Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
File: ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft (raw, json)
Hash identifier: 891tgox/qZxORov5Kx1LEig5x4ssqMsrm8kog5vQysg=
Subject key identifier: FB:CC:18:3E:01:FA:B5:6B:AA:D6:5C:BA:5C:7A:6D:DA:F5:DF:55:9E
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 01A06F83E270261A25DB1B7E229C6A6ABACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:49 +0000
Manifest this update: Sat 05 Sep 2026 03:01:49 +0000
Manifest next update: Sun 06 Sep 2026 03:01:49 +0000
Files and hashes: 1: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (hash: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=)
2: ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl (hash: Sl7em8kMFvFurXQo4vDKzNfqltocFEXnEx4ZyAcKEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:e2:70:26:1a:25:db:1b:7e:22:9c:6a:6a:ba:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Sep 5 03:01:49 2026 GMT
Not After : Sep 6 03:01:49 2026 GMT
Subject: CN=fbcc183e01fab56baad65cba5c7a6ddaf5df559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:e3:7a:9a:c9:18:89:be:d2:82:64:93:21:
f0:bf:e6:49:52:21:9e:05:5a:ad:cf:3c:13:d5:e5:
43:0c:13:58:a1:91:be:b2:6a:a3:31:99:70:52:87:
09:9b:e7:0f:dc:85:d6:0e:81:32:15:08:bb:a0:9c:
50:65:47:4d:ce:aa:51:8a:70:ad:0f:84:31:40:d0:
8d:57:f7:90:c7:5f:dd:50:13:61:78:4c:8a:c5:12:
73:e6:a6:1c:84:ae:6e:e8:84:71:3b:e3:62:79:9f:
c2:f5:6f:f6:e5:f5:65:6e:6c:a2:4c:bd:83:96:66:
aa:0f:ed:f6:b9:93:75:0a:8f:b3:1c:38:23:75:91:
1d:b0:64:01:04:bc:25:65:70:b7:3c:aa:e9:2c:8b:
ca:02:79:e2:59:09:ad:fb:6a:8d:76:ce:99:4f:67:
9c:84:ec:ba:8e:a7:05:48:21:f8:e2:ab:45:26:dd:
13:9b:c0:b0:f9:c2:42:8b:2c:90:39:be:18:a7:bb:
f3:bb:18:0f:5a:69:ff:c3:e4:64:17:5d:69:15:ff:
fe:c3:f0:a6:23:90:d8:d8:e0:4c:e2:f1:13:d7:00:
4d:9e:13:8a:32:0f:a3:81:89:c1:68:ea:ce:52:ce:
96:76:c2:30:67:5d:17:43:43:41:f0:99:fa:36:77:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:18:3E:01:FA:B5:6B:AA:D6:5C:BA:5C:7A:6D:DA:F5:DF:55:9E
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:ba:bf:b9:bc:d3:27:1d:fa:67:e6:4e:c7:19:f7:48:ab:
19:8d:9a:14:1e:08:75:b9:d0:5d:44:eb:46:8f:f3:69:8b:80:
87:d7:71:3e:cb:a6:0b:c9:5c:e2:1e:2a:5b:33:6f:41:10:46:
a0:13:dd:64:62:e2:86:ca:30:c8:2a:aa:58:2d:70:d4:eb:b5:
4c:ad:f7:de:75:d9:96:af:bb:e7:c3:0d:d6:0b:66:b7:cf:9c:
2c:ba:b0:5d:e2:7f:30:48:8e:5c:fb:0e:15:03:03:25:aa:68:
77:10:26:a3:d6:f9:09:52:54:f4:bb:63:fc:e2:a4:e2:39:3a:
5b:cc:37:09:1a:6c:66:30:ed:c2:58:1f:eb:41:12:f8:0d:8c:
23:94:0e:0d:0b:9d:b7:03:40:0f:04:97:80:cd:f0:3b:2a:26:
6b:9b:02:84:bb:dc:94:8d:ed:ae:ea:37:1c:ff:d4:07:48:ce:
6d:12:4d:b6:d4:03:d1:4b:af:a3:49:37:56:43:d4:fe:ed:81:
77:b0:62:ea:ca:77:52:60:de:f4:7f:15:bd:58:73:30:31:ac:
72:b2:ae:97:a0:77:45:a7:c5:42:64:b1:d4:a6:d9:e5:62:8f:
04:03:4d:e5:cd:06:40:a1:aa:83:44:21:90:dc:72:b9:25:ee:
37:d9:9e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvg+JwJhol2xt+IpxqarrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDFhZjk4YTdmMDI5YzNmNjk3MmVlMzc0ZjY5ZDIwNWM2
ZjI5ZDIwHhcNMjYwOTA1MDMwMTQ5WhcNMjYwOTA2MDMwMTQ5WjAzMTEwLwYDVQQD
EyhmYmNjMTgzZTAxZmFiNTZiYWFkNjVjYmE1YzdhNmRkYWY1ZGY1NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArATjeprJGIm+0oJkkyHwv+ZJUiGe
BVqtzzwT1eVDDBNYoZG+smqjMZlwUocJm+cP3IXWDoEyFQi7oJxQZUdNzqpRinCt
D4QxQNCNV/eQx1/dUBNheEyKxRJz5qYchK5u6IRxO+NieZ/C9W/25fVlbmyiTL2D
lmaqD+32uZN1Co+zHDgjdZEdsGQBBLwlZXC3PKrpLIvKAnniWQmt+2qNds6ZT2ec
hOy6jqcFSCH44qtFJt0Tm8Cw+cJCiyyQOb4Yp7vzuxgPWmn/w+RkF11pFf/+w/Cm
I5DY2OBM4vET1wBNnhOKMg+jgYnBaOrOUs6WdsIwZ10XQ0NB8Jn6NncOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvMGD4B+rVrqtZculx6bdr131WeMB8GA1UdIwQY
MBaAFGbRr5in8CnD9pcu43T2nSBcbynSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt
NmFlYWU2M2VkOGZlLzEvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl
LzEvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPom6v7m8
0ycd+mfmTscZ90irGY2aFB4IdbnQXUTrRo/zaYuAh9dxPsumC8lc4h4qWzNvQRBG
oBPdZGLihsowyCqqWC1w1Ou1TK333nXZlq+758MN1gtmt8+cLLqwXeJ/MEiOXPsO
FQMDJapodxAmo9b5CVJU9Ltj/OKk4jk6W8w3CRpsZjDtwlgf60ES+A2MI5QODQud
twNADwSXgM3wOyoma5sChLvclI3truo3HP/UB0jObRJNttQD0Uuvo0k3VkPU/u2B
d7Bi6sp3UmDe9H8VvVhzMDGscrKul6B3RafFQmSx1KbZ5WKPBANN5c0GQKGqg0Qh
kNxyuSXuN9meZg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:14 2026 by rpki-client