Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: qI17PUlk+RjSNQHFIpG9uwLcez3VlmwymNl6JlXgIRw=
Subject key identifier: E3:87:33:AF:8E:79:6D:1F:44:6F:9D:75:6E:2F:08:B2:9B:D6:4F:A0
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01A189097DC7092F72A946473FF4E8E5CB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 13CA
Signing time: Thu 29 Oct 2026 19:01:02 +0000
Manifest this update: Thu 29 Oct 2026 19:01:02 +0000
Manifest next update: Fri 30 Oct 2026 19:01:02 +0000
Files and hashes: 1: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (hash: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: kXT8iXEAOdNNKJU0x0WslY1fZpTg/b0YcJmm1MyeNac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:7d:c7:09:2f:72:a9:46:47:3f:f4:e8:e5:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Oct 29 19:01:02 2026 GMT
Not After : Oct 30 19:01:02 2026 GMT
Subject: CN=e38733af8e796d1f446f9d756e2f08b29bd64fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:44:3b:47:3d:0d:25:f3:4e:9f:53:c3:04:
33:28:1f:05:09:45:b8:26:ea:bf:6e:75:2f:22:9a:
83:8c:df:aa:d2:4a:57:46:7a:39:e4:14:da:9e:22:
48:58:15:a2:8f:ee:61:4c:ae:e5:7a:97:f9:65:b1:
62:63:af:5b:cd:06:54:5e:fa:42:e9:93:30:ef:00:
f5:e8:4d:bd:72:b9:c8:0b:65:2b:a7:68:c8:39:5a:
a7:9a:02:f3:91:30:48:e9:a3:27:53:b8:64:2d:a0:
67:dd:b2:55:4c:13:c5:92:e1:d4:a5:6d:bb:0d:b9:
4f:14:9f:c4:00:8d:4f:b4:9e:84:2e:ca:f6:a9:f6:
13:6b:2d:24:b3:43:9d:1b:1f:dd:2a:20:94:ab:4e:
0a:68:05:80:47:9f:32:a9:68:b2:dc:40:13:b7:fa:
e2:bc:76:37:0d:df:eb:b2:79:64:a8:dd:79:39:db:
f9:00:2d:f2:88:e7:23:43:e3:cd:2f:f7:0e:f5:ab:
1e:34:06:70:9e:b5:c3:b4:87:da:90:5f:67:fe:f2:
65:4f:0b:dd:8a:57:4e:26:1e:8b:4c:15:18:a4:b4:
5e:5c:1f:e3:68:d0:7e:dd:49:c8:52:e6:62:f8:98:
c6:3c:da:e3:d4:8f:bc:e3:47:dd:25:56:61:70:8e:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:33:AF:8E:79:6D:1F:44:6F:9D:75:6E:2F:08:B2:9B:D6:4F:A0
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2d:b1:8e:31:4e:5a:98:90:82:35:d2:8c:83:11:75:c5:0d:
54:88:e0:8c:ad:45:b9:bb:72:98:7c:70:a4:1a:5c:db:e6:c6:
6f:c0:10:fb:9c:dc:4b:15:8b:0b:fd:35:1a:68:7c:c5:f7:0f:
5f:58:81:f0:69:9b:5f:d7:ba:54:19:d3:e2:76:a1:39:da:03:
82:bc:ba:56:35:c3:a3:9a:8e:e9:bc:fe:5e:fe:c7:5d:a4:08:
83:51:01:8f:a6:2f:ca:bf:32:84:30:d3:8f:77:fe:da:77:60:
63:b4:fc:2b:9c:6b:c0:78:a4:01:f1:93:ab:85:80:78:29:51:
34:3a:cc:21:39:4f:c9:1c:b5:46:e3:a8:b7:88:6f:83:b5:07:
69:fd:e7:c6:91:e6:04:07:32:06:5b:02:b6:12:68:84:83:b3:
21:e7:98:c5:1e:b8:fe:ce:61:4f:27:7b:cd:b6:ac:73:8e:87:
00:db:37:d5:f8:af:b6:ab:a8:fb:51:3e:d0:24:ce:78:1e:9e:
cf:f7:b0:00:b8:b2:bd:da:7f:24:84:97:dc:11:56:65:a4:58:
00:d2:da:39:dc:29:1a:98:84:7d:08:cf:f6:41:11:7c:a6:81:
23:53:1a:45:af:dc:ab:d2:5e:b5:83:09:a6:6e:fb:04:ff:8d:
15:9f:cc:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJCX3HCS9yqUZHP/To5ctMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjYxMDI5MTkwMTAyWhcNMjYxMDMwMTkwMTAyWjAzMTEwLwYDVQQD
EyhlMzg3MzNhZjhlNzk2ZDFmNDQ2ZjlkNzU2ZTJmMDhiMjliZDY0ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bZEO0c9DSXzTp9TwwQzKB8FCUW4
Juq/bnUvIpqDjN+q0kpXRno55BTaniJIWBWij+5hTK7lepf5ZbFiY69bzQZUXvpC
6ZMw7wD16E29crnIC2Urp2jIOVqnmgLzkTBI6aMnU7hkLaBn3bJVTBPFkuHUpW27
DblPFJ/EAI1PtJ6ELsr2qfYTay0ks0OdGx/dKiCUq04KaAWAR58yqWiy3EATt/ri
vHY3Dd/rsnlkqN15Odv5AC3yiOcjQ+PNL/cO9aseNAZwnrXDtIfakF9n/vJlTwvd
ildOJh6LTBUYpLReXB/jaNB+3UnIUuZi+JjGPNrj1I+840fdJVZhcI6g6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOHM6+OeW0fRG+ddW4vCLKb1k+gMB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy2xjjFO
WpiQgjXSjIMRdcUNVIjgjK1FubtymHxwpBpc2+bGb8AQ+5zcSxWLC/01Gmh8xfcP
X1iB8GmbX9e6VBnT4nahOdoDgry6VjXDo5qO6bz+Xv7HXaQIg1EBj6Yvyr8yhDDT
j3f+2ndgY7T8K5xrwHikAfGTq4WAeClRNDrMITlPyRy1RuOot4hvg7UHaf3nxpHm
BAcyBlsCthJohIOzIeeYxR64/s5hTyd7zbasc46HANs31fivtquo+1E+0CTOeB6e
z/ewALiyvdp/JISX3BFWZaRYANLaOdwpGpiEfQjP9kERfKaBI1MaRa/cq9JetYMJ
pm77BP+NFZ/Mqg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:47:05 2026 by rpki-client