg2V+fdoNZUKiccH0j2fWvM7VW7r9dNq0NcjGEX+J63EMTaCHVAkCtJ
Mjxx5kiTMoyzBg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:44 2026 by rpki-client