Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: xiRlZJvbFc1BFb9S68AigySb4TtQ26JLmFw+Sy70BJk=
Subject key identifier: 26:6F:B4:68:2B:B7:B8:CB:61:8B:ED:5A:B8:7D:F5:AE:B2:D8:E2:E5
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01A02168274DBD27E6BBB9773BA702138B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0833
Signing time: Thu 20 Aug 2026 23:01:08 +0000
Manifest this update: Thu 20 Aug 2026 23:01:08 +0000
Manifest next update: Fri 21 Aug 2026 23:01:08 +0000
Files and hashes: 1: hS5Y9HzX910k9UpkCXgXK-DSHdc.asa (hash: 3kQjrGqXqHnzL6l9Be46QjhfSNn8qYwPe+6rsfQM6lE=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: WtPvVZoe7Y0fE4xW7uM/XBVzHoq9BQZln2dKGG8B3cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:68:27:4d:bd:27:e6:bb:b9:77:3b:a7:02:13:8b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Aug 20 23:01:08 2026 GMT
Not After : Aug 21 23:01:08 2026 GMT
Subject: CN=266fb4682bb7b8cb618bed5ab87df5aeb2d8e2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:ea:6e:83:1f:f5:36:f3:6f:3a:c3:b9:12:
09:fd:7b:2c:18:a4:07:13:d8:4c:98:94:93:25:a1:
c7:92:a1:d2:b5:bd:b8:f8:c9:30:b6:0d:29:26:49:
69:6e:f2:77:b3:97:8d:98:4d:eb:d1:4a:c2:02:83:
8b:31:22:43:cf:e0:87:e5:8d:d2:f1:82:f6:05:62:
96:de:be:bf:ac:e0:a5:f1:19:aa:5d:5c:79:b0:66:
0a:e2:ba:0a:0e:9d:1d:3a:b9:12:13:7b:e0:a0:4d:
f6:7a:11:9d:87:d9:e7:73:0e:3c:53:a9:3b:ff:6e:
db:e0:80:68:dc:85:a3:cf:24:10:64:e7:a1:a1:c5:
d8:b5:91:c9:98:8d:4b:01:60:63:ab:4f:d0:ed:3f:
ff:d3:16:02:e3:84:92:34:0c:e5:8f:a9:da:9f:1b:
03:f1:41:48:b1:06:4c:53:c1:cd:a2:01:07:f3:be:
0b:a4:06:e7:83:b0:d0:61:28:d8:c4:70:17:6b:19:
45:c7:01:b2:21:c3:84:42:25:da:38:3d:b9:80:11:
12:e7:71:16:1c:20:96:a4:d4:83:a1:ad:aa:89:b9:
c2:ed:ff:c6:f5:eb:b7:ef:4b:18:70:d9:6b:b1:43:
80:74:ca:13:b6:37:da:7f:63:2f:6b:5b:9a:07:18:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:B4:68:2B:B7:B8:CB:61:8B:ED:5A:B8:7D:F5:AE:B2:D8:E2:E5
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cc:a7:e7:cd:34:93:fc:3d:fa:a3:49:e2:37:1c:a6:f3:09:
46:15:73:ec:0e:93:f4:4d:61:e7:e3:0b:32:66:83:3e:a0:86:
f8:55:62:60:ac:2e:54:38:65:c6:0f:30:34:ae:fd:5f:8d:f6:
dd:00:32:75:fb:39:e1:40:ac:2d:d9:7a:1b:b0:98:9f:56:7f:
57:d5:02:c0:00:3b:30:8f:41:c3:30:d4:0f:48:5b:f5:71:b2:
a7:37:90:aa:a5:bc:b8:95:f1:a2:4f:8e:d1:da:41:a2:8c:85:
e9:2b:9c:1d:c5:f1:b4:24:99:e0:8c:ac:d2:c9:a9:0f:db:db:
6d:55:fb:c0:f4:f2:d5:b0:36:d8:05:36:bc:20:be:eb:92:65:
0b:f7:a1:76:a1:cb:62:36:b9:c2:c7:3d:60:29:35:7c:bb:dd:
ed:74:bd:39:f0:0f:ef:34:c5:5c:3c:6f:6a:d0:9d:50:d6:b4:
e2:5d:07:da:20:35:7e:72:62:50:56:6d:5e:6e:e8:ce:80:70:
13:03:d6:37:11:2f:e6:ff:12:36:71:8e:51:7f:0b:ec:e1:61:
9f:27:6b:5d:58:3d:58:ca:dc:77:b6:d6:30:b6:71:7f:15:d5:
20:96:1e:8c:03:de:1f:17:29:51:17:22:8f:6f:21:4f:79:0a:
ec:f9:93:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAhaCdNvSfmu7l3O6cCE4sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjYwODIwMjMwMTA4WhcNMjYwODIxMjMwMTA4WjAzMTEwLwYDVQQD
EygyNjZmYjQ2ODJiYjdiOGNiNjE4YmVkNWFiODdkZjVhZWIyZDhlMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8jqboMf9TbzbzrDuRIJ/XssGKQH
E9hMmJSTJaHHkqHStb24+Mkwtg0pJklpbvJ3s5eNmE3r0UrCAoOLMSJDz+CH5Y3S
8YL2BWKW3r6/rOCl8RmqXVx5sGYK4roKDp0dOrkSE3vgoE32ehGdh9nncw48U6k7
/27b4IBo3IWjzyQQZOehocXYtZHJmI1LAWBjq0/Q7T//0xYC44SSNAzlj6nanxsD
8UFIsQZMU8HNogEH874LpAbng7DQYSjYxHAXaxlFxwGyIcOEQiXaOD25gBES53EW
HCCWpNSDoa2qibnC7f/G9eu370sYcNlrsUOAdMoTtjfaf2Mva1uaBxjOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZvtGgrt7jLYYvtWrh99a6y2OLlMB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcyn5800
k/w9+qNJ4jccpvMJRhVz7A6T9E1h5+MLMmaDPqCG+FViYKwuVDhlxg8wNK79X432
3QAydfs54UCsLdl6G7CYn1Z/V9UCwAA7MI9BwzDUD0hb9XGypzeQqqW8uJXxok+O
0dpBooyF6SucHcXxtCSZ4Iys0smpD9vbbVX7wPTy1bA22AU2vCC+65JlC/ehdqHL
Yja5wsc9YCk1fLvd7XS9OfAP7zTFXDxvatCdUNa04l0H2iA1fnJiUFZtXm7ozoBw
EwPWNxEv5v8SNnGOUX8L7OFhnydrXVg9WMrcd7bWMLZxfxXVIJYejAPeHxcpURci
j28hT3kK7PmTrQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:20 2026 by rpki-client