Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: 6py+JXOF9690gQa4eKaFNZwsSItXE6DeiSyLmTcyjbU=
Subject key identifier: 54:45:2D:A5:00:9E:B3:26:50:CF:44:58:D0:07:CD:01:77:D2:77:DA
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 01A08AFA83422F39489204B2FCD64C389C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0983
Signing time: Thu 10 Sep 2026 11:01:08 +0000
Manifest this update: Thu 10 Sep 2026 11:01:08 +0000
Manifest next update: Fri 11 Sep 2026 11:01:08 +0000
Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: CZBZuw+busCzRkvViH/YCHReGuyaI6BC/wrwbD6zTmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:83:42:2f:39:48:92:04:b2:fc:d6:4c:38:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Sep 10 11:01:08 2026 GMT
Not After : Sep 11 11:01:08 2026 GMT
Subject: CN=54452da5009eb32650cf4458d007cd0177d277da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:09:49:8e:6f:b5:71:64:3d:b4:42:36:27:
da:a9:09:ec:8f:75:0e:34:88:7f:bb:b5:f0:9b:9c:
f0:3a:d3:ae:63:05:c6:cd:25:96:72:b8:2d:f5:1e:
f1:b9:5d:69:49:75:e4:09:4c:0a:a9:32:cf:6d:9a:
c2:4d:cf:ec:36:fa:ae:8f:82:76:21:48:20:9a:a6:
89:11:d0:8d:67:27:af:07:fe:73:91:b8:74:ad:3a:
af:c6:83:b8:36:34:73:3f:26:e9:9b:aa:f5:31:ba:
ad:91:09:3b:38:fe:40:5e:1b:3e:ce:4d:69:be:91:
3f:62:a9:10:26:11:57:8a:af:15:9e:66:53:4a:80:
a6:ff:d0:06:be:8a:ea:dc:b2:89:26:27:7b:1f:b2:
6e:51:73:2f:4f:18:ae:9f:52:73:c0:b5:96:9c:70:
27:46:21:08:0e:84:02:71:41:ce:a4:5e:41:c5:a1:
74:ba:4c:bc:9c:3e:b8:12:5a:83:83:99:05:d0:5b:
6e:ec:81:01:15:a0:2c:b0:30:c0:fe:53:a2:da:10:
00:c1:f7:3c:47:ec:64:aa:1f:3e:2d:35:d6:5d:74:
26:95:75:5b:4f:4e:6e:97:4d:f5:2d:7a:3c:03:77:
ca:c7:c4:17:8a:03:bf:d7:92:c7:82:ed:d0:cb:1a:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:2D:A5:00:9E:B3:26:50:CF:44:58:D0:07:CD:01:77:D2:77:DA
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4f:67:f0:0d:a8:7c:38:49:77:c7:85:93:4f:92:12:d7:62:
bb:6a:fc:30:91:17:b7:af:7b:1a:99:99:60:20:80:f4:fa:5f:
9b:14:1f:af:68:b8:06:ed:fb:75:53:02:43:d5:56:5e:02:39:
a0:84:e7:d6:7e:cb:6f:a7:45:af:d1:e7:1e:ca:d1:72:3c:9d:
da:17:84:61:a1:6d:9d:ca:24:e6:a7:ce:55:a1:d2:bf:80:c4:
e6:f4:e1:3b:0f:d2:b9:ff:8c:1f:90:82:42:bb:2a:a8:c2:c1:
f6:22:3d:ba:62:c9:00:57:03:83:a1:b8:cc:74:f4:af:9f:22:
cf:9c:78:6e:7f:25:f6:98:78:cc:5e:52:5d:6d:69:37:45:3f:
4a:10:ed:b4:04:a3:95:33:9f:bb:f7:5d:42:42:4f:f3:fe:04:
48:38:bf:50:06:8d:23:9a:a9:64:32:0e:10:d5:1b:7d:c8:9f:
59:49:df:03:98:3b:55:1a:c4:a0:f8:94:c1:3c:3d:e6:ad:4d:
3e:9b:a6:d9:f4:53:2f:22:2d:0b:8a:6c:b0:7f:17:27:c5:b5:
f8:cc:27:12:47:f7:2d:d5:61:8e:ee:a5:dd:61:03:d1:88:91:
4f:1a:3d:bc:47:f4:4b:c7:b6:16:ea:f7:c8:93:70:2e:bc:14:
35:7a:af:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+oNCLzlIkgSy/NZMOJxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy
Y2Q5ZDUwHhcNMjYwOTEwMTEwMTA4WhcNMjYwOTExMTEwMTA4WjAzMTEwLwYDVQQD
Eyg1NDQ1MmRhNTAwOWViMzI2NTBjZjQ0NThkMDA3Y2QwMTc3ZDI3N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveQJSY5vtXFkPbRCNifaqQnsj3UO
NIh/u7Xwm5zwOtOuYwXGzSWWcrgt9R7xuV1pSXXkCUwKqTLPbZrCTc/sNvquj4J2
IUggmqaJEdCNZyevB/5zkbh0rTqvxoO4NjRzPybpm6r1MbqtkQk7OP5AXhs+zk1p
vpE/YqkQJhFXiq8VnmZTSoCm/9AGvorq3LKJJid7H7JuUXMvTxiun1JzwLWWnHAn
RiEIDoQCcUHOpF5BxaF0uky8nD64ElqDg5kF0Ftu7IEBFaAssDDA/lOi2hAAwfc8
R+xkqh8+LTXWXXQmlXVbT05ul031LXo8A3fKx8QXigO/15LHgu3QyxrXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRFLaUAnrMmUM9EWNAHzQF30nfaMB8GA1UdIwQY
MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt
MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw
LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU9n8A2o
fDhJd8eFk0+SEtdiu2r8MJEXt697GpmZYCCA9PpfmxQfr2i4Bu37dVMCQ9VWXgI5
oITn1n7Lb6dFr9HnHsrRcjyd2heEYaFtncok5qfOVaHSv4DE5vThOw/Suf+MH5CC
QrsqqMLB9iI9umLJAFcDg6G4zHT0r58iz5x4bn8l9ph4zF5SXW1pN0U/ShDttASj
lTOfu/ddQkJP8/4ESDi/UAaNI5qpZDIOENUbfcifWUnfA5g7VRrEoPiUwTw95q1N
Ppum2fRTLyItC4pssH8XJ8W1+MwnEkf3LdVhju6l3WED0YiRTxo9vEf0S8e2Fur3
yJNwLrwUNXqvQw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:42 2026 by rpki-client