Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: BYHMJStv/dkNSNZEjbp8EoGKXNOxHoM3y0tndbS9k7s=
Subject key identifier: D9:69:27:95:06:3B:AC:F3:31:30:47:0D:4F:B2:DA:F1:B3:37:7D:FD
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 01A002B8DCCE8E588BEB00006F19FC701E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 00:01:04 +0000
Manifest this update: Sat 15 Aug 2026 00:01:04 +0000
Manifest next update: Sun 16 Aug 2026 00:01:04 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: GC4zKQV3ei+wc023PcXnK0Vf79wjcGM1rqTmmsNRJ+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:dc:ce:8e:58:8b:eb:00:00:6f:19:fc:70:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Aug 15 00:01:04 2026 GMT
Not After : Aug 16 00:01:04 2026 GMT
Subject: CN=d9692795063bacf33130470d4fb2daf1b3377dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:30:d7:f1:35:05:d9:06:43:40:e8:d2:4e:
86:83:1a:07:2f:01:5e:74:20:5a:83:29:b8:3d:51:
87:5a:e4:27:13:c1:0c:68:05:f8:5d:5c:51:35:ea:
ce:7e:35:8e:cc:84:4c:d0:24:bd:85:5a:83:43:7e:
38:aa:3f:f1:89:6c:2b:0d:2a:fb:88:35:6c:ed:8c:
22:44:37:c3:33:9d:43:68:f6:81:1b:18:75:0d:a7:
d0:dc:7b:2f:04:f8:0c:e8:a6:e4:e6:0f:86:67:59:
33:75:0e:31:f6:a1:fb:8b:41:fc:8f:3a:8b:bc:ec:
66:90:37:f4:bd:9f:c0:c1:60:ed:f5:f2:fa:3f:b6:
4f:40:64:ef:0f:61:41:45:99:81:d0:53:66:0d:a6:
e0:64:d6:78:50:ed:e6:55:39:99:ae:73:ca:97:6c:
a8:6e:17:7e:62:a4:6c:ba:65:c3:81:bd:b3:d7:2d:
14:a8:2b:bc:96:09:93:fd:8e:9e:09:cf:6a:20:60:
1c:de:e0:9e:97:cf:0f:d5:c3:bd:19:17:9f:31:c7:
ba:d3:37:d4:4f:80:58:fc:2e:5c:8c:f8:05:8a:e7:
82:89:a0:89:91:a9:c9:48:d7:87:a4:b8:af:06:d8:
25:44:5d:00:ba:18:86:fa:94:eb:a4:ff:39:79:63:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:27:95:06:3B:AC:F3:31:30:47:0D:4F:B2:DA:F1:B3:37:7D:FD
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:83:3f:c4:15:64:5e:a7:ab:7a:6b:69:eb:04:dc:32:82:2e:
8c:85:2b:f0:52:5d:c7:7f:79:1e:91:e5:3d:a3:ef:15:6d:b1:
41:a3:bc:7c:ca:ac:a8:44:d4:e9:02:57:39:e2:fe:c3:de:e3:
e3:02:c0:b5:92:03:ba:a2:4b:58:b8:8e:ab:36:16:15:f0:0e:
a2:83:f4:4d:da:73:42:9a:67:d2:ed:cd:28:1a:68:5b:5e:a4:
09:f1:dc:42:a4:ed:13:94:a1:d5:55:c7:81:8b:24:8b:f6:aa:
02:ac:9b:3c:eb:23:87:f4:cc:97:d2:0e:f7:a4:b7:47:fb:43:
04:da:60:fc:ca:e0:31:21:3a:33:34:05:c0:dd:c4:1e:b6:b7:
3d:e6:d6:0e:11:b1:db:63:15:e0:94:53:7b:82:71:a8:de:21:
29:a4:af:51:1f:d3:b7:35:ac:a0:fb:ea:d6:4c:d6:e3:ab:5f:
e6:88:ce:5c:84:f9:26:82:e6:97:a0:11:2d:47:4f:4e:6c:cb:
b0:1d:af:6d:70:96:ff:95:e2:9c:ca:e0:35:52:af:e9:2a:eb:
a2:a3:58:ac:52:2c:67:fd:cf:94:cb:c8:45:ec:c5:db:76:8a:
44:30:9a:ef:28:f6:a5:8b:07:42:dc:bf:ba:6f:0e:da:f3:98:
23:7b:f5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuNzOjliL6wAAbxn8cB5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5
NjE5OGQwHhcNMjYwODE1MDAwMTA0WhcNMjYwODE2MDAwMTA0WjAzMTEwLwYDVQQD
EyhkOTY5Mjc5NTA2M2JhY2YzMzEzMDQ3MGQ0ZmIyZGFmMWIzMzc3ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy8w1/E1BdkGQ0Do0k6GgxoHLwFe
dCBagym4PVGHWuQnE8EMaAX4XVxRNerOfjWOzIRM0CS9hVqDQ344qj/xiWwrDSr7
iDVs7YwiRDfDM51DaPaBGxh1DafQ3HsvBPgM6Kbk5g+GZ1kzdQ4x9qH7i0H8jzqL
vOxmkDf0vZ/AwWDt9fL6P7ZPQGTvD2FBRZmB0FNmDabgZNZ4UO3mVTmZrnPKl2yo
bhd+YqRsumXDgb2z1y0UqCu8lgmT/Y6eCc9qIGAc3uCel88P1cO9GRefMce60zfU
T4BY/C5cjPgFiueCiaCJkanJSNeHpLivBtglRF0AuhiG+pTrpP85eWNCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlpJ5UGO6zzMTBHDU+y2vGzN339MB8GA1UdIwQY
MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt
YzFlYmU2MTU0OWNjLzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj
LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIM/xBVk
Xqeremtp6wTcMoIujIUr8FJdx395HpHlPaPvFW2xQaO8fMqsqETU6QJXOeL+w97j
4wLAtZIDuqJLWLiOqzYWFfAOooP0TdpzQppn0u3NKBpoW16kCfHcQqTtE5Sh1VXH
gYski/aqAqybPOsjh/TMl9IO96S3R/tDBNpg/MrgMSE6MzQFwN3EHra3PebWDhGx
22MV4JRTe4JxqN4hKaSvUR/TtzWsoPvq1kzW46tf5ojOXIT5JoLml6ARLUdPTmzL
sB2vbXCW/5XinMrgNVKv6SrroqNYrFIsZ/3PlMvIRezF23aKRDCa7yj2pYsHQty/
um8O2vOYI3v12w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:31:57 2026 by rpki-client