Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: nlsUIhvTDmxzPfzsgSk3/nvJK0pgLNnUCOkffpBcyrI=
Subject key identifier: E2:80:87:B0:4F:E7:75:E4:40:DC:0A:67:4D:FB:1F:F7:39:68:A1:66
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01A17B848F76C54EC4FE0673AAB0C4D92D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 04:00:47 +0000
Manifest this update: Tue 27 Oct 2026 04:00:47 +0000
Manifest next update: Wed 28 Oct 2026 04:00:47 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: I3qgormhQ0gfIk/svz7z0loIuzoSDzkpDYS1XaesYAE=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:8f:76:c5:4e:c4:fe:06:73:aa:b0:c4:d9:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Oct 27 04:00:47 2026 GMT
Not After : Oct 28 04:00:47 2026 GMT
Subject: CN=e28087b04fe775e440dc0a674dfb1ff73968a166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:66:a5:bf:b6:83:49:ab:3c:69:4a:0e:73:
dc:f3:db:80:24:c2:03:89:6b:e3:38:d6:ba:dd:3e:
23:0c:e4:4c:a5:ca:ea:d8:ac:68:13:04:55:3f:42:
f2:78:ff:ec:ef:03:77:38:6f:cc:5f:09:3f:24:1a:
3a:19:f2:bc:7a:31:8f:8d:9e:d6:15:ca:4f:1a:da:
3c:60:13:81:95:85:70:b0:47:07:ed:7e:0b:ba:f8:
90:4d:a7:22:41:d6:24:9c:9c:51:ac:36:41:a1:2c:
f1:34:27:54:2e:72:0b:7c:0d:3f:42:e0:76:aa:45:
73:83:50:01:05:26:af:9f:84:ad:2a:ac:ec:d1:5e:
b5:8c:73:61:55:60:8e:df:56:73:55:7b:61:fc:23:
43:e3:7b:1b:f9:60:57:0b:3d:64:a6:dc:80:a5:4d:
ba:20:8e:08:e3:c6:93:9f:a8:da:b9:7d:94:ea:1f:
90:96:46:71:e4:b1:d0:41:25:ea:f7:e7:8c:a3:3b:
37:a3:b4:de:3d:51:bd:82:64:5a:c7:be:e7:46:47:
6a:e6:d3:a9:6f:9d:ac:94:f0:e2:c5:81:0d:b2:d3:
64:8a:1d:96:22:2d:2c:a8:a9:fb:3a:bd:86:b4:f6:
1d:0d:e1:59:d0:b0:c9:67:9a:4a:94:4c:3a:e2:5b:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:87:B0:4F:E7:75:E4:40:DC:0A:67:4D:FB:1F:F7:39:68:A1:66
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:dd:c3:19:7a:63:f5:b2:ec:02:7d:f6:06:bd:c8:6f:63:
87:9f:b8:88:5d:f4:3c:9d:08:b4:d1:fe:99:2d:94:7d:d2:99:
e4:59:9d:46:98:43:d3:39:6b:8b:88:0e:31:4a:fe:4d:66:48:
40:fe:eb:0c:ad:da:02:cc:9f:eb:c1:d2:44:87:3e:8d:e4:c6:
47:d8:d3:86:6b:ac:86:8f:c8:6b:16:1c:43:11:b5:0f:e2:29:
00:8c:18:82:ad:35:50:30:31:73:53:ed:a7:8f:80:68:a0:a0:
f5:cf:a6:9a:3c:75:59:4c:0a:8d:77:93:0c:91:c8:03:f6:7c:
19:00:36:1c:67:54:57:c9:c1:30:b4:a3:be:0b:c8:b7:d1:2f:
20:91:ab:27:90:5e:2a:f4:31:23:9b:57:93:1c:e0:b9:9f:95:
2d:2d:bf:d7:b6:6c:7a:0b:e4:a6:08:e2:f8:5a:1d:39:07:ab:
cc:88:df:17:55:a4:5d:b9:e7:5f:02:3b:ea:68:42:dd:09:5b:
be:c0:3a:07:c8:5c:36:7d:b0:7c:48:b1:ae:2b:f7:cf:29:ee:
82:b4:2c:6f:0b:6b:5f:4c:5a:e8:f7:39:ca:7b:2d:49:e8:2a:
7a:35:41:76:1b:8b:97:e0:05:83:39:4c:13:bc:ac:e2:92:e1:
67:ae:00:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hI92xU7E/gZzqrDE2S2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjYxMDI3MDQwMDQ3WhcNMjYxMDI4MDQwMDQ3WjAzMTEwLwYDVQQD
EyhlMjgwODdiMDRmZTc3NWU0NDBkYzBhNjc0ZGZiMWZmNzM5NjhhMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGdmpb+2g0mrPGlKDnPc89uAJMID
iWvjONa63T4jDORMpcrq2KxoEwRVP0LyeP/s7wN3OG/MXwk/JBo6GfK8ejGPjZ7W
FcpPGto8YBOBlYVwsEcH7X4LuviQTaciQdYknJxRrDZBoSzxNCdULnILfA0/QuB2
qkVzg1ABBSavn4StKqzs0V61jHNhVWCO31ZzVXth/CND43sb+WBXCz1kptyApU26
II4I48aTn6jauX2U6h+QlkZx5LHQQSXq9+eMozs3o7TePVG9gmRax77nRkdq5tOp
b52slPDixYENstNkih2WIi0sqKn7Or2GtPYdDeFZ0LDJZ5pKlEw64lv1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKAh7BP53XkQNwKZ037H/c5aKFmMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShvdwxl6
Y/Wy7AJ99ga9yG9jh5+4iF30PJ0ItNH+mS2UfdKZ5FmdRphD0zlri4gOMUr+TWZI
QP7rDK3aAsyf68HSRIc+jeTGR9jThmusho/IaxYcQxG1D+IpAIwYgq01UDAxc1Pt
p4+AaKCg9c+mmjx1WUwKjXeTDJHIA/Z8GQA2HGdUV8nBMLSjvgvIt9EvIJGrJ5Be
KvQxI5tXkxzguZ+VLS2/17Zsegvkpgji+FodOQerzIjfF1WkXbnnXwI76mhC3Qlb
vsA6B8hcNn2wfEixriv3zynugrQsbwtrX0xa6Pc5ynstSegqejVBdhuLl+AFgzlM
E7ys4pLhZ64AtQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:31:06 2026 by rpki-client