Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
File: ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft (raw, json)
Hash identifier: GJ9dAhKLzrgYA+xheVgpn/Nr0Way2GIN66xoTjYIhYI=
Subject key identifier: BA:55:EC:EF:36:C7:25:D6:D3:61:EC:0C:9A:97:AC:CC:E6:67:9A:E2
Authority key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Certificate issuer: /CN=6659d0207d896b18282922aeef6b472b788f9432
Certificate serial: 01A09133230B0190E9E4363E573364E9D3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
Manifest number: 13
Signing time: Fri 11 Sep 2026 16:00:42 +0000
Manifest this update: Fri 11 Sep 2026 16:00:42 +0000
Manifest next update: Sat 12 Sep 2026 16:00:42 +0000
Files and hashes: 1: IIpkiT0DsKtry5SfDibaOaf5Gmc.asa (hash: piz50WCwexz+zSmea8jYzJEYb2s6Vf251Ay/agIa33g=)
2: ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl (hash: tV4uYQwRtwXDA4xpECAW1L4LYuTRTpz/xvpuiHKrZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:33:23:0b:01:90:e9:e4:36:3e:57:33:64:e9:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6659d0207d896b18282922aeef6b472b788f9432
Validity
Not Before: Sep 11 16:00:42 2026 GMT
Not After : Sep 12 16:00:42 2026 GMT
Subject: CN=ba55ecef36c725d6d361ec0c9a97accce6679ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:a6:53:74:5e:27:58:56:6c:59:57:3f:c6:
1b:85:4e:53:84:04:68:b1:6a:0a:c7:cd:eb:22:0e:
08:39:9f:59:b2:13:12:28:66:ec:78:4f:4b:57:3b:
a0:eb:fd:aa:6b:ae:9c:66:46:05:2f:ce:19:28:cb:
21:31:fc:a4:24:e2:ff:77:76:ee:e0:cb:48:75:f0:
ee:ed:80:70:bb:42:ef:3b:5e:6d:3a:ca:89:b7:1d:
af:b3:73:4a:e7:23:77:eb:74:db:8d:c6:ee:04:04:
a7:e4:01:e4:cc:55:cd:11:b6:e1:c0:eb:9c:c4:39:
74:fa:66:37:ad:67:13:c1:13:9f:44:21:f2:d8:9b:
72:7a:6d:b6:25:30:34:c0:72:8f:03:fd:aa:fb:ee:
b0:ba:15:7c:9e:61:72:22:70:54:eb:5c:0d:2c:15:
cb:fb:71:5c:06:73:c8:4a:9c:76:19:2d:f3:e9:21:
49:db:ea:d4:78:2a:8f:9b:ce:75:28:ef:05:b6:46:
89:72:b1:51:3c:49:ce:da:ae:a1:a9:d0:78:21:73:
02:46:c8:8d:56:f7:4b:c1:4f:b2:c0:a9:26:9c:2f:
8b:0f:60:8e:04:f0:48:85:1b:f7:95:c2:c8:08:e2:
ed:22:60:37:34:2f:40:22:e5:22:b4:9f:dd:72:9b:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:EC:EF:36:C7:25:D6:D3:61:EC:0C:9A:97:AC:CC:E6:67:9A:E2
X509v3 Authority Key Identifier:
keyid:66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:a3:b3:7d:d2:61:c1:a6:94:12:9f:e6:af:83:a0:19:c0:
14:04:5c:07:41:9f:42:45:73:d4:90:3c:cd:5e:77:f2:34:3f:
e4:cc:25:ca:83:2f:43:25:19:d0:39:cc:19:82:f6:5f:9b:24:
38:b9:c8:fc:58:08:54:33:c6:2f:6d:4a:50:11:4e:4c:17:fd:
79:be:b9:7a:c3:7f:a4:c3:73:1c:81:df:9c:c5:2a:b7:3d:ad:
b1:00:46:2f:c7:c4:12:3d:4d:df:56:7b:49:00:bc:8e:c0:bb:
33:24:9f:70:4f:db:31:48:fa:9e:e7:15:65:4b:7c:0f:a7:50:
31:f4:e6:ea:ae:f5:e2:88:85:d3:75:5e:b0:1d:99:23:e9:32:
1c:a3:61:b3:bc:99:c3:9d:6b:5e:14:8e:4d:de:d6:3c:cd:55:
70:fd:97:6c:15:60:13:56:4d:84:57:4e:85:28:c4:e4:8c:a6:
f9:20:c7:14:18:3b:99:ef:8e:b9:a7:41:46:30:97:49:97:30:
a1:aa:45:a7:4e:26:97:01:8b:0d:f0:ee:6b:b8:cd:27:f1:32:
60:1c:e0:39:ae:99:38:e6:c1:99:3b:35:4b:56:48:c8:ec:a3:
10:fa:7d:24:e4:f4:6b:57:ca:3d:22:32:8c:61:23:7a:61:2c:
83:e6:1c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCRMyMLAZDp5DY+VzNk6dO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTlkMDIwN2Q4OTZiMTgyODI5MjJhZWVmNmI0NzJiNzg4
Zjk0MzIwHhcNMjYwOTExMTYwMDQyWhcNMjYwOTEyMTYwMDQyWjAzMTEwLwYDVQQD
EyhiYTU1ZWNlZjM2YzcyNWQ2ZDM2MWVjMGM5YTk3YWNjY2U2Njc5YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FGmU3ReJ1hWbFlXP8YbhU5ThARo
sWoKx83rIg4IOZ9ZshMSKGbseE9LVzug6/2qa66cZkYFL84ZKMshMfykJOL/d3bu
4MtIdfDu7YBwu0LvO15tOsqJtx2vs3NK5yN363TbjcbuBASn5AHkzFXNEbbhwOuc
xDl0+mY3rWcTwROfRCHy2Jtyem22JTA0wHKPA/2q++6wuhV8nmFyInBU61wNLBXL
+3FcBnPISpx2GS3z6SFJ2+rUeCqPm851KO8FtkaJcrFRPEnO2q6hqdB4IXMCRsiN
VvdLwU+ywKkmnC+LD2COBPBIhRv3lcLICOLtImA3NC9AIuUitJ/dcpvyiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpV7O82xyXW02HsDJqXrMzmZ5riMB8GA1UdIwQY
MBaAFGZZ0CB9iWsYKCkiru9rRyt4j5QyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wNDFhMGQtNGVkNC00ZTMyLTg4YmUt
NjE4ZDI0ZDYyMmUwLzEvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wNDFhMGQtNGVkNC00ZTMyLTg4YmUtNjE4ZDI0ZDYyMmUw
LzEvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnGjs33S
YcGmlBKf5q+DoBnAFARcB0GfQkVz1JA8zV538jQ/5MwlyoMvQyUZ0DnMGYL2X5sk
OLnI/FgIVDPGL21KUBFOTBf9eb65esN/pMNzHIHfnMUqtz2tsQBGL8fEEj1N31Z7
SQC8jsC7MySfcE/bMUj6nucVZUt8D6dQMfTm6q714oiF03VesB2ZI+kyHKNhs7yZ
w51rXhSOTd7WPM1VcP2XbBVgE1ZNhFdOhSjE5Iym+SDHFBg7me+OuadBRjCXSZcw
oapFp04mlwGLDfDua7jNJ/EyYBzgOa6ZOObBmTs1S1ZIyOyjEPp9JOT0a1fKPSIy
jGEjemEsg+Ycww==
-----END CERTIFICATE-----
Generated at Fri Sep 11 23:41:03 2026 by rpki-client