Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier: cDMdmMCMXvZTAAGKkIW3EKtDpsXL4hMi+2NFNN3cl2A=
Subject key identifier: 39:DB:DC:48:80:81:DC:33:B7:7D:3B:0F:E0:00:5B:90:B4:F2:62:0E
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01A15D0D25EB15FA631978181A89E44E1384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number: 1AC0
Signing time: Wed 21 Oct 2026 06:01:45 +0000
Manifest this update: Wed 21 Oct 2026 06:01:45 +0000
Manifest next update: Thu 22 Oct 2026 06:01:45 +0000
Files and hashes: 1: 8ZD3foPne5Uu0Frgl5XT2H_UPbE.roa (hash: BwriFtC3LjqKS69M0kTI/KhWgtzFlE5iLxnBL8ZKdX0=)
2: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (hash: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA=)
3: BP12kDUnrOn-M98454GfIKBpkdg.roa (hash: ZGSS3G1o1g5i9zOobvqxYdhIQzQzsLy3DZLWvn5AyPU=)
4: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: asFA5cnrWXu/mNDoauIRIVaemeJLEg6F039PWUq8B+I=)
5: _rX0Pp7-maFWlmqvdtFQDE9VMd4.roa (hash: JcwoPPYbwcTSP2znNESFrTnQNOV0v0WHsf0jgmgiH6I=)
6: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (hash: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk=)
7: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (hash: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:0d:25:eb:15:fa:63:19:78:18:1a:89:e4:4e:13:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Oct 21 06:01:45 2026 GMT
Not After : Oct 22 06:01:45 2026 GMT
Subject: CN=39dbdc488081dc33b77d3b0fe0005b90b4f2620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:4a:2b:96:69:43:33:0e:1a:b9:05:65:ad:
e6:6e:35:00:c1:56:c3:c9:04:34:a2:51:ef:04:82:
33:54:b6:c0:18:d8:7c:54:03:5d:8a:7f:8d:0d:02:
48:99:50:dd:2c:5e:cc:be:21:11:42:d6:24:21:43:
dd:87:37:78:93:03:da:17:3a:82:b8:37:9a:e9:11:
18:6c:b6:e8:05:e6:5b:bc:5f:89:10:15:83:e6:53:
0d:c0:78:c9:1f:28:28:99:f6:0c:05:05:29:db:ef:
91:fb:04:0b:dd:18:e1:ca:d2:9d:18:96:b5:7a:df:
fa:51:b5:8a:49:37:b4:0c:d7:54:03:b5:ce:af:a1:
9c:c6:a1:2a:f5:81:e5:f4:d5:4e:c8:48:65:a8:dd:
d8:41:82:30:78:22:43:92:74:f1:f9:b4:f4:b5:56:
0d:dd:bc:5c:6b:29:d9:2c:f2:56:1f:d2:b6:7d:db:
9d:92:d0:29:a4:03:4e:6c:86:33:9f:80:21:b6:bb:
7c:7f:f8:5a:81:26:34:cf:8d:90:55:0e:68:4e:07:
d6:a6:d2:8e:fa:e1:d3:1e:1c:26:93:c4:55:68:4e:
41:17:4f:6b:ba:37:78:f8:93:c3:5f:86:30:80:25:
40:a4:39:a2:db:b5:0e:50:5a:49:9d:43:ba:2d:03:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:DC:48:80:81:DC:33:B7:7D:3B:0F:E0:00:5B:90:B4:F2:62:0E
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fc:4a:36:46:81:48:5c:de:09:67:f6:f7:6d:d7:95:6d:0a:
e9:fa:be:c6:26:a7:83:85:87:f6:ef:2a:8c:30:68:1a:f5:fa:
e9:5b:57:dc:3f:93:8a:59:ce:71:38:f8:dd:4e:e7:95:5c:7a:
05:4d:de:80:28:97:96:15:1a:f3:07:d0:28:da:e8:04:ea:11:
72:7f:04:ec:b8:a2:76:15:80:73:b1:46:72:35:df:0e:a4:c9:
dc:59:e3:be:ac:21:03:27:db:69:72:57:13:34:6b:46:10:58:
f7:7e:e3:0e:32:7a:9a:67:c2:35:c7:9d:dd:aa:92:98:27:2d:
37:5d:e5:fd:a8:3f:9e:4d:14:39:e3:c2:5b:d0:19:bf:c2:0a:
85:69:ca:67:29:6d:8a:2c:0f:6f:40:52:41:ae:8e:3a:5c:98:
d6:17:19:0e:c8:f4:74:e5:3f:81:0d:8e:c8:4a:55:b6:5c:1a:
63:2b:4c:88:26:23:c2:90:12:4e:ea:c0:98:1c:b1:74:0d:43:
83:78:38:20:94:29:1c:05:96:88:d1:77:1b:3c:d3:a8:66:54:
10:b6:d8:a1:44:4d:29:34:f3:8b:44:c7:01:d6:b3:d5:82:7f:
30:e6:4c:70:77:38:97:0d:33:7c:32:34:22:a9:70:56:ee:56:
64:92:d6:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDSXrFfpjGXgYGonkThOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy
ZGFjNjgwHhcNMjYxMDIxMDYwMTQ1WhcNMjYxMDIyMDYwMTQ1WjAzMTEwLwYDVQQD
EygzOWRiZGM0ODgwODFkYzMzYjc3ZDNiMGZlMDAwNWI5MGI0ZjI2MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllJKK5ZpQzMOGrkFZa3mbjUAwVbD
yQQ0olHvBIIzVLbAGNh8VANdin+NDQJImVDdLF7MviERQtYkIUPdhzd4kwPaFzqC
uDea6REYbLboBeZbvF+JEBWD5lMNwHjJHygomfYMBQUp2++R+wQL3RjhytKdGJa1
et/6UbWKSTe0DNdUA7XOr6GcxqEq9YHl9NVOyEhlqN3YQYIweCJDknTx+bT0tVYN
3bxcaynZLPJWH9K2fdudktAppANObIYzn4Ahtrt8f/hagSY0z42QVQ5oTgfWptKO
+uHTHhwmk8RVaE5BF09rujd4+JPDX4YwgCVApDmi27UOUFpJnUO6LQM4vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnb3EiAgdwzt307D+AAW5C08mIOMB8GA1UdIwQY
MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct
ZjBiOTYyZjUyNDE0LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0
LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPxKNkaB
SFzeCWf2923XlW0K6fq+xiang4WH9u8qjDBoGvX66VtX3D+TilnOcTj43U7nlVx6
BU3egCiXlhUa8wfQKNroBOoRcn8E7LiidhWAc7FGcjXfDqTJ3FnjvqwhAyfbaXJX
EzRrRhBY937jDjJ6mmfCNced3aqSmCctN13l/ag/nk0UOePCW9AZv8IKhWnKZylt
iiwPb0BSQa6OOlyY1hcZDsj0dOU/gQ2OyEpVtlwaYytMiCYjwpASTurAmByxdA1D
g3g4IJQpHAWWiNF3GzzTqGZUELbYoURNKTTzi0THAdaz1YJ/MOZMcHc4lw0zfDI0
IqlwVu5WZJLWNA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 16:33:37 2026 by rpki-client