Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: +5HvPLppZ3saTVLnHID4MaaGkO+8IDYmibZXHbFiR/E=
Subject key identifier: 07:EE:8A:0C:FA:9E:0D:31:97:84:55:11:4D:0E:35:57:A4:36:3C:8B
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 01A17A041386AECEE9BD93C5A66F17AF9263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 074A
Signing time: Mon 26 Oct 2026 21:00:49 +0000
Manifest this update: Mon 26 Oct 2026 21:00:49 +0000
Manifest next update: Tue 27 Oct 2026 21:00:49 +0000
Files and hashes: 1: 3cRUjdhX8xbK1k4DfWaubJp1w0E.roa (hash: Z7aa0TuqsrWRnvU0sn3YMIcRZ7r4lbfupWu8b6jE2/I=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: uyK5mQPb9xk2xdiBIXrAWLTkK6R1JoR6cLVII3EeWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:13:86:ae:ce:e9:bd:93:c5:a6:6f:17:af:92:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Oct 26 21:00:49 2026 GMT
Not After : Oct 27 21:00:49 2026 GMT
Subject: CN=07ee8a0cfa9e0d31978455114d0e3557a4363c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:d4:4b:8a:cd:4c:f4:48:fb:a4:28:98:4f:
be:e2:f2:82:d4:82:df:cd:59:7f:a1:5c:57:5b:03:
d5:fc:85:a6:de:90:e0:f9:4d:64:63:7d:81:e5:01:
6c:a6:35:15:87:47:a0:f7:98:a5:a9:9d:09:bc:df:
5f:da:9c:8e:05:22:b6:ea:fd:26:97:8e:29:ae:a6:
5f:55:86:cc:13:48:4b:68:07:a7:f3:5a:28:c3:a3:
30:ea:6c:bd:b7:d2:e9:a3:54:17:41:b7:83:3f:26:
35:ea:97:da:aa:0b:39:12:e1:ec:0b:da:ba:50:a2:
b5:22:5e:8c:38:96:2b:45:c0:3a:3b:4a:43:15:88:
6b:ec:37:e9:11:8f:b3:cc:25:35:5c:97:3c:76:d0:
16:28:6b:15:f1:3d:53:07:56:7a:c0:6c:2f:58:b3:
5b:3f:e5:cc:ff:aa:e6:c9:8d:48:09:4b:36:4a:50:
d2:11:a3:c6:0c:d4:79:03:93:b9:00:53:bd:b1:ee:
2e:7f:fe:f9:42:06:b9:d5:c2:ec:b2:50:99:88:29:
41:a7:c5:77:bf:25:75:94:9e:fd:89:ef:46:36:34:
25:47:7f:d1:91:8c:74:ba:13:1f:c9:1f:58:fb:ef:
be:a2:57:e2:a3:ad:53:fc:56:3e:ee:80:da:84:78:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:8A:0C:FA:9E:0D:31:97:84:55:11:4D:0E:35:57:A4:36:3C:8B
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:90:5f:ad:37:b9:9e:b7:03:e1:fd:a1:d9:57:94:7d:af:ce:
b6:b4:c9:e3:31:a3:20:09:34:9e:b3:cf:98:07:7e:40:ad:d6:
39:02:f7:93:3a:93:91:78:c9:29:ae:74:ee:7b:8f:16:6b:fb:
79:74:ff:63:41:7e:d2:31:04:84:dd:70:be:64:26:c3:14:52:
85:65:b2:d5:01:e7:be:f6:1b:be:b1:c1:51:c2:71:7c:25:64:
48:27:cd:e0:b5:c7:2e:b5:63:5b:42:16:39:1b:8f:06:c4:a6:
b2:37:61:fd:d7:ea:2f:f9:a2:f6:0e:8c:18:1a:ea:6a:d7:07:
06:08:87:97:2a:3c:3a:cf:ac:da:74:ab:7f:30:9b:0e:a3:9e:
9b:ed:97:f3:63:f1:67:0f:6b:42:d6:cf:a7:3d:d4:1c:f6:ef:
26:59:f8:d0:b4:76:e1:a8:30:fe:4b:f0:9e:ca:8e:73:08:2c:
00:e4:42:0c:65:2f:4c:54:f7:2b:ab:cd:4a:b4:47:a0:19:a6:
6c:c3:2d:02:cb:27:3d:08:19:fc:39:ee:ab:a8:c2:30:d8:31:
14:ff:06:89:ab:0f:d5:fc:52:2a:1d:88:a6:f4:80:26:2d:85:
b9:1b:81:48:2f:35:4f:11:65:cf:b3:b4:81:87:d2:35:9e:f7:
5c:bc:79:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BBOGrs7pvZPFpm8Xr5JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NGFiYzhlNDVkZTIzMWZiODI5YmNhMjJiYjJmMGIzMWUx
ZjdhZjUwHhcNMjYxMDI2MjEwMDQ5WhcNMjYxMDI3MjEwMDQ5WjAzMTEwLwYDVQQD
EygwN2VlOGEwY2ZhOWUwZDMxOTc4NDU1MTE0ZDBlMzU1N2E0MzYzYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vUS4rNTPRI+6QomE++4vKC1ILf
zVl/oVxXWwPV/IWm3pDg+U1kY32B5QFspjUVh0eg95ilqZ0JvN9f2pyOBSK26v0m
l44prqZfVYbME0hLaAen81oow6Mw6my9t9Lpo1QXQbeDPyY16pfaqgs5EuHsC9q6
UKK1Il6MOJYrRcA6O0pDFYhr7DfpEY+zzCU1XJc8dtAWKGsV8T1TB1Z6wGwvWLNb
P+XM/6rmyY1ICUs2SlDSEaPGDNR5A5O5AFO9se4uf/75Qga51cLsslCZiClBp8V3
vyV1lJ79ie9GNjQlR3/RkYx0uhMfyR9Y++++olfio61T/FY+7oDahHizeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfuigz6ng0xl4RVEU0ONVekNjyLMB8GA1UdIwQY
MBaAFGVKvI5F3iMfuCm8oiuy8LMeH3r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMt
ZjI4N2I3YjZkN2IyLzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMtZjI4N2I3YjZkN2Iy
LzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5BfrTe5
nrcD4f2h2VeUfa/OtrTJ4zGjIAk0nrPPmAd+QK3WOQL3kzqTkXjJKa507nuPFmv7
eXT/Y0F+0jEEhN1wvmQmwxRShWWy1QHnvvYbvrHBUcJxfCVkSCfN4LXHLrVjW0IW
ORuPBsSmsjdh/dfqL/mi9g6MGBrqatcHBgiHlyo8Os+s2nSrfzCbDqOem+2X82Px
Zw9rQtbPpz3UHPbvJln40LR24agw/kvwnsqOcwgsAORCDGUvTFT3K6vNSrRHoBmm
bMMtAssnPQgZ/Dnuq6jCMNgxFP8GiasP1fxSKh2IpvSAJi2FuRuBSC81TxFlz7O0
gYfSNZ73XLx5XQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:07:40 2026 by rpki-client