Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: PXVmjnV9fpHgjl6f48pyrhIsdBSxe1tLfr6QCbTlmLw=
Subject key identifier: 77:E5:42:65:60:2B:05:90:CC:DF:F2:58:98:64:F6:BF:F2:69:3D:AC
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 01A17A0380D557A42B6784919A67EA16E47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 030E
Signing time: Mon 26 Oct 2026 21:00:12 +0000
Manifest this update: Mon 26 Oct 2026 21:00:12 +0000
Manifest next update: Tue 27 Oct 2026 21:00:12 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: QBL+30w/KT4DzZxECxrJpYpDTI6mzQ68yPL8glEefD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:80:d5:57:a4:2b:67:84:91:9a:67:ea:16:e4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Oct 26 21:00:12 2026 GMT
Not After : Oct 27 21:00:12 2026 GMT
Subject: CN=77e54265602b0590ccdff2589864f6bff2693dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:c1:a1:55:bc:f8:47:7b:a6:41:bc:e6:80:
ab:ea:41:3e:98:66:de:4f:b5:c3:a2:2d:9e:5e:ad:
2d:03:9a:a5:b8:48:3b:0c:b0:ae:80:72:6b:80:a9:
de:14:f6:1f:71:4c:01:c7:be:0e:02:0a:e4:b9:74:
11:95:67:3d:30:6f:66:55:2a:dc:4a:f7:bb:94:06:
6a:43:b6:de:ab:c1:a1:ad:e2:7a:c8:4d:1d:1b:5a:
c5:64:cb:fb:e7:41:60:5d:9a:7d:ab:63:0e:1f:18:
5a:d8:de:2d:cb:97:87:46:4c:75:47:05:d0:74:71:
30:a7:ce:03:8d:98:2a:a2:f1:d6:c6:35:9a:4f:6a:
a8:7d:47:cf:21:90:ba:9f:8d:aa:1a:a3:33:b2:26:
91:d0:03:c8:3f:cd:20:8d:88:7c:ad:08:dc:67:9b:
3b:37:fe:4d:b0:fc:71:73:e9:f6:71:57:4b:9d:bd:
f9:db:8c:68:8f:01:77:53:5b:0b:49:b8:31:38:e6:
fe:e8:86:a6:d7:10:53:f5:0b:5d:93:a2:1c:3e:34:
b9:40:88:17:11:cb:28:90:ed:e1:80:d4:0f:d4:b4:
66:86:5a:ab:7c:ed:88:91:bc:a8:5f:9c:b2:63:c8:
b0:92:c6:1c:51:14:25:be:3b:ae:af:1e:26:84:b6:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:42:65:60:2B:05:90:CC:DF:F2:58:98:64:F6:BF:F2:69:3D:AC
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:63:67:6a:e6:f5:9b:ad:a7:cc:8b:0c:02:e1:a1:7b:cf:
a9:11:87:80:33:a2:41:28:c7:98:cf:1d:5c:08:bc:ff:c7:17:
3b:7c:23:13:02:b6:b3:ca:37:3a:6b:79:4a:a8:a6:54:e8:1d:
c7:ed:43:8d:5e:45:15:37:d4:bf:b6:2e:26:5f:79:d2:ba:e6:
8a:87:c3:84:5e:7a:1d:aa:3f:0c:dc:50:2a:a8:ab:38:98:c5:
6c:b5:e1:e1:0c:62:02:f0:0d:c9:9a:e6:9c:7e:df:6f:ed:9e:
1d:48:69:c5:ec:07:06:2d:a5:2b:c7:fd:00:0a:9d:71:e0:af:
a3:bc:03:58:e1:f6:c1:3f:6a:50:38:e7:34:b6:39:d0:40:81:
c9:70:e4:46:95:96:9f:8e:7c:6e:b3:e7:ff:00:87:6d:fe:0c:
42:e5:df:28:95:0e:3a:cc:06:6a:57:33:ec:31:af:9b:5f:94:
19:a8:a9:0b:0c:13:89:ee:88:f0:c2:30:8d:37:46:38:5d:92:
7d:5b:01:5f:51:c2:b1:ad:24:b8:32:44:61:0d:c8:95:f0:e1:
f1:c5:d0:d7:4f:5a:41:b6:ea:c3:b9:9b:dc:de:f4:87:c9:60:
ed:4e:fb:36:47:9c:be:12:53:a2:3f:8b:30:ae:16:ec:a8:92:
f5:c8:48:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6A4DVV6QrZ4SRmmfqFuR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWRjNWZhMGRiNmMyNjdjMGI5ZDk2ZTRkZTcwOTRiMzE1
NjYyZjgwHhcNMjYxMDI2MjEwMDEyWhcNMjYxMDI3MjEwMDEyWjAzMTEwLwYDVQQD
Eyg3N2U1NDI2NTYwMmIwNTkwY2NkZmYyNTg5ODY0ZjZiZmYyNjkzZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LPBoVW8+Ed7pkG85oCr6kE+mGbe
T7XDoi2eXq0tA5qluEg7DLCugHJrgKneFPYfcUwBx74OAgrkuXQRlWc9MG9mVSrc
Sve7lAZqQ7beq8GhreJ6yE0dG1rFZMv750FgXZp9q2MOHxha2N4ty5eHRkx1RwXQ
dHEwp84DjZgqovHWxjWaT2qofUfPIZC6n42qGqMzsiaR0APIP80gjYh8rQjcZ5s7
N/5NsPxxc+n2cVdLnb3524xojwF3U1sLSbgxOOb+6Iam1xBT9Qtdk6IcPjS5QIgX
EcsokO3hgNQP1LRmhlqrfO2IkbyoX5yyY8iwksYcURQlvjuurx4mhLZYTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHflQmVgKwWQzN/yWJhk9r/yaT2sMB8GA1UdIwQY
MBaAFMwdxfoNtsJnwLnZbk3nCUsxVmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTIt
ZDhmYzYxNDdiNTA0LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZGVhNzItNmUxMS00NzFlLWFhZTItZDhmYzYxNDdiNTA0
LzEvekIzRi1nMjJ3bWZBdWRsdVRlY0pTekZXWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6tjZ2rm
9Zutp8yLDALhoXvPqRGHgDOiQSjHmM8dXAi8/8cXO3wjEwK2s8o3Omt5SqimVOgd
x+1DjV5FFTfUv7YuJl950rrmiofDhF56Hao/DNxQKqirOJjFbLXh4QxiAvANyZrm
nH7fb+2eHUhpxewHBi2lK8f9AAqdceCvo7wDWOH2wT9qUDjnNLY50ECByXDkRpWW
n458brPn/wCHbf4MQuXfKJUOOswGalcz7DGvm1+UGaipCwwTie6I8MIwjTdGOF2S
fVsBX1HCsa0kuDJEYQ3IlfDh8cXQ109aQbbqw7mb3N70h8lg7U77NkecvhJToj+L
MK4W7KiS9chI6A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:17 2026 by rpki-client