Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: JHmyAADvd5KWAViKyRzjW1mJstl7ZwqeyPdAzGlLIOA=
Subject key identifier: 28:DA:19:EC:04:3F:29:C2:CB:A1:6D:7B:CC:38:F9:16:CB:9B:C1:3F
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01A168D958EE74ADB016BF0874A9F84E183F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0A3D
Signing time: Fri 23 Oct 2026 13:00:36 +0000
Manifest this update: Fri 23 Oct 2026 13:00:36 +0000
Manifest next update: Sat 24 Oct 2026 13:00:36 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: mMYixyqntq2gx+iPXqwLE/42WmvpMQc4gtyHPPJ0U/I=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:d9:58:ee:74:ad:b0:16:bf:08:74:a9:f8:4e:18:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Oct 23 13:00:36 2026 GMT
Not After : Oct 24 13:00:36 2026 GMT
Subject: CN=28da19ec043f29c2cba16d7bcc38f916cb9bc13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:94:06:13:13:b3:4f:da:d1:6c:d4:04:c5:
8c:43:9b:e1:1d:9c:01:ce:2d:9a:f1:34:ec:d4:0e:
bd:44:1b:bb:fa:57:6b:11:44:28:07:6d:41:64:b4:
b3:8a:65:66:94:16:fc:40:33:c5:af:f3:ec:4b:d4:
c6:40:ac:eb:b9:be:6a:31:7c:33:49:54:10:58:d2:
8b:1e:c5:40:c1:fd:9a:cd:04:20:97:21:b3:65:c9:
85:e5:3f:d6:3e:4c:b0:99:5e:b2:e9:d9:c3:9b:33:
23:08:c9:ec:70:2e:11:00:91:7e:de:8a:db:9c:de:
26:33:6a:43:b6:60:83:d2:42:87:be:99:a1:06:ad:
31:30:be:ef:59:d4:6b:e5:2f:a8:97:c7:2f:d0:02:
71:22:5f:a6:5a:62:49:64:8f:97:39:80:a3:10:6f:
95:77:79:68:79:29:b5:c5:68:df:52:3f:42:dd:68:
cd:d1:a0:d5:9a:af:54:16:22:a7:4e:69:aa:b5:9f:
a6:8a:02:13:5a:6d:72:e2:e2:f9:3c:a1:e6:a9:fb:
94:51:50:66:45:10:7f:e3:ee:33:ab:7b:b8:da:bb:
48:6e:d5:b1:d8:17:aa:6b:9f:6e:16:60:11:4d:53:
c8:f5:ba:7b:2c:31:8c:f1:03:7b:37:85:52:d1:5c:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DA:19:EC:04:3F:29:C2:CB:A1:6D:7B:CC:38:F9:16:CB:9B:C1:3F
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:1e:19:4e:47:f7:9a:e0:48:69:b9:04:5f:c2:0d:c6:01:
93:6d:4d:31:36:f1:dc:d2:d6:4c:05:5e:27:4e:cb:60:e6:1d:
92:60:56:55:3a:9c:9a:b6:43:87:45:36:e7:41:ec:e7:b9:65:
cf:bd:b5:bc:19:9e:6d:b1:27:5a:6b:92:84:a1:e8:78:de:d6:
64:df:b9:e0:cd:b7:29:4c:1d:7b:b2:9d:d8:17:17:76:fb:2d:
fe:35:e2:96:51:10:68:2d:be:c3:51:4f:f3:fd:ce:7a:b8:d6:
fe:c5:85:41:e0:92:71:16:79:3b:49:93:6c:cf:f1:e8:89:76:
31:4d:7b:fd:9b:2a:e1:7c:18:31:3b:47:12:04:80:4a:24:bf:
25:ed:a1:2b:35:fd:e9:ac:09:8a:20:90:f9:07:e7:98:fb:89:
7c:53:87:54:e6:38:05:41:b8:4c:b3:84:6b:34:25:09:88:88:
94:57:12:25:3d:53:26:ff:58:ea:cd:12:ed:22:84:54:97:a5:
e0:c5:99:7c:76:60:89:2a:d3:a3:b4:44:9b:f1:0c:21:c6:d4:
40:1d:53:31:ec:6d:d5:2f:d5:45:52:e4:a7:39:52:d1:75:86:
16:eb:ae:ee:2e:f7:29:ff:51:b8:bc:fa:0e:56:58:7c:74:21:
72:c7:21:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFo2VjudK2wFr8IdKn4Thg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3
OTEyNDQwHhcNMjYxMDIzMTMwMDM2WhcNMjYxMDI0MTMwMDM2WjAzMTEwLwYDVQQD
EygyOGRhMTllYzA0M2YyOWMyY2JhMTZkN2JjYzM4ZjkxNmNiOWJjMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qqUBhMTs0/a0WzUBMWMQ5vhHZwB
zi2a8TTs1A69RBu7+ldrEUQoB21BZLSzimVmlBb8QDPFr/PsS9TGQKzrub5qMXwz
SVQQWNKLHsVAwf2azQQglyGzZcmF5T/WPkywmV6y6dnDmzMjCMnscC4RAJF+3orb
nN4mM2pDtmCD0kKHvpmhBq0xML7vWdRr5S+ol8cv0AJxIl+mWmJJZI+XOYCjEG+V
d3loeSm1xWjfUj9C3WjN0aDVmq9UFiKnTmmqtZ+migITWm1y4uL5PKHmqfuUUVBm
RRB/4+4zq3u42rtIbtWx2Beqa59uFmARTVPI9bp7LDGM8QN7N4VS0VyGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjaGewEPynCy6Fte8w4+RbLm8E/MB8GA1UdIwQY
MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt
YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh
LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn8eGU5H
95rgSGm5BF/CDcYBk21NMTbx3NLWTAVeJ07LYOYdkmBWVTqcmrZDh0U250Hs57ll
z721vBmebbEnWmuShKHoeN7WZN+54M23KUwde7Kd2BcXdvst/jXillEQaC2+w1FP
8/3OerjW/sWFQeCScRZ5O0mTbM/x6Il2MU17/Zsq4XwYMTtHEgSASiS/Je2hKzX9
6awJiiCQ+QfnmPuJfFOHVOY4BUG4TLOEazQlCYiIlFcSJT1TJv9Y6s0S7SKEVJel
4MWZfHZgiSrTo7REm/EMIcbUQB1TMext1S/VRVLkpzlS0XWGFuuu7i73Kf9RuLz6
DlZYfHQhcsch9Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 16:42:00 2026 by rpki-client