Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: +G6k+F7J6AEyQ0smgF0d0KlGIIHedBhKUVnsZO2/Ido=
Subject key identifier: 15:DB:2B:05:FB:EC:41:FD:EC:19:54:8E:AC:5E:8C:9F:CD:64:BD:97
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 01A08A1F75C12B56B078A8C7C8BB0D50F087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 07:01:52 +0000
Manifest this update: Thu 10 Sep 2026 07:01:52 +0000
Manifest next update: Fri 11 Sep 2026 07:01:52 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: JrVPw8hRHrCofRgKUHooqjlh1o4XUfrRADYYIChlBHs=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:75:c1:2b:56:b0:78:a8:c7:c8:bb:0d:50:f0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Sep 10 07:01:52 2026 GMT
Not After : Sep 11 07:01:52 2026 GMT
Subject: CN=15db2b05fbec41fdec19548eac5e8c9fcd64bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:03:eb:b9:34:b6:65:de:d6:e6:e2:1d:5c:
ea:e7:ca:08:44:d4:de:8e:c2:90:f3:c0:1c:56:32:
a6:a7:49:2f:d0:e1:97:fa:99:96:38:ca:74:6b:21:
92:bb:0d:f0:d7:1e:db:f7:09:c9:08:73:12:51:bf:
9d:a8:80:1b:77:e6:ea:9f:79:3b:7f:3e:b6:81:b8:
97:e0:c9:7d:c3:b9:40:62:b2:04:38:ea:3e:cb:b5:
4a:c8:3b:9f:1c:61:a3:3c:34:e1:5d:b3:a6:4f:e4:
e6:d3:6f:57:fa:d8:12:86:b5:c7:0c:4d:42:f3:8f:
56:bc:79:1f:9e:57:68:08:90:ba:b4:3f:9a:32:99:
4b:5d:e4:c5:54:10:9f:34:ab:d0:89:03:ad:ce:bb:
7e:58:93:07:12:55:58:b5:d1:63:01:01:68:1b:fa:
4d:c6:63:13:06:1b:e6:d6:f7:ce:9c:b4:7f:f1:5d:
6b:ec:5f:11:8f:79:38:6d:18:62:b8:51:5e:9e:01:
4c:91:5f:79:13:34:75:51:b6:a7:a6:d8:91:26:9a:
0a:08:7f:38:d6:05:66:00:e5:1c:12:ac:51:0c:6c:
2b:f8:9e:13:f7:f2:7a:e0:81:d4:71:4f:6e:e8:2d:
8b:b1:e5:63:d1:df:78:30:ef:3b:71:3f:ae:43:b7:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:2B:05:FB:EC:41:FD:EC:19:54:8E:AC:5E:8C:9F:CD:64:BD:97
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:ba:8c:fd:82:02:ab:0e:ab:e1:4f:11:87:ec:18:e8:06:
8d:f5:27:95:76:83:26:2f:38:a7:8c:5b:e1:c1:08:3b:5b:66:
d1:17:f5:53:3b:f1:ee:ba:77:0e:e8:08:c1:a9:dd:9f:bc:e2:
db:42:42:e5:b3:c8:c3:26:9e:7e:31:f3:96:62:8e:6b:a4:04:
aa:1e:aa:a3:fe:4c:89:92:52:35:c4:de:6f:46:15:1e:b9:9a:
5b:5e:65:6d:8e:7e:da:00:e8:d8:92:1f:e6:e9:94:9a:7e:2a:
56:7b:5e:f2:49:89:8a:b0:ff:e8:8e:61:9b:4f:64:db:77:74:
0c:37:e3:af:db:f1:12:d8:8c:21:c7:91:4b:c8:54:8b:1b:1c:
d5:b9:e4:98:c9:5f:12:9b:46:f2:d6:ba:0b:53:2c:94:0e:69:
94:fa:a7:bf:b6:fd:c9:39:ab:2e:97:6f:27:bd:c4:18:74:8e:
59:26:ea:1a:5f:c5:a8:49:a4:da:de:7a:8c:7e:b2:c6:9c:e1:
ab:e1:3a:6c:5c:e1:33:72:8b:99:21:df:8e:02:09:6b:59:09:
49:d4:65:de:ec:d1:28:12:f2:ff:43:8b:28:5b:de:b5:21:bb:
1b:67:71:69:aa:38:a2:df:2f:13:02:7c:8d:55:52:32:11:c0:
fa:d9:18:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKH3XBK1aweKjHyLsNUPCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky
ZjVkY2MwHhcNMjYwOTEwMDcwMTUyWhcNMjYwOTExMDcwMTUyWjAzMTEwLwYDVQQD
EygxNWRiMmIwNWZiZWM0MWZkZWMxOTU0OGVhYzVlOGM5ZmNkNjRiZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OYD67k0tmXe1ubiHVzq58oIRNTe
jsKQ88AcVjKmp0kv0OGX+pmWOMp0ayGSuw3w1x7b9wnJCHMSUb+dqIAbd+bqn3k7
fz62gbiX4Ml9w7lAYrIEOOo+y7VKyDufHGGjPDThXbOmT+Tm029X+tgShrXHDE1C
849WvHkfnldoCJC6tD+aMplLXeTFVBCfNKvQiQOtzrt+WJMHElVYtdFjAQFoG/pN
xmMTBhvm1vfOnLR/8V1r7F8Rj3k4bRhiuFFengFMkV95EzR1UbanptiRJpoKCH84
1gVmAOUcEqxRDGwr+J4T9/J64IHUcU9u6C2LseVj0d94MO87cT+uQ7eZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXbKwX77EH97BlUjqxejJ/NZL2XMB8GA1UdIwQY
MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt
ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz
LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1+6jP2C
AqsOq+FPEYfsGOgGjfUnlXaDJi84p4xb4cEIO1tm0Rf1Uzvx7rp3DugIwandn7zi
20JC5bPIwyaefjHzlmKOa6QEqh6qo/5MiZJSNcTeb0YVHrmaW15lbY5+2gDo2JIf
5umUmn4qVnte8kmJirD/6I5hm09k23d0DDfjr9vxEtiMIceRS8hUixsc1bnkmMlf
EptG8ta6C1MslA5plPqnv7b9yTmrLpdvJ73EGHSOWSbqGl/FqEmk2t56jH6yxpzh
q+E6bFzhM3KLmSHfjgIJa1kJSdRl3uzRKBLy/0OLKFvetSG7G2dxaao4ot8vEwJ8
jVVSMhHA+tkYpw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:37 2026 by rpki-client