Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: MeDCirTkr2pzMCobIisFgGBLyxoiCZCgngfZ5CdcMo0=
Subject key identifier: AA:23:3F:25:DF:28:AF:CB:E3:D5:2F:E4:65:CD:2F:47:B1:22:DE:14
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01A167FD8A9B37DACB2D8F38B74285C0E67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1ABD
Signing time: Fri 23 Oct 2026 09:00:31 +0000
Manifest this update: Fri 23 Oct 2026 09:00:31 +0000
Manifest next update: Sat 24 Oct 2026 09:00:31 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: qS6l8lBsR1lE+kxsB1r269yL/OWuLM9JjC5zCduyNSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:fd:8a:9b:37:da:cb:2d:8f:38:b7:42:85:c0:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Oct 23 09:00:31 2026 GMT
Not After : Oct 24 09:00:31 2026 GMT
Subject: CN=aa233f25df28afcbe3d52fe465cd2f47b122de14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:05:70:99:a8:dc:c8:25:ff:da:e9:c9:e4:
89:30:da:4b:51:33:da:4e:1a:c6:4d:37:54:24:74:
4e:a7:80:c1:2a:41:75:d3:e5:c2:48:a8:ec:66:cd:
96:78:70:7a:b3:b6:54:c2:cf:72:72:59:ea:8f:ec:
f3:04:8e:69:b5:28:ca:90:da:83:0c:b4:ff:9d:f8:
5d:9b:7b:ba:a9:71:60:8f:d7:a7:1a:b1:d6:6c:32:
d2:8a:33:8e:27:b2:74:d4:fe:b1:1a:e0:87:ed:2f:
e7:fd:00:cc:d8:82:b6:10:6c:53:74:b5:3c:3b:97:
a0:f4:1d:41:86:0e:88:dd:d2:e3:ee:9f:61:ac:f6:
e2:18:1e:25:a8:7e:07:c5:96:45:10:b4:66:a5:b3:
23:e9:c2:b5:5a:33:7d:73:2f:a1:16:77:3c:4b:49:
aa:5f:05:d6:a9:90:e6:50:21:a4:9b:73:c1:ec:0f:
48:be:7b:df:e7:e2:c8:9b:50:1e:51:3f:21:30:d9:
fc:d0:70:5d:4b:b0:59:82:99:0a:76:1b:0e:da:a9:
00:59:88:3f:18:01:80:92:04:4f:72:02:ba:96:c1:
76:13:7f:f2:44:8d:8e:db:d6:17:76:b5:3c:c1:f7:
45:51:d0:e5:0f:76:8f:6f:aa:d8:76:43:13:0b:73:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:3F:25:DF:28:AF:CB:E3:D5:2F:E4:65:CD:2F:47:B1:22:DE:14
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8f:ea:16:ac:34:6e:eb:32:7e:18:04:95:b6:aa:d5:a3:72:
03:2b:75:56:33:54:13:d7:6d:22:2e:07:69:6c:fb:e6:e9:fa:
b9:8b:76:dc:d4:fa:87:90:55:27:bb:3c:b5:03:28:8a:05:4f:
1d:d3:ef:d4:1e:f8:51:2a:1a:b2:97:27:e8:c5:f3:dd:a5:e0:
0b:f6:c2:2e:d1:8a:70:a7:f2:04:e9:94:a5:3e:bf:48:83:b4:
f5:15:6f:71:f7:95:33:08:38:7b:a6:19:38:fe:94:39:1f:e3:
44:12:3c:6a:e7:8c:50:41:bb:5f:b3:47:4c:ab:30:bc:71:96:
83:a7:5e:b7:10:af:e8:bf:b1:eb:b7:6d:20:d4:21:ac:d9:d9:
3d:64:f4:b2:d1:c8:a2:ce:f6:df:c6:dd:98:00:93:2d:ea:a5:
7f:5c:00:87:ed:d2:73:bc:26:58:31:2c:08:68:dc:c6:df:c7:
6c:5e:f7:e1:f2:bf:4e:bb:68:88:2e:dc:26:5d:27:90:2d:22:
4f:9e:34:2b:de:72:5a:d3:28:a6:7f:b2:28:a7:8d:ed:37:b5:
00:f4:45:b2:df:2f:b5:65:84:40:05:a1:7e:b9:8a:48:47:7c:
a1:57:21:46:00:f9:d8:93:8e:bc:6a:09:92:b5:b2:51:05:f1:
c5:5c:8e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFn/YqbN9rLLY84t0KFwOZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjYxMDIzMDkwMDMxWhcNMjYxMDI0MDkwMDMxWjAzMTEwLwYDVQQD
EyhhYTIzM2YyNWRmMjhhZmNiZTNkNTJmZTQ2NWNkMmY0N2IxMjJkZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XcFcJmo3Mgl/9rpyeSJMNpLUTPa
ThrGTTdUJHROp4DBKkF10+XCSKjsZs2WeHB6s7ZUws9yclnqj+zzBI5ptSjKkNqD
DLT/nfhdm3u6qXFgj9enGrHWbDLSijOOJ7J01P6xGuCH7S/n/QDM2IK2EGxTdLU8
O5eg9B1Bhg6I3dLj7p9hrPbiGB4lqH4HxZZFELRmpbMj6cK1WjN9cy+hFnc8S0mq
XwXWqZDmUCGkm3PB7A9Ivnvf5+LIm1AeUT8hMNn80HBdS7BZgpkKdhsO2qkAWYg/
GAGAkgRPcgK6lsF2E3/yRI2O29YXdrU8wfdFUdDlD3aPb6rYdkMTC3NxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKojPyXfKK/L49Uv5GXNL0exIt4UMB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKY/qFqw0
busyfhgElbaq1aNyAyt1VjNUE9dtIi4HaWz75un6uYt23NT6h5BVJ7s8tQMoigVP
HdPv1B74USoaspcn6MXz3aXgC/bCLtGKcKfyBOmUpT6/SIO09RVvcfeVMwg4e6YZ
OP6UOR/jRBI8aueMUEG7X7NHTKswvHGWg6detxCv6L+x67dtINQhrNnZPWT0stHI
os7238bdmACTLeqlf1wAh+3Sc7wmWDEsCGjcxt/HbF734fK/TrtoiC7cJl0nkC0i
T540K95yWtMopn+yKKeN7Te1APRFst8vtWWEQAWhfrmKSEd8oVchRgD52JOOvGoJ
krWyUQXxxVyOSA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 19:21:08 2026 by rpki-client