Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: MVKN1UWjqkbhfNE3akBbCW3oqG5zSWbMkBFZvrtQdMI=
Subject key identifier: 35:01:47:11:C7:87:47:41:A5:2C:91:62:01:73:A1:02:50:35:53:37
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 01A08DFC36294B7ABF03B265B92BEA9681CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 0272
Signing time: Fri 11 Sep 2026 01:01:51 +0000
Manifest this update: Fri 11 Sep 2026 01:01:51 +0000
Manifest next update: Sat 12 Sep 2026 01:01:51 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: qWhtGENYZmhN9ep/fv6GS7A1RWkLBqL5wyqZo7NaYmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:36:29:4b:7a:bf:03:b2:65:b9:2b:ea:96:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Sep 11 01:01:51 2026 GMT
Not After : Sep 12 01:01:51 2026 GMT
Subject: CN=35014711c7874741a52c91620173a10250355337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:e5:6a:5c:31:ad:a9:25:62:b6:1b:23:1c:
9e:1c:a9:a2:5f:c8:86:a0:31:98:a1:6b:d2:14:a8:
9e:d6:32:78:10:b4:2c:82:c7:42:20:eb:5e:98:df:
a2:5a:d6:42:cd:c3:d4:11:1d:86:f5:46:55:8a:90:
ff:9b:de:36:61:47:e2:f5:77:b8:18:a5:8b:7d:b2:
72:00:32:52:95:fa:ec:20:ee:16:e8:04:88:5f:23:
a3:ba:e0:94:0a:65:f3:80:28:47:f2:fc:3b:45:fe:
c3:b9:3d:ac:f8:04:66:c0:1b:06:cb:a5:b9:b4:01:
6f:25:61:6a:71:58:30:19:20:91:22:6c:0b:ed:55:
09:37:85:16:f4:d2:23:10:e1:53:03:75:76:e2:54:
27:b4:d3:95:fa:ef:2a:eb:6b:d7:df:38:26:04:a5:
6f:c4:0d:55:0c:18:4a:36:6b:c9:2e:1d:dc:f9:7b:
19:86:3c:f1:cb:af:d5:4a:a7:4c:54:db:3f:2b:0b:
26:46:cb:1d:01:41:a2:3e:0a:0a:63:13:e3:13:ff:
5c:69:69:c0:cf:66:ba:d6:7d:42:7e:07:1b:62:3a:
5e:ec:07:f0:79:96:a0:38:39:bf:89:cb:bd:a2:91:
d0:6e:45:d6:42:52:9f:32:ac:d3:02:94:71:b7:22:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:47:11:C7:87:47:41:A5:2C:91:62:01:73:A1:02:50:35:53:37
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:b4:45:c5:c7:f1:94:58:54:5f:f0:7a:bb:66:97:97:df:
1e:f3:9b:92:11:0d:0c:4c:a7:9c:3e:c8:ef:02:9c:03:9f:34:
02:ec:db:59:7e:ef:15:31:d7:15:65:4a:69:95:86:c7:22:a8:
d1:7c:87:66:73:36:36:32:fa:41:55:1d:db:da:6a:3f:d9:be:
ac:b6:77:59:51:19:da:0d:c0:7b:6a:45:39:3d:73:8b:35:53:
72:ff:89:62:6d:3d:b8:90:de:cc:e3:fd:0c:83:e5:65:0b:9f:
59:8b:4e:3a:59:d6:63:0c:01:56:22:2c:9d:a7:c8:a3:73:1f:
35:7e:98:f0:9f:bf:a5:7c:3f:e3:44:ec:52:5c:4c:e2:e1:41:
02:5e:c2:2a:df:5a:58:71:f7:bc:94:26:c3:16:23:a4:76:bb:
a3:2e:22:95:67:9e:9d:e6:f8:87:0e:05:42:04:6a:87:63:9b:
1a:ef:b9:eb:18:66:48:62:b9:28:64:29:b2:11:90:b7:db:c3:
90:e2:b8:99:e4:b1:a7:5e:d4:ed:49:18:33:ac:32:10:15:c8:
22:1a:e0:0a:77:d1:44:49:4b:ee:7d:f5:07:99:68:f2:b1:0e:
3f:3c:67:62:c8:82:06:ae:4a:fd:3b:d6:d0:c3:69:8c:8c:93:
fa:82:df:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCN/DYpS3q/A7JluSvqloHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzA5ZWQ3MjIxZDRkNTJhZTIzNTEyYTBiZWE1MDBjNjc3
YTJlYTEwHhcNMjYwOTExMDEwMTUxWhcNMjYwOTEyMDEwMTUxWjAzMTEwLwYDVQQD
EygzNTAxNDcxMWM3ODc0NzQxYTUyYzkxNjIwMTczYTEwMjUwMzU1MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QXlalwxraklYrYbIxyeHKmiX8iG
oDGYoWvSFKie1jJ4ELQsgsdCIOtemN+iWtZCzcPUER2G9UZVipD/m942YUfi9Xe4
GKWLfbJyADJSlfrsIO4W6ASIXyOjuuCUCmXzgChH8vw7Rf7DuT2s+ARmwBsGy6W5
tAFvJWFqcVgwGSCRImwL7VUJN4UW9NIjEOFTA3V24lQntNOV+u8q62vX3zgmBKVv
xA1VDBhKNmvJLh3c+XsZhjzxy6/VSqdMVNs/KwsmRssdAUGiPgoKYxPjE/9caWnA
z2a61n1CfgcbYjpe7AfweZagODm/icu9opHQbkXWQlKfMqzTApRxtyL6VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUBRxHHh0dBpSyRYgFzoQJQNVM3MB8GA1UdIwQY
MBaAFGUwntciHU1SriNRKgvqUAxnei6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQt
ZDFkNTEyMGNmNmVlLzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQtZDFkNTEyMGNmNmVl
LzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk560RcXH
8ZRYVF/wertml5ffHvObkhENDEynnD7I7wKcA580AuzbWX7vFTHXFWVKaZWGxyKo
0XyHZnM2NjL6QVUd29pqP9m+rLZ3WVEZ2g3Ae2pFOT1zizVTcv+JYm09uJDezOP9
DIPlZQufWYtOOlnWYwwBViIsnafIo3MfNX6Y8J+/pXw/40TsUlxM4uFBAl7CKt9a
WHH3vJQmwxYjpHa7oy4ilWeeneb4hw4FQgRqh2ObGu+56xhmSGK5KGQpshGQt9vD
kOK4meSxp17U7UkYM6wyEBXIIhrgCnfRRElL7n31B5lo8rEOPzxnYsiCBq5K/TvW
0MNpjIyT+oLf0A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:53 2026 by rpki-client