Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
File: zHjaWyZetWpkanhB0edipoGdGY4.mft (raw, json)
Hash identifier: VCUV4JOuHx6CNx5SRyUzrFaIESG3BGd7JcNfAj+Hf20=
Subject key identifier: 4A:60:37:14:A8:92:29:43:38:7F:B5:75:C3:75:76:CF:4D:5C:A9:BC
Authority key identifier: CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
Certificate issuer: /CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Certificate serial: 01A0F41F5E96AEC192678B36B564AC6EA884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
Manifest number: 0225
Signing time: Wed 30 Sep 2026 21:01:31 +0000
Manifest this update: Wed 30 Sep 2026 21:01:31 +0000
Manifest next update: Thu 01 Oct 2026 21:01:31 +0000
Files and hashes: 1: G8cAZv7tHHribPfmvn4SJFJ-UoQ.asa (hash: DZYgSOVWEWTSSh7Vu2ORd4WJTX15OedkU36FRtvd8io=)
2: tP4qHEtDUQvjf36iOnLV45cOf2o.roa (hash: 5UJ1b7p3+0n6ZdGAJbovENFOUwGoBnRF0QiPojOFI5o=)
3: zHjaWyZetWpkanhB0edipoGdGY4.crl (hash: gTqT5mRO3INEiQabjiDt7eWdHqUOR75zg/WZu8lQTYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:5e:96:ae:c1:92:67:8b:36:b5:64:ac:6e:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Validity
Not Before: Sep 30 21:01:31 2026 GMT
Not After : Oct 1 21:01:31 2026 GMT
Subject: CN=4a603714a8922943387fb575c37576cf4d5ca9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:38:ce:4d:f9:16:e3:dd:99:15:7b:3c:c5:
99:eb:06:14:48:c7:77:f3:52:4e:7f:09:d6:5f:a0:
29:4c:96:7b:04:bd:a0:50:ea:30:54:32:66:2f:44:
17:ad:cc:6a:f0:cb:b1:67:a1:ef:17:4e:af:11:60:
f1:ba:9b:a9:d6:e8:a5:c5:3e:e6:00:af:de:88:9c:
13:43:f5:f6:c7:41:0b:d4:40:79:df:e4:7a:24:1a:
0e:c9:0b:69:35:37:5a:24:c2:40:17:79:55:0e:54:
13:79:b4:41:1b:0d:e0:e3:39:40:93:63:0c:e8:22:
01:07:e0:84:03:2c:5d:31:ff:4b:e6:b2:e9:5f:fc:
35:ac:08:20:3a:75:58:97:b7:da:49:85:b6:76:17:
9a:23:55:da:75:ca:7c:85:30:cd:d9:ae:b3:bb:cc:
22:1c:69:07:f2:b8:f4:22:5b:97:3a:14:51:a6:63:
a6:78:cc:d4:1f:e9:56:53:47:bb:4e:69:cb:13:29:
5a:3a:f2:d4:2f:ae:6a:f6:92:64:7c:55:b8:8b:fd:
f9:b8:0a:ba:97:bf:ee:fd:36:e3:a7:2d:e2:93:e2:
91:b1:2d:31:3e:b0:af:78:e0:c4:ce:a9:94:8d:03:
05:87:db:c9:a5:35:c6:22:b3:dd:99:ec:11:0e:03:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:37:14:A8:92:29:43:38:7F:B5:75:C3:75:76:CF:4D:5C:A9:BC
X509v3 Authority Key Identifier:
keyid:CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:48:2e:ce:a3:9e:32:56:20:00:f9:2f:40:94:3e:d0:0b:
09:6d:67:99:36:74:28:1d:c7:27:43:24:7d:78:33:b1:71:e8:
1b:b7:50:17:55:5c:69:79:7d:17:85:64:69:97:d2:b4:21:e8:
c5:aa:20:17:cf:e5:f2:fa:8d:d9:5d:86:1c:44:64:7c:cd:f8:
59:39:7f:8e:50:6a:a6:06:af:da:2f:66:24:df:12:fa:2e:2a:
f7:8f:c3:b5:6f:ca:27:29:63:82:0e:a8:87:ea:23:de:a8:dc:
88:b1:42:1c:a7:8d:16:c0:2e:8a:ce:0f:b1:bf:a1:2c:52:73:
65:ae:01:6f:f9:be:99:02:04:bc:0a:ef:e2:21:f7:cc:ca:bb:
57:18:6b:8d:23:62:af:15:83:fb:3a:3c:ac:56:43:0c:f4:fa:
f9:24:1c:9f:c8:41:b0:7d:a7:5e:2e:5f:d8:bc:ca:0e:e3:20:
d5:4f:3a:fa:55:ea:ad:a6:01:c6:ba:fd:fa:2c:d7:cd:96:f7:
6a:49:ad:35:4c:44:db:95:84:e4:c0:a8:cb:a2:a1:24:09:46:
c0:48:7a:57:ee:7e:31:4c:3b:f1:10:ab:1c:ec:33:4b:3d:95:
05:2e:52:76:7b:ab:16:cb:95:c8:57:91:84:00:9c:84:31:16:
ff:be:1e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0H16WrsGSZ4s2tWSsbqiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzhkYTViMjY1ZWI1NmE2NDZhNzg0MWQxZTc2MmE2ODE5
ZDE5OGUwHhcNMjYwOTMwMjEwMTMxWhcNMjYxMDAxMjEwMTMxWjAzMTEwLwYDVQQD
Eyg0YTYwMzcxNGE4OTIyOTQzMzg3ZmI1NzVjMzc1NzZjZjRkNWNhOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO04zk35FuPdmRV7PMWZ6wYUSMd3
81JOfwnWX6ApTJZ7BL2gUOowVDJmL0QXrcxq8MuxZ6HvF06vEWDxupup1uilxT7m
AK/eiJwTQ/X2x0EL1EB53+R6JBoOyQtpNTdaJMJAF3lVDlQTebRBGw3g4zlAk2MM
6CIBB+CEAyxdMf9L5rLpX/w1rAggOnVYl7faSYW2dheaI1Xadcp8hTDN2a6zu8wi
HGkH8rj0IluXOhRRpmOmeMzUH+lWU0e7TmnLEylaOvLUL65q9pJkfFW4i/35uAq6
l7/u/Tbjpy3ik+KRsS0xPrCveODEzqmUjQMFh9vJpTXGIrPdmewRDgMwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpgNxSokilDOH+1dcN1ds9NXKm8MB8GA1UdIwQY
MBaAFMx42lsmXrVqZGp4QdHnYqaBnRmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhqYVd5WmV0V3BrYW5oQjBlZGlwb0dkR1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjZmOTktZmQ2NC00MDllLThkOTgt
ZjIxMGUzOWY3MzI4LzEvekhqYVd5WmV0V3BrYW5oQjBlZGlwb0dkR1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYjZmOTktZmQ2NC00MDllLThkOTgtZjIxMGUzOWY3MzI4
LzEvekhqYVd5WmV0V3BrYW5oQjBlZGlwb0dkR1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcU5ILs6j
njJWIAD5L0CUPtALCW1nmTZ0KB3HJ0MkfXgzsXHoG7dQF1VcaXl9F4VkaZfStCHo
xaogF8/l8vqN2V2GHERkfM34WTl/jlBqpgav2i9mJN8S+i4q94/DtW/KJyljgg6o
h+oj3qjciLFCHKeNFsAuis4Psb+hLFJzZa4Bb/m+mQIEvArv4iH3zMq7VxhrjSNi
rxWD+zo8rFZDDPT6+SQcn8hBsH2nXi5f2LzKDuMg1U86+lXqraYBxrr9+izXzZb3
akmtNUxE25WE5MCoy6KhJAlGwEh6V+5+MUw78RCrHOwzSz2VBS5SdnurFsuVyFeR
hACchDEW/74eTw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 04:01:14 2026 by rpki-client