Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: jJ/JGaf5k6QOXAk+oyH5OuTwbgV1RqA3fcC+pm6x36E=
Subject key identifier: 15:36:AE:E6:77:72:BF:36:8C:8C:B2:7B:24:7B:76:4A:D0:7A:AB:52
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 01A0F6E96DEB5261372F77429979A9FB56C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 0351
Signing time: Thu 01 Oct 2026 10:01:28 +0000
Manifest this update: Thu 01 Oct 2026 10:01:28 +0000
Manifest next update: Fri 02 Oct 2026 10:01:28 +0000
Files and hashes: 1: DjdRXxbB13RCBLzgc7W30AtdCq8.asa (hash: J2A9HmiX/LyHyVWsEKBZYWe3gyS+zl7oCgR1ePGuZvk=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: fzprckK0nuLgumP6W2w2wAoZNd92Ev5wH22KZ2atvv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:6d:eb:52:61:37:2f:77:42:99:79:a9:fb:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Oct 1 10:01:28 2026 GMT
Not After : Oct 2 10:01:28 2026 GMT
Subject: CN=1536aee67772bf368c8cb27b247b764ad07aab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:fa:ac:50:18:37:95:e9:b6:6d:cd:cd:c8:
a6:75:ef:7b:be:4a:33:e0:4c:a4:d8:fb:c6:a0:dc:
67:03:e0:5a:ed:53:0e:4c:90:26:dd:29:ff:89:90:
9f:2f:07:f9:30:68:4c:fc:e4:6a:4e:21:a8:1a:5a:
ae:be:95:60:dd:0c:b4:e7:57:66:19:a4:50:76:50:
c9:05:28:d7:b3:22:54:fc:cf:d9:6b:dd:73:74:55:
a6:bd:32:60:87:49:ae:52:35:29:eb:58:a5:92:b6:
b6:da:49:ae:32:c8:0d:2e:8f:fc:fe:61:35:16:5c:
31:a1:9b:98:56:40:f7:36:8b:d1:f6:13:c1:38:20:
6b:8a:82:cd:98:c1:1b:ae:51:72:c5:70:c4:f9:96:
44:ee:67:da:be:75:06:df:33:af:d9:16:68:ed:46:
a7:55:03:12:41:60:9a:40:a6:26:b6:4b:ca:ba:18:
1d:46:e4:11:da:d8:b6:92:29:32:71:44:0d:fc:f8:
5b:a5:85:c0:fb:94:dc:79:0a:d6:69:9f:05:93:e6:
d6:1b:85:a6:68:f0:c2:d6:8c:f8:0c:a8:15:b3:7c:
6c:db:3d:eb:18:a6:79:c8:38:76:06:71:20:42:53:
6f:e6:a0:19:de:41:6a:1d:69:95:22:8d:42:84:c2:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:AE:E6:77:72:BF:36:8C:8C:B2:7B:24:7B:76:4A:D0:7A:AB:52
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4f:28:80:06:4e:b2:ac:4b:1c:b3:f8:b5:72:67:d1:e6:e1:
b3:da:7f:31:37:48:02:32:d0:f7:3d:0b:9e:2e:c9:df:c3:29:
3f:c6:14:c0:99:6b:16:6d:06:7e:20:a2:ec:07:14:cd:03:21:
55:e1:73:de:b9:db:92:76:02:27:7e:0b:cd:cc:e1:5c:9d:0d:
93:1c:9a:e4:48:71:6c:71:bf:a6:2b:de:09:8c:11:aa:aa:15:
45:fa:fc:54:28:f8:35:d6:52:bb:3e:92:76:82:c8:63:4f:34:
a2:f8:a9:fd:b8:5c:9e:f3:a3:55:b3:de:01:51:4b:67:bb:9a:
43:71:98:ce:c7:b0:e3:47:d3:52:2b:9b:d0:88:71:ea:9b:34:
d5:f9:2e:64:54:4d:15:df:d8:c7:c2:e0:e3:ee:ae:e8:96:57:
d8:ef:6e:9a:54:6d:9b:43:3d:ed:d1:08:15:8e:b2:93:c9:de:
18:3f:51:a2:ef:e4:37:bb:86:33:75:08:37:e0:f1:ce:fe:cd:
22:5e:fa:96:90:d9:cc:c3:f5:55:99:07:f9:e8:4d:72:83:9d:
3e:0d:31:ac:c8:c3:54:eb:64:8f:9f:44:2e:ba:55:29:e2:74:
6b:36:2c:5b:60:93:de:0e:e4:4f:17:40:83:61:60:b3:4c:af:
c7:e3:92:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26W3rUmE3L3dCmXmp+1bEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYxMDAxMTAwMTI4WhcNMjYxMDAyMTAwMTI4WjAzMTEwLwYDVQQD
EygxNTM2YWVlNjc3NzJiZjM2OGM4Y2IyN2IyNDdiNzY0YWQwN2FhYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNv6rFAYN5Xptm3Nzcimde97vkoz
4Eyk2PvGoNxnA+Ba7VMOTJAm3Sn/iZCfLwf5MGhM/ORqTiGoGlquvpVg3Qy051dm
GaRQdlDJBSjXsyJU/M/Za91zdFWmvTJgh0muUjUp61ilkra22kmuMsgNLo/8/mE1
FlwxoZuYVkD3NovR9hPBOCBrioLNmMEbrlFyxXDE+ZZE7mfavnUG3zOv2RZo7Uan
VQMSQWCaQKYmtkvKuhgdRuQR2ti2kikycUQN/PhbpYXA+5TceQrWaZ8Fk+bWG4Wm
aPDC1oz4DKgVs3xs2z3rGKZ5yDh2BnEgQlNv5qAZ3kFqHWmVIo1ChMKP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU2ruZ3cr82jIyyeyR7dkrQeqtSMB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwE8ogAZO
sqxLHLP4tXJn0ebhs9p/MTdIAjLQ9z0Lni7J38MpP8YUwJlrFm0GfiCi7AcUzQMh
VeFz3rnbknYCJ34LzczhXJ0Nkxya5EhxbHG/piveCYwRqqoVRfr8VCj4NdZSuz6S
doLIY080ovip/bhcnvOjVbPeAVFLZ7uaQ3GYzsew40fTUiub0Ihx6ps01fkuZFRN
Fd/Yx8Lg4+6u6JZX2O9umlRtm0M97dEIFY6yk8neGD9Rou/kN7uGM3UIN+Dxzv7N
Il76lpDZzMP1VZkH+ehNcoOdPg0xrMjDVOtkj59ELrpVKeJ0azYsW2CT3g7kTxdA
g2Fgs0yvx+OS0w==
-----END CERTIFICATE-----
Generated at Thu Oct 1 17:44:56 2026 by rpki-client