Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier: 4R00c2zXVCVavBePa21D7dL+vYQtttyaKZBlt9gQItM=
Subject key identifier: 77:FD:8C:86:20:98:DE:34:F4:90:FE:12:A4:F4:B2:1C:42:28:36:DA
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A1193D991AEB0753B172768EB8567CF610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number: 01A1
Signing time: Thu 08 Oct 2026 02:00:29 +0000
Manifest this update: Thu 08 Oct 2026 02:00:29 +0000
Manifest next update: Fri 09 Oct 2026 02:00:29 +0000
Files and hashes: 1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
2: UgcaqARpZEhIRz65bcMkPzf98wU.roa (hash: yLTp7DiKxk6cbTossdpZ5QihnG6qCy0foGcotAsMr6E=)
3: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: MfjDcm0TVzFfe0mHpkvnK8VsM/z50n19ecCDRlLgRqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:99:1a:eb:07:53:b1:72:76:8e:b8:56:7c:f6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Oct 8 02:00:29 2026 GMT
Not After : Oct 9 02:00:29 2026 GMT
Subject: CN=77fd8c862098de34f490fe12a4f4b21c422836da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:72:86:8f:fc:19:64:0d:ee:29:f7:eb:0c:
8c:6f:09:40:82:97:38:49:2e:0e:36:8b:0a:15:f9:
39:79:9d:82:08:18:d3:f4:02:b3:5e:f6:1e:68:7f:
ae:73:2d:46:70:8b:0c:05:c2:60:29:83:16:1b:40:
d3:60:a9:5b:7d:57:a1:2c:cf:e2:69:90:4b:cc:ba:
e6:bb:55:1b:ce:b7:61:57:8d:d5:cb:41:16:ba:ea:
d1:0a:71:6e:42:14:69:84:e8:63:b3:69:63:a1:f8:
93:23:23:1c:76:f3:c6:0e:00:59:fa:ca:b5:d8:49:
35:2d:2c:a4:c9:0d:1b:b9:08:15:52:83:8d:93:a9:
fb:b3:2a:da:56:4e:02:99:ff:46:25:a3:66:a9:69:
2b:5d:26:e4:cb:ff:ce:c5:b2:85:dc:4a:b8:0b:92:
d3:ba:bf:9b:5e:0d:09:83:cc:2e:9e:25:f2:16:f3:
73:ba:19:74:0a:e0:b9:d2:e1:39:35:e7:dd:40:3b:
1a:5e:55:77:c2:88:3c:9f:9d:52:04:f6:c1:a7:3d:
03:8f:9e:57:ce:4f:28:99:b3:8e:5e:eb:91:b8:67:
be:10:f3:d8:0e:17:36:6b:49:45:bc:43:3e:30:7f:
9b:83:5d:7f:31:73:f5:ee:d1:4e:12:9d:e3:ec:c8:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:8C:86:20:98:DE:34:F4:90:FE:12:A4:F4:B2:1C:42:28:36:DA
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f5:9d:da:39:10:88:af:4a:11:cc:f8:43:2a:00:69:f3:a8:
de:1f:61:c8:05:0a:fa:51:5b:6e:55:6a:48:fa:dd:e5:8b:9a:
c5:66:e6:9c:89:b3:56:92:55:80:41:94:ad:0f:be:90:1e:61:
34:a4:32:53:e0:08:5a:c2:56:62:df:30:d4:a9:34:53:99:21:
5a:d3:01:f3:2c:7d:f0:2e:64:37:12:7c:d6:14:22:10:60:d6:
ab:c7:59:d7:a7:15:d5:7c:de:d9:ee:d5:96:a3:a9:6b:8c:89:
38:3e:c6:dd:61:00:fe:47:11:0a:bc:7a:8f:a8:f6:91:03:6a:
c6:a1:fa:0e:c8:2c:28:d6:42:d0:e3:d4:21:af:3c:bb:85:19:
c5:18:52:13:1e:8f:38:26:2c:b8:9d:70:6d:b3:42:9a:42:05:
e4:4f:f7:39:d7:b4:a1:3c:71:50:85:96:13:56:12:c9:40:88:
ed:49:59:87:b2:48:cb:8d:d4:40:90:c3:ff:76:eb:55:4a:8d:
ae:9e:06:93:fd:fb:04:c9:22:c4:28:1f:ac:25:04:b5:2b:d3:
8f:63:f7:67:51:9c:7d:fd:b2:1d:64:83:90:28:05:2c:8b:5a:
c9:55:cb:9e:a6:18:bb:c1:22:0b:24:98:ed:78:f6:4a:c1:ea:
40:70:5f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZPZka6wdTsXJ2jrhWfPYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDNmMWY2M2MxMDA5YzQyYTY4OTE5ODYzYTliOGJhODU3
ODY3MzAwHhcNMjYxMDA4MDIwMDI5WhcNMjYxMDA5MDIwMDI5WjAzMTEwLwYDVQQD
Eyg3N2ZkOGM4NjIwOThkZTM0ZjQ5MGZlMTJhNGY0YjIxYzQyMjgzNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs01yho/8GWQN7in36wyMbwlAgpc4
SS4ONosKFfk5eZ2CCBjT9AKzXvYeaH+ucy1GcIsMBcJgKYMWG0DTYKlbfVehLM/i
aZBLzLrmu1UbzrdhV43Vy0EWuurRCnFuQhRphOhjs2ljofiTIyMcdvPGDgBZ+sq1
2Ek1LSykyQ0buQgVUoONk6n7syraVk4Cmf9GJaNmqWkrXSbky//OxbKF3Eq4C5LT
ur+bXg0Jg8wuniXyFvNzuhl0CuC50uE5NefdQDsaXlV3wog8n51SBPbBpz0Dj55X
zk8ombOOXuuRuGe+EPPYDhc2a0lFvEM+MH+bg11/MXP17tFOEp3j7Mj04QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf9jIYgmN409JD+EqT0shxCKDbaMB8GA1UdIwQY
MBaAFGbT8fY8EAnEKmiRmGOpuLqFeGcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEt
NWEyZTlkNjY5NWZjLzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEtNWEyZTlkNjY5NWZj
LzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPWd2jkQ
iK9KEcz4QyoAafOo3h9hyAUK+lFbblVqSPrd5YuaxWbmnImzVpJVgEGUrQ++kB5h
NKQyU+AIWsJWYt8w1Kk0U5khWtMB8yx98C5kNxJ81hQiEGDWq8dZ16cV1Xze2e7V
lqOpa4yJOD7G3WEA/kcRCrx6j6j2kQNqxqH6DsgsKNZC0OPUIa88u4UZxRhSEx6P
OCYsuJ1wbbNCmkIF5E/3Ode0oTxxUIWWE1YSyUCI7UlZh7JIy43UQJDD/3brVUqN
rp4Gk/37BMkixCgfrCUEtSvTj2P3Z1Gcff2yHWSDkCgFLItayVXLnqYYu8EiCySY
7Xj2SsHqQHBfWQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:29:14 2026 by rpki-client