Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: 3jBpRrD3dJ2UmeExITs3+eIhNiZGhQ5G2OeYmzsJuHw=
Subject key identifier: 6D:4C:0F:57:4B:C6:A0:89:1D:26:CA:A8:24:14:EC:80:EE:89:8B:1B
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 01A17DE1B70A721E0467A60BABCC874FB487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 1A3A
Signing time: Tue 27 Oct 2026 15:01:46 +0000
Manifest this update: Tue 27 Oct 2026 15:01:46 +0000
Manifest next update: Wed 28 Oct 2026 15:01:46 +0000
Files and hashes: 1: 6athwBrtylH9PrTB1To_GHuyoLk.roa (hash: KvX3mkFuSj/fSyt2Atm7Fel+40as+0+gYyexQT4CePY=)
2: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: ljPDkOk/RcgRZN9wxw/+ZlZQqaNovFuBsfv3EZyKFYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:b7:0a:72:1e:04:67:a6:0b:ab:cc:87:4f:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Oct 27 15:01:46 2026 GMT
Not After : Oct 28 15:01:46 2026 GMT
Subject: CN=6d4c0f574bc6a0891d26caa82414ec80ee898b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:bb:33:1e:5d:7d:3f:2c:d8:18:df:ad:63:
50:35:98:d1:02:11:a5:51:40:8f:b0:b9:29:99:2e:
a7:bb:af:ab:d2:54:8f:28:31:f2:fa:2b:09:66:f0:
6d:09:1f:7d:9a:e2:4c:de:fd:c7:50:d0:f6:03:21:
54:62:a5:2b:a2:44:0e:c1:03:d4:25:6b:35:1f:7c:
b2:c3:be:98:b5:d1:33:09:8b:66:17:98:ef:74:f3:
1c:45:6c:1c:87:fd:f9:28:2f:36:86:ae:47:47:ec:
0b:64:49:46:aa:9a:41:a3:11:7c:0a:af:5d:25:91:
6c:42:5d:a9:f6:0e:c8:d5:30:b9:8b:c0:fe:81:d9:
55:ec:df:02:8c:35:e0:9a:95:22:b5:5c:1b:43:3a:
b7:72:8a:54:d1:61:f6:39:55:3d:b2:87:34:5a:4b:
69:c5:c8:3c:0a:65:bb:8c:66:3d:80:64:c3:f9:e4:
c1:64:eb:9f:4e:c4:f7:7c:28:a2:3e:5e:62:5b:a9:
e8:f6:2e:3a:bb:0b:fa:13:fc:9d:c2:9f:7d:3f:e4:
c9:fe:27:8b:a6:9c:d5:21:20:8c:cd:04:4f:a1:58:
23:cb:37:2a:82:74:85:00:cb:cf:7c:e8:56:7b:e9:
05:78:74:6f:bd:17:b6:39:92:d5:4e:c4:83:15:63:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:0F:57:4B:C6:A0:89:1D:26:CA:A8:24:14:EC:80:EE:89:8B:1B
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:75:8f:4b:f8:86:2d:af:03:cb:81:68:ca:50:41:15:93:4e:
64:ae:6b:77:23:f4:66:69:95:3c:31:03:ca:e3:75:b3:88:e9:
1e:f3:69:9b:2e:97:5f:c8:db:66:e0:83:c8:24:8b:53:69:e5:
8d:36:a6:ce:89:79:f9:7e:ac:d5:2d:bf:fb:17:eb:e2:35:f7:
36:84:9b:b1:c6:7d:72:c6:1d:a6:46:b9:eb:3c:40:e4:dc:e2:
db:50:5e:2c:4d:e4:fe:09:25:76:ed:3d:2f:cf:41:6c:aa:ba:
05:b2:88:1c:94:db:51:c3:be:fb:13:f1:df:8e:a2:b3:68:2a:
6b:aa:8c:5d:d1:b7:06:84:99:97:b7:26:67:26:b6:f1:47:9a:
e2:36:e5:fc:71:d1:da:e9:e9:44:02:37:2c:89:c1:4b:24:6d:
16:ab:c2:25:11:e7:74:8d:f4:f9:d9:e6:3d:8e:94:3a:d9:d0:
23:7d:b2:b5:98:c0:ce:db:ad:64:cd:71:7b:b1:68:63:07:22:
3f:0a:06:41:9f:27:bd:57:05:52:02:06:25:e0:1b:9c:c1:81:
2e:20:f5:61:e3:fb:f6:8d:cf:de:42:38:57:a1:fd:fd:2d:ca:
8e:e9:57:c5:ee:f0:f4:f4:74:1c:83:05:ad:0a:ad:fe:d3:b5:
68:8e:88:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94bcKch4EZ6YLq8yHT7SHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NmQ5N2NlYjg0ZTljNjE2YmZlNmQ5MzU3NmNjMzNiYmY0
YjYzZWYwHhcNMjYxMDI3MTUwMTQ2WhcNMjYxMDI4MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg2ZDRjMGY1NzRiYzZhMDg5MWQyNmNhYTgyNDE0ZWM4MGVlODk4YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFe7Mx5dfT8s2BjfrWNQNZjRAhGl
UUCPsLkpmS6nu6+r0lSPKDHy+isJZvBtCR99muJM3v3HUND2AyFUYqUrokQOwQPU
JWs1H3yyw76YtdEzCYtmF5jvdPMcRWwch/35KC82hq5HR+wLZElGqppBoxF8Cq9d
JZFsQl2p9g7I1TC5i8D+gdlV7N8CjDXgmpUitVwbQzq3copU0WH2OVU9soc0Wktp
xcg8CmW7jGY9gGTD+eTBZOufTsT3fCiiPl5iW6no9i46uwv6E/ydwp99P+TJ/ieL
ppzVISCMzQRPoVgjyzcqgnSFAMvPfOhWe+kFeHRvvRe2OZLVTsSDFWN8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1MD1dLxqCJHSbKqCQU7IDuiYsbMB8GA1UdIwQY
MBaAFGZtl864Tpxha/5tk1dswzu/S2PvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODkt
NjliYWFmZGQ5YTZlLzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODktNjliYWFmZGQ5YTZl
LzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInWPS/iG
La8Dy4FoylBBFZNOZK5rdyP0ZmmVPDEDyuN1s4jpHvNpmy6XX8jbZuCDyCSLU2nl
jTamzol5+X6s1S2/+xfr4jX3NoSbscZ9csYdpka56zxA5Nzi21BeLE3k/gkldu09
L89BbKq6BbKIHJTbUcO++xPx346is2gqa6qMXdG3BoSZl7cmZya28Uea4jbl/HHR
2unpRAI3LInBSyRtFqvCJRHndI30+dnmPY6UOtnQI32ytZjAztutZM1xe7FoYwci
PwoGQZ8nvVcFUgIGJeAbnMGBLiD1YeP79o3P3kI4V6H9/S3KjulXxe7w9PR0HIMF
rQqt/tO1aI6IWA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:47 2026 by rpki-client