Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: ORUGfNuZW2mbz9XK9c6W7IN/cCWdE5uGbuVfBrkH/ic=
Subject key identifier: 0F:F7:E1:E2:F2:05:FD:87:BE:0B:3C:FE:87:CC:7F:D4:7F:57:58:7B
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 01A180E28A5BBEF7E30B0E401E4213844A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 034A
Signing time: Wed 28 Oct 2026 05:01:32 +0000
Manifest this update: Wed 28 Oct 2026 05:01:32 +0000
Manifest next update: Thu 29 Oct 2026 05:01:32 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: aefF4bHkbZUb8flSbCYWDU26ffQdaq3XLwbzUP7c23w=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:8a:5b:be:f7:e3:0b:0e:40:1e:42:13:84:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Oct 28 05:01:32 2026 GMT
Not After : Oct 29 05:01:32 2026 GMT
Subject: CN=0ff7e1e2f205fd87be0b3cfe87cc7fd47f57587b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:12:10:f7:10:db:5e:d1:63:ef:7c:f2:15:
45:55:0f:fd:d3:e0:d9:17:1c:09:1d:bb:4d:0b:e1:
98:b7:21:86:b9:89:80:12:d4:4d:f5:58:e1:23:4b:
f1:63:a8:f6:3a:66:77:84:3a:32:30:05:34:5a:41:
d9:6f:69:f1:4b:a8:b5:cb:c0:d5:d4:72:6c:6e:b1:
6d:96:35:6c:51:d0:8d:76:c4:09:75:5e:56:8a:b2:
03:26:90:f2:79:2a:98:75:2d:b1:cb:fd:13:b1:bb:
4b:b8:cf:ff:31:47:75:d4:f1:97:59:9b:24:f9:ed:
6c:53:c9:3b:92:c3:ea:a4:ff:d2:d1:78:dc:c0:43:
bb:2c:e7:59:8c:57:e4:98:13:de:2a:fe:a7:58:fe:
73:9f:13:89:2e:28:9d:6d:4f:05:e8:e6:22:b9:f5:
e6:78:18:a3:22:ed:2c:8a:70:b9:f8:16:de:eb:a4:
32:a6:62:44:09:ff:d0:34:73:ec:97:18:05:5c:c6:
41:77:c6:9c:03:51:88:ee:59:8c:e9:04:5d:16:40:
bb:af:c7:7c:23:39:bf:83:49:b6:1d:e4:bd:d8:42:
04:6a:0c:7e:c9:72:93:43:3a:82:29:ec:3d:35:9f:
91:22:16:a8:7d:51:17:cc:dc:ca:55:c9:c4:12:69:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:E1:E2:F2:05:FD:87:BE:0B:3C:FE:87:CC:7F:D4:7F:57:58:7B
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:63:27:a6:3b:ec:84:aa:33:7a:b3:61:9c:71:53:5d:04:
24:d5:ea:e1:b1:98:65:b1:e9:c5:83:97:ff:b0:db:44:ed:ce:
7c:2a:6a:65:a4:fd:b2:82:fd:02:f2:45:77:6a:1b:03:c8:5a:
1a:03:8c:f1:b2:21:0e:d3:cf:16:11:a9:70:1a:c0:fd:a1:3d:
53:73:ce:58:aa:bd:aa:b1:10:7b:81:79:96:c9:13:e3:8d:b9:
e7:f9:8a:c7:75:dd:5d:93:ce:ab:ac:60:17:7b:0b:91:77:bf:
fb:b9:84:9a:46:c3:36:d7:47:f8:2a:8a:6b:86:1b:ad:46:f3:
eb:88:4a:66:f5:a7:db:4b:67:aa:77:b9:b0:bd:49:67:27:29:
1a:97:d4:31:a2:fd:95:8a:3a:60:d3:fe:94:60:0c:a2:32:1b:
d8:09:e5:27:93:ee:c7:7e:8f:e7:b0:8c:1e:cf:f9:35:73:28:
0d:01:f1:d9:b7:9b:c3:5d:e0:c3:f6:85:0c:fe:68:f4:7c:60:
9e:da:84:43:e7:07:08:38:57:61:24:1c:02:59:19:db:54:9b:
6e:55:b5:bf:68:30:f2:80:c4:8b:71:6b:7f:7a:26:21:5f:b6:
30:c9:d3:bf:f1:bc:54:2e:14:b8:72:14:42:f2:8d:6b:b2:78:
fa:da:ac:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4opbvvfjCw5AHkIThEqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Y2QzNTk0NjhjOGJhYTk4ZmMzY2EyZWYyZDkwNTgzYTY5
ZTAwMTYwHhcNMjYxMDI4MDUwMTMyWhcNMjYxMDI5MDUwMTMyWjAzMTEwLwYDVQQD
EygwZmY3ZTFlMmYyMDVmZDg3YmUwYjNjZmU4N2NjN2ZkNDdmNTc1ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ESEPcQ217RY+988hVFVQ/90+DZ
FxwJHbtNC+GYtyGGuYmAEtRN9VjhI0vxY6j2OmZ3hDoyMAU0WkHZb2nxS6i1y8DV
1HJsbrFtljVsUdCNdsQJdV5WirIDJpDyeSqYdS2xy/0TsbtLuM//MUd11PGXWZsk
+e1sU8k7ksPqpP/S0XjcwEO7LOdZjFfkmBPeKv6nWP5znxOJLiidbU8F6OYiufXm
eBijIu0sinC5+Bbe66QypmJECf/QNHPslxgFXMZBd8acA1GI7lmM6QRdFkC7r8d8
Izm/g0m2HeS92EIEagx+yXKTQzqCKew9NZ+RIhaofVEXzNzKVcnEEmkyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/34eLyBf2Hvgs8/ofMf9R/V1h7MB8GA1UdIwQY
MBaAFGbNNZRoyLqpj8PKLvLZBYOmngAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYt
ZTM1OWFlMGE2ODM4LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYtZTM1OWFlMGE2ODM4
LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSBjJ6Y7
7ISqM3qzYZxxU10EJNXq4bGYZbHpxYOX/7DbRO3OfCpqZaT9soL9AvJFd2obA8ha
GgOM8bIhDtPPFhGpcBrA/aE9U3POWKq9qrEQe4F5lskT44255/mKx3XdXZPOq6xg
F3sLkXe/+7mEmkbDNtdH+CqKa4YbrUbz64hKZvWn20tnqne5sL1JZycpGpfUMaL9
lYo6YNP+lGAMojIb2AnlJ5Pux36P57CMHs/5NXMoDQHx2bebw13gw/aFDP5o9Hxg
ntqEQ+cHCDhXYSQcAlkZ21SbblW1v2gw8oDEi3Frf3omIV+2MMnTv/G8VC4UuHIU
QvKNa7J4+tqsLg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:18:41 2026 by rpki-client