Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: ghgqGznB5zmdumloAR0O3ZyfRiAjOickD3HQQ2zhP08=
Subject key identifier: 9E:4D:EC:44:AF:9A:67:70:43:63:48:1A:0E:08:60:B2:25:A2:30:45
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01A14CF48F0ED2948138180326E9AF209FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 03:00:58 +0000
Manifest this update: Sun 18 Oct 2026 03:00:58 +0000
Manifest next update: Mon 19 Oct 2026 03:00:58 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: Du7cOh9OpyfLndHG58473MuD2bZKpWym63Vu2vj/66g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:8f:0e:d2:94:81:38:18:03:26:e9:af:20:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Oct 18 03:00:58 2026 GMT
Not After : Oct 19 03:00:58 2026 GMT
Subject: CN=9e4dec44af9a67704363481a0e0860b225a23045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:db:ce:81:73:07:48:52:60:34:ad:67:56:
5d:65:08:0e:da:04:d0:ef:bb:09:40:94:93:bb:88:
b2:ec:71:ac:07:a7:a2:e1:22:99:5c:1f:77:b6:57:
a3:0e:79:01:17:48:c6:9b:45:b0:64:fb:97:2d:fd:
86:d9:c7:00:59:78:26:b3:00:47:1c:ea:66:64:b1:
6e:0a:51:16:ca:34:b4:24:d3:33:f7:ed:b8:60:6a:
56:81:61:34:8a:a9:57:db:cb:88:56:f0:67:ac:bf:
2e:13:ed:20:66:94:e9:5c:4a:4f:bb:c2:0a:5d:e9:
94:e6:1b:71:9a:f6:67:c9:11:c9:19:ad:02:eb:c1:
2e:bc:9b:db:51:95:b9:09:6f:f1:66:df:34:02:d0:
02:06:7d:30:56:11:ac:da:fa:8e:f7:bf:70:74:ed:
53:8d:82:88:33:29:2c:46:ed:30:00:15:b9:b9:21:
b7:a1:b6:ce:af:9e:c0:d2:f0:c3:2a:26:07:42:27:
45:64:85:7d:2d:b5:15:88:e4:bf:ba:ea:86:5b:7d:
19:39:92:b7:78:fc:68:a8:c5:4f:e5:89:11:f3:d6:
27:ab:14:9d:62:ca:33:95:4c:48:ae:03:39:3e:10:
92:d5:e0:96:64:b3:fa:de:ec:26:e8:33:05:e7:f8:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:EC:44:AF:9A:67:70:43:63:48:1A:0E:08:60:B2:25:A2:30:45
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:84:7c:ef:cc:86:b5:35:29:7c:b4:5d:f2:d0:fc:f5:39:ae:
c0:7f:b7:8b:33:3c:d5:04:44:3e:dc:6c:45:60:5a:06:c9:cd:
29:f5:80:73:9f:73:fe:23:04:83:78:76:f5:64:e5:84:bd:80:
72:24:97:d6:d1:0d:2f:c9:7a:00:bd:25:54:fe:bd:e0:c7:b6:
17:e1:a0:62:e0:96:e5:e3:f0:8c:4f:06:14:47:24:3a:44:01:
17:97:59:36:a0:15:ee:f3:4d:94:65:29:e8:12:32:b0:b5:6b:
05:52:a7:1f:e4:c1:c2:d6:04:eb:ca:d3:56:26:74:dc:39:3b:
fe:70:34:a4:5c:26:06:f0:98:d2:2b:d7:d6:39:aa:8a:b7:e7:
a7:a7:80:e0:ce:16:aa:e1:7e:e8:33:aa:20:30:85:8f:79:b9:
45:d1:ae:fd:94:e3:f1:d1:c1:65:f1:58:33:56:e3:3e:c1:96:
03:c5:5f:56:47:1c:d0:71:01:8f:e8:23:ab:36:b4:49:2a:2e:
6e:9c:93:12:7a:a6:89:71:f9:76:54:3a:ea:e8:28:61:ad:98:
6f:67:ce:8a:36:5a:c9:78:a7:a8:fc:51:63:8b:58:a3:3f:f7:
93:5a:0e:02:55:4c:81:e3:53:d0:71:9a:04:d2:51:05:5f:5a:
89:88:c7:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFM9I8O0pSBOBgDJumvIJ/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4
YTQwYWYwHhcNMjYxMDE4MDMwMDU4WhcNMjYxMDE5MDMwMDU4WjAzMTEwLwYDVQQD
Eyg5ZTRkZWM0NGFmOWE2NzcwNDM2MzQ4MWEwZTA4NjBiMjI1YTIzMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjbzoFzB0hSYDStZ1ZdZQgO2gTQ
77sJQJSTu4iy7HGsB6ei4SKZXB93tlejDnkBF0jGm0WwZPuXLf2G2ccAWXgmswBH
HOpmZLFuClEWyjS0JNMz9+24YGpWgWE0iqlX28uIVvBnrL8uE+0gZpTpXEpPu8IK
XemU5htxmvZnyRHJGa0C68EuvJvbUZW5CW/xZt80AtACBn0wVhGs2vqO979wdO1T
jYKIMyksRu0wABW5uSG3obbOr57A0vDDKiYHQidFZIV9LbUViOS/uuqGW30ZOZK3
ePxoqMVP5YkR89YnqxSdYsozlUxIrgM5PhCS1eCWZLP63uwm6DMF5/hb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5N7ESvmmdwQ2NIGg4IYLIlojBFMB8GA1UdIwQY
MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt
NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj
LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4R878yG
tTUpfLRd8tD89TmuwH+3izM81QREPtxsRWBaBsnNKfWAc59z/iMEg3h29WTlhL2A
ciSX1tENL8l6AL0lVP694Me2F+GgYuCW5ePwjE8GFEckOkQBF5dZNqAV7vNNlGUp
6BIysLVrBVKnH+TBwtYE68rTViZ03Dk7/nA0pFwmBvCY0ivX1jmqirfnp6eA4M4W
quF+6DOqIDCFj3m5RdGu/ZTj8dHBZfFYM1bjPsGWA8VfVkcc0HEBj+gjqza0SSou
bpyTEnqmiXH5dlQ66ugoYa2Yb2fOijZayXinqPxRY4tYoz/3k1oOAlVMgeNT0HGa
BNJRBV9aiYjHQA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:33:20 2026 by rpki-client