Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: ihF9QiCZA89akatQZ8z30Qy9YBdfriF6niVVsKAP2io=
Subject key identifier: B0:9C:A7:72:9B:28:D6:31:96:D6:47:64:A3:33:FE:72:4C:5D:9C:17
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01A17C5FF428C214F04F941424AFD5B27A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 100F
Signing time: Tue 27 Oct 2026 08:00:25 +0000
Manifest this update: Tue 27 Oct 2026 08:00:25 +0000
Manifest next update: Wed 28 Oct 2026 08:00:25 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: rBUpueyxPUnwdL9WRPY44MQ5TGMQ0Rd6+WM5GkEy7So=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:f4:28:c2:14:f0:4f:94:14:24:af:d5:b2:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Oct 27 08:00:25 2026 GMT
Not After : Oct 28 08:00:25 2026 GMT
Subject: CN=b09ca7729b28d63196d64764a333fe724c5d9c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:41:c7:d0:ed:00:5f:d7:f9:5b:dc:c5:36:
94:61:93:d2:16:a2:c9:bc:ae:03:eb:19:aa:2f:16:
b2:0d:61:dc:f1:5c:61:1e:40:c5:87:20:86:39:06:
26:5b:43:a3:eb:18:2f:d4:f7:e6:b7:ba:be:ed:54:
ee:b2:d2:ff:13:6b:b3:b1:67:a9:b0:1e:c1:c7:4c:
bf:18:b9:90:9b:f7:59:da:7e:a5:aa:9c:23:59:c3:
e3:84:78:34:d1:33:a2:55:21:56:db:31:df:76:7c:
9a:0a:4e:81:dc:b2:36:8b:94:58:df:6c:ec:31:a4:
37:ec:c6:be:d9:61:a0:e6:b3:e8:77:1b:e9:08:73:
fa:88:f5:ee:cf:a1:81:8d:68:d4:a3:9b:6c:ae:47:
15:48:76:b7:e4:62:9b:ff:4f:29:7b:45:86:cd:47:
59:e2:b3:9f:cc:83:bb:b9:7f:ff:b3:13:91:46:8a:
93:a0:7c:26:82:59:7e:4e:0c:a3:5e:c1:d5:5e:5f:
eb:45:23:72:e5:de:85:5e:49:e4:c1:68:4c:28:34:
66:36:23:e2:d8:b4:68:4e:e1:4a:1b:45:33:27:18:
41:7b:20:27:de:80:98:02:69:d3:a8:d1:2d:3a:c4:
b9:04:16:9f:b4:9b:0a:ab:be:14:ca:74:4f:ec:7a:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:A7:72:9B:28:D6:31:96:D6:47:64:A3:33:FE:72:4C:5D:9C:17
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c1:44:71:67:e5:ff:6d:51:ac:40:45:74:1f:e2:c7:78:b7:
ed:12:fd:2d:3f:a4:3b:3c:04:50:0a:a0:49:93:99:8a:49:2a:
9f:f1:e6:c2:2c:7a:5c:49:de:0c:f3:7b:f0:a3:7a:e5:92:c0:
e5:ce:79:bf:48:67:9f:6d:97:17:1d:3f:77:1a:19:d6:7e:a9:
19:47:f5:ce:3d:7a:92:11:21:94:9b:3a:c5:28:bd:8d:75:6f:
37:06:32:b5:8f:5f:d1:42:3c:ac:80:8e:5b:d8:4f:4d:96:6c:
e1:77:65:8a:48:8e:7c:53:fe:71:f2:30:28:19:23:c8:26:5d:
01:5f:11:7f:34:8e:0d:a8:eb:0f:78:77:c9:13:a3:a2:1e:ce:
65:1b:8b:49:f6:ba:97:11:53:11:f6:9c:91:e2:09:62:bf:d8:
c1:e9:54:e3:20:a5:56:63:01:9d:3d:62:88:47:3c:6b:84:8c:
21:03:a8:2a:86:6d:7d:e7:91:96:fa:bd:97:ac:d7:d4:8f:02:
92:d4:66:ed:83:ab:39:de:27:80:28:70:77:1e:83:bd:d9:b9:
12:d3:61:d8:ea:d6:18:40:c4:07:76:96:4d:25:13:98:a9:63:
c5:e7:aa:2f:73:e6:f1:57:02:80:18:72:c8:c3:6c:b7:e8:72:
1e:ce:5f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X/QowhTwT5QUJK/VsnqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjYxMDI3MDgwMDI1WhcNMjYxMDI4MDgwMDI1WjAzMTEwLwYDVQQD
EyhiMDljYTc3MjliMjhkNjMxOTZkNjQ3NjRhMzMzZmU3MjRjNWQ5YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqxBx9DtAF/X+VvcxTaUYZPSFqLJ
vK4D6xmqLxayDWHc8VxhHkDFhyCGOQYmW0Oj6xgv1Pfmt7q+7VTustL/E2uzsWep
sB7Bx0y/GLmQm/dZ2n6lqpwjWcPjhHg00TOiVSFW2zHfdnyaCk6B3LI2i5RY32zs
MaQ37Ma+2WGg5rPodxvpCHP6iPXuz6GBjWjUo5tsrkcVSHa35GKb/08pe0WGzUdZ
4rOfzIO7uX//sxORRoqToHwmgll+TgyjXsHVXl/rRSNy5d6FXknkwWhMKDRmNiPi
2LRoTuFKG0UzJxhBeyAn3oCYAmnTqNEtOsS5BBaftJsKq74UynRP7HpbkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCcp3KbKNYxltZHZKMz/nJMXZwXMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMFEcWfl
/21RrEBFdB/ix3i37RL9LT+kOzwEUAqgSZOZikkqn/Hmwix6XEneDPN78KN65ZLA
5c55v0hnn22XFx0/dxoZ1n6pGUf1zj16khEhlJs6xSi9jXVvNwYytY9f0UI8rICO
W9hPTZZs4XdlikiOfFP+cfIwKBkjyCZdAV8RfzSODajrD3h3yROjoh7OZRuLSfa6
lxFTEfackeIJYr/YwelU4yClVmMBnT1iiEc8a4SMIQOoKoZtfeeRlvq9l6zX1I8C
ktRm7YOrOd4ngChwdx6Dvdm5EtNh2OrWGEDEB3aWTSUTmKljxeeqL3Pm8VcCgBhy
yMNst+hyHs5f/w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:54 2026 by rpki-client