Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: x1gmQrotSdG9tAugzbtG2aimPiRJDSdijNLSXrT17Ds=
Subject key identifier: 97:7A:C0:0E:39:34:E3:7B:B0:D5:D0:0A:49:51:FE:27:EF:9E:6A:26
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01A12AD6CD317FF838E8E92DA8E67A6FFB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 12:01:22 +0000
Manifest this update: Sun 11 Oct 2026 12:01:22 +0000
Manifest next update: Mon 12 Oct 2026 12:01:22 +0000
Files and hashes: 1: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: SGfQwIU+uiGOrOK4xbeLRqfUPAnSgzXlAx5cNhrtpmE=)
2: tF-2EeR_Sloua9VRcDrOJtjCE4c.roa (hash: SRucPtbp0q4X2q4N9kPCOOMgbw4idYsb5wYcEAqop+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:cd:31:7f:f8:38:e8:e9:2d:a8:e6:7a:6f:fb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Oct 11 12:01:22 2026 GMT
Not After : Oct 12 12:01:22 2026 GMT
Subject: CN=977ac00e3934e37bb0d5d00a4951fe27ef9e6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:b7:8f:0a:52:95:01:e0:b2:3a:15:01:c8:
30:3f:36:2d:ef:0f:e3:76:34:0e:8f:59:25:16:e0:
23:40:ae:87:bf:f0:7f:e3:a2:2c:aa:a4:e5:4f:8a:
e5:b9:bd:55:45:e9:57:56:4e:f6:25:f4:3b:fc:a9:
e3:83:03:9d:62:d6:80:09:79:b4:c1:08:bd:61:41:
df:dc:5d:9f:16:48:e2:ee:af:d1:38:89:b3:98:12:
1b:ae:09:10:8b:f0:5d:ef:ba:d1:61:da:39:46:f5:
5a:7e:85:4f:a5:05:62:3f:4f:46:0c:28:b7:e1:aa:
29:96:fe:0c:3c:6d:ba:61:a5:41:ab:42:e6:f5:8b:
61:4e:8a:0e:bc:bf:60:32:2c:63:21:9e:7e:a6:d0:
72:d6:a6:1c:b7:8e:8d:9f:d1:c3:28:48:12:97:ce:
bb:34:85:41:85:0d:a2:5d:6b:e9:43:61:15:5f:b8:
fe:69:ba:de:21:0a:dc:8f:dd:df:0d:d4:83:b4:ba:
d4:c8:71:41:06:c2:16:da:d5:a3:26:03:9f:67:0e:
34:9d:94:14:95:6c:be:56:7f:80:7d:c6:2a:76:ba:
3e:d0:70:92:89:e5:be:11:c1:6a:80:b8:f8:3b:33:
c7:d8:41:fd:98:5c:9c:32:0c:a4:31:a1:b2:cd:6c:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7A:C0:0E:39:34:E3:7B:B0:D5:D0:0A:49:51:FE:27:EF:9E:6A:26
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:83:f3:85:bb:c4:8a:88:ef:7f:2f:7f:20:17:d9:0f:71:
87:2b:41:d1:d2:d2:ea:a5:f6:f8:8b:c6:af:a2:70:35:d9:36:
c3:f2:80:ea:ac:ac:e1:a4:0e:98:77:97:fa:5e:32:7c:91:e2:
fe:9e:14:2f:62:37:21:87:00:0e:03:1c:13:9f:90:a9:4a:d0:
64:2e:d1:06:ce:a1:31:c7:60:14:06:80:1c:5d:3a:db:25:28:
68:75:03:7d:11:7d:a5:5e:30:28:10:77:ff:50:95:34:9a:af:
bf:ab:f7:d1:69:9c:6d:ee:5f:ca:33:f5:ce:51:44:01:3f:eb:
89:9f:9a:fc:dd:1b:69:65:03:7e:9c:58:7e:f1:4b:cd:4e:5e:
0b:c9:98:a6:ea:50:54:c3:bd:c4:c8:3a:ce:43:9c:ee:68:a0:
38:d5:dc:ff:3c:7e:36:26:f3:8d:3e:55:0a:c9:c4:6a:46:b6:
6a:2c:b5:09:65:3d:d5:9d:be:ff:31:a8:79:cc:6f:4e:78:9d:
85:f8:0e:dd:b6:e8:f8:94:ff:da:04:08:82:04:63:24:f5:b1:
22:0a:b2:f0:94:fe:35:69:45:93:0f:3d:7a:03:1f:34:cf:33:
da:23:92:6f:88:08:e3:34:4f:cd:51:9c:b4:c5:ef:db:0c:7e:
54:e9:a3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1s0xf/g46OktqOZ6b/uGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMzkyZjI4ZGVjNmI4Y2NlYjdjZDcwZTdhZjcxZDhjZGNh
YTlhMDYwHhcNMjYxMDExMTIwMTIyWhcNMjYxMDEyMTIwMTIyWjAzMTEwLwYDVQQD
Eyg5NzdhYzAwZTM5MzRlMzdiYjBkNWQwMGE0OTUxZmUyN2VmOWU2YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAC3jwpSlQHgsjoVAcgwPzYt7w/j
djQOj1klFuAjQK6Hv/B/46IsqqTlT4rlub1VRelXVk72JfQ7/KnjgwOdYtaACXm0
wQi9YUHf3F2fFkji7q/ROImzmBIbrgkQi/Bd77rRYdo5RvVafoVPpQViP09GDCi3
4aoplv4MPG26YaVBq0Lm9YthTooOvL9gMixjIZ5+ptBy1qYct46Nn9HDKEgSl867
NIVBhQ2iXWvpQ2EVX7j+abreIQrcj93fDdSDtLrUyHFBBsIW2tWjJgOfZw40nZQU
lWy+Vn+AfcYqdro+0HCSieW+EcFqgLj4OzPH2EH9mFycMgykMaGyzWxKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd6wA45NON7sNXQCklR/ifvnmomMB8GA1UdIwQY
MBaAFK85LyjexrjM63zXDnr3HYzcqpoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2Yt
YWI5ZWFkYjFkNzk3LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2YtYWI5ZWFkYjFkNzk3
LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXj2D84W7
xIqI738vfyAX2Q9xhytB0dLS6qX2+IvGr6JwNdk2w/KA6qys4aQOmHeX+l4yfJHi
/p4UL2I3IYcADgMcE5+QqUrQZC7RBs6hMcdgFAaAHF062yUoaHUDfRF9pV4wKBB3
/1CVNJqvv6v30Wmcbe5fyjP1zlFEAT/riZ+a/N0baWUDfpxYfvFLzU5eC8mYpupQ
VMO9xMg6zkOc7migONXc/zx+NibzjT5VCsnEaka2aiy1CWU91Z2+/zGoecxvTnid
hfgO3bbo+JT/2gQIggRjJPWxIgqy8JT+NWlFkw89egMfNM8z2iOSb4gI4zRPzVGc
tMXv2wx+VOmjQA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:27 2026 by rpki-client