Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: ZRU2Zk1+BJua/HBxR4XQ31FvUfq72+dcJ6l2FKYAYIY=
Subject key identifier: 14:C9:17:5C:3A:11:FF:D0:71:A9:8A:05:36:91:84:C6:63:EC:2F:5D
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01A18751D70B029F163DD73EE7741C4606D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1ACF
Signing time: Thu 29 Oct 2026 11:00:49 +0000
Manifest this update: Thu 29 Oct 2026 11:00:49 +0000
Manifest next update: Fri 30 Oct 2026 11:00:49 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: agawia7I1SjXbFrpE3Wj01XQPsZZ6xPvLLPaEs7rdqE=)
2: _6LzupxXASaoZ39swk7m_G9Thtg.roa (hash: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=)
3: fjLqd8nX00J9fe0_2aJ2e9FwgbY.asa (hash: hHImG8Y2r794WFIY//Kga9NCrwxYUH3dsvX+/DPBAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:d7:0b:02:9f:16:3d:d7:3e:e7:74:1c:46:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Oct 29 11:00:49 2026 GMT
Not After : Oct 30 11:00:49 2026 GMT
Subject: CN=14c9175c3a11ffd071a98a05369184c663ec2f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:4e:3e:10:6a:c0:bd:32:24:56:c9:f6:5d:
18:29:09:78:16:c1:f7:7e:b7:45:47:44:1c:d9:35:
24:ac:08:53:e2:c8:c9:38:28:0a:9e:e7:5f:12:d3:
13:ae:23:19:95:1e:65:98:d4:6f:98:1e:2e:c0:aa:
f8:82:87:d8:f9:7a:c0:70:e6:9a:61:ea:6f:15:9c:
ef:3c:63:91:f7:51:d0:eb:a0:7c:0f:91:7c:ce:32:
fa:dd:18:eb:b7:2a:87:7e:bb:96:01:d6:04:ee:46:
3a:1e:75:42:06:da:a8:09:58:fa:8a:04:65:71:a8:
c1:05:56:47:58:dc:b1:64:0b:06:7a:f4:e5:d8:c3:
95:fc:83:d7:d4:4e:ff:20:b7:ed:29:50:b0:0f:61:
25:95:fa:98:b3:3f:2c:c7:91:0a:11:27:89:cf:99:
36:4d:84:bf:72:37:ed:01:cc:38:35:4e:c5:ec:cb:
69:17:38:4a:92:dd:d8:b4:ca:5d:e9:03:07:bf:9c:
c4:40:01:5c:55:be:10:d2:df:95:e1:b2:c5:15:3d:
8e:cc:c4:92:65:d6:f2:93:fc:35:2e:14:53:a5:66:
e9:73:7b:75:48:66:93:b5:dc:c2:fa:4d:13:93:67:
19:a5:77:e0:83:4b:a2:0a:56:09:f1:b3:68:d4:42:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C9:17:5C:3A:11:FF:D0:71:A9:8A:05:36:91:84:C6:63:EC:2F:5D
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e3:13:07:30:aa:e4:e4:84:0b:aa:21:31:a5:e3:8a:f0:c4:
19:0c:d8:80:6d:2e:68:62:34:ea:de:2b:57:c2:ba:1e:9e:b2:
de:e7:3d:d9:5e:e6:6d:31:5e:4b:cf:55:3b:40:6b:d2:57:ab:
48:5e:f5:e0:b7:0b:22:5f:7b:a4:5a:f6:4d:41:b0:dd:ce:b4:
4b:16:b1:b6:00:a0:3f:2b:72:32:95:6b:f1:db:84:69:10:d4:
08:5c:aa:bb:72:c6:f8:74:32:f8:32:9f:ab:76:43:8a:cb:3f:
f2:6a:f2:0e:c5:23:8d:a6:18:c7:b2:e6:10:3f:40:47:82:10:
ab:a7:b1:8d:d8:ea:1d:a8:db:80:55:6a:d6:ce:e3:3e:fe:7a:
ad:a8:85:3d:88:d6:94:09:24:60:b1:f2:ef:bc:8a:d2:cc:61:
0d:e0:d0:af:81:d1:86:ba:ad:71:aa:d9:50:a6:5b:e4:71:8d:
81:f2:f6:96:b6:ad:4a:b0:13:35:23:b7:a0:b1:8f:06:5f:f7:
0b:05:72:26:7c:0c:d4:bb:0f:b8:52:71:bf:7c:8f:cb:ad:f9:
09:65:b2:24:20:07:d7:0c:7f:09:9c:68:d2:41:a1:2d:55:fa:
1f:40:74:91:82:62:24:19:0b:c8:b5:e9:87:b7:01:f6:63:ec:
cb:01:a0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHUdcLAp8WPdc+53QcRgbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjYxMDI5MTEwMDQ5WhcNMjYxMDMwMTEwMDQ5WjAzMTEwLwYDVQQD
EygxNGM5MTc1YzNhMTFmZmQwNzFhOThhMDUzNjkxODRjNjYzZWMyZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJBOPhBqwL0yJFbJ9l0YKQl4FsH3
frdFR0Qc2TUkrAhT4sjJOCgKnudfEtMTriMZlR5lmNRvmB4uwKr4gofY+XrAcOaa
YepvFZzvPGOR91HQ66B8D5F8zjL63RjrtyqHfruWAdYE7kY6HnVCBtqoCVj6igRl
cajBBVZHWNyxZAsGevTl2MOV/IPX1E7/ILftKVCwD2EllfqYsz8sx5EKESeJz5k2
TYS/cjftAcw4NU7F7MtpFzhKkt3YtMpd6QMHv5zEQAFcVb4Q0t+V4bLFFT2OzMSS
Zdbyk/w1LhRTpWbpc3t1SGaTtdzC+k0Tk2cZpXfgg0uiClYJ8bNo1EJX4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTJF1w6Ef/QcamKBTaRhMZj7C9dMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuMTBzCq
5OSEC6ohMaXjivDEGQzYgG0uaGI06t4rV8K6Hp6y3uc92V7mbTFeS89VO0Br0ler
SF714LcLIl97pFr2TUGw3c60SxaxtgCgPytyMpVr8duEaRDUCFyqu3LG+HQy+DKf
q3ZDiss/8mryDsUjjaYYx7LmED9AR4IQq6exjdjqHajbgFVq1s7jPv56raiFPYjW
lAkkYLHy77yK0sxhDeDQr4HRhrqtcarZUKZb5HGNgfL2lratSrATNSO3oLGPBl/3
CwVyJnwM1LsPuFJxv3yPy635CWWyJCAH1wx/CZxo0kGhLVX6H0B0kYJiJBkLyLXp
h7cB9mPsywGgiQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:48 2026 by rpki-client