Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: yFVszKiVJ1yGM4Yf0IpLZj++ycObjuuIZeK//8qeTbM=
Subject key identifier: E3:20:5A:46:03:17:47:6C:EC:51:38:56:11:94:9A:E1:37:3D:40:B7
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 01A112298D125FD8EF5BCDEB3259E3C0427C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1A21
Signing time: Tue 06 Oct 2026 17:01:15 +0000
Manifest this update: Tue 06 Oct 2026 17:01:15 +0000
Manifest next update: Wed 07 Oct 2026 17:01:15 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: bZtaG77JTnxKQzCUO2toCVROi1WihKUXlOSlS3YCffI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:8d:12:5f:d8:ef:5b:cd:eb:32:59:e3:c0:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Oct 6 17:01:15 2026 GMT
Not After : Oct 7 17:01:15 2026 GMT
Subject: CN=e3205a460317476cec51385611949ae1373d40b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:98:e1:03:68:a7:ee:8f:18:cd:31:11:59:
7d:a0:af:d6:be:55:60:ca:a9:96:8a:3e:94:19:e4:
b5:09:11:42:58:bf:48:db:48:e0:a2:b2:76:b3:c3:
b0:4b:2d:f4:6d:91:65:ca:78:6b:9d:22:4a:94:46:
22:4b:a7:63:76:42:c6:c7:07:7b:a4:a9:85:0a:07:
9d:a4:42:a6:8f:67:bc:16:73:99:1f:cf:24:9b:dc:
0f:c2:34:86:55:e1:e6:39:8a:c4:db:4f:fc:17:97:
43:ee:94:50:ec:a6:eb:1c:8a:85:8c:c0:2c:ad:8d:
71:1e:9d:89:e8:6a:df:0e:15:b9:7d:17:9f:95:a2:
04:48:fc:e3:b9:e2:b9:40:42:aa:a1:9c:ec:02:bb:
57:d0:ce:58:89:d3:89:e6:22:38:af:f6:52:a7:61:
d7:eb:f5:69:55:0b:40:11:a9:20:00:53:2a:4f:96:
0d:69:5b:9f:e1:f9:2d:89:e2:21:7b:98:f5:18:40:
fe:6c:0e:d3:5e:79:b9:d0:ac:15:4b:91:28:b6:79:
f2:5f:d4:46:98:07:b9:a8:93:13:ad:23:28:27:27:
b4:fb:13:50:26:07:de:7f:d6:b6:8b:ac:25:61:17:
55:34:4b:b3:cb:66:cf:b8:65:d7:eb:19:2a:3d:5f:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:5A:46:03:17:47:6C:EC:51:38:56:11:94:9A:E1:37:3D:40:B7
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:e5:ed:58:16:c1:86:21:c1:ac:a5:8b:20:c1:76:70:f6:
58:65:9b:8d:e9:ca:10:ae:4c:de:e5:2e:4f:1b:f8:5a:6a:17:
31:26:66:f1:20:d4:0a:b4:1f:96:e1:f8:aa:4e:40:ca:71:a4:
4b:0d:80:85:79:e9:8b:36:24:83:64:88:41:1a:f9:10:73:46:
30:a6:88:30:cf:20:85:61:63:2c:70:01:0f:6d:87:c3:8f:df:
8e:95:5a:b4:2e:b2:39:60:4b:46:42:60:7c:92:89:9d:0d:f8:
f6:45:b0:1b:bc:62:19:5f:91:a2:fd:ff:03:fb:67:13:1f:11:
b5:72:ef:8b:61:2d:07:ce:32:b2:42:e3:9b:56:77:10:39:e6:
68:75:7b:5b:24:1a:00:80:00:08:c3:7d:a9:5f:db:df:26:2a:
f5:13:f2:4e:79:1e:6d:4c:01:2d:14:56:b4:84:f6:27:9c:19:
72:03:b4:56:77:58:2e:f2:72:4a:fc:00:71:0c:ef:1a:50:b6:
9f:6e:db:3c:cc:f6:be:5b:48:7c:0a:dd:f7:32:a9:92:c8:ba:
5d:ac:8c:38:4d:1a:2e:f7:ac:80:7c:ad:5f:14:c5:81:01:48:
d8:65:65:ec:9b:8c:19:54:64:05:c7:fc:12:31:73:59:eb:1f:
11:f4:d1:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESKY0SX9jvW83rMlnjwEJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh
MDhjZGYwHhcNMjYxMDA2MTcwMTE1WhcNMjYxMDA3MTcwMTE1WjAzMTEwLwYDVQQD
EyhlMzIwNWE0NjAzMTc0NzZjZWM1MTM4NTYxMTk0OWFlMTM3M2Q0MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTCY4QNop+6PGM0xEVl9oK/WvlVg
yqmWij6UGeS1CRFCWL9I20jgorJ2s8OwSy30bZFlynhrnSJKlEYiS6djdkLGxwd7
pKmFCgedpEKmj2e8FnOZH88km9wPwjSGVeHmOYrE20/8F5dD7pRQ7KbrHIqFjMAs
rY1xHp2J6GrfDhW5fReflaIESPzjueK5QEKqoZzsArtX0M5YidOJ5iI4r/ZSp2HX
6/VpVQtAEakgAFMqT5YNaVuf4fktieIhe5j1GED+bA7TXnm50KwVS5EotnnyX9RG
mAe5qJMTrSMoJye0+xNQJgfef9a2i6wlYRdVNEuzy2bPuGXX6xkqPV9zfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMgWkYDF0ds7FE4VhGUmuE3PUC3MB8GA1UdIwQY
MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt
NzhkMTE0NGFkOTY3LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3
LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ83l7VgW
wYYhwayliyDBdnD2WGWbjenKEK5M3uUuTxv4WmoXMSZm8SDUCrQfluH4qk5AynGk
Sw2AhXnpizYkg2SIQRr5EHNGMKaIMM8ghWFjLHABD22Hw4/fjpVatC6yOWBLRkJg
fJKJnQ349kWwG7xiGV+Rov3/A/tnEx8RtXLvi2EtB84yskLjm1Z3EDnmaHV7WyQa
AIAACMN9qV/b3yYq9RPyTnkebUwBLRRWtIT2J5wZcgO0VndYLvJySvwAcQzvGlC2
n27bPMz2vltIfArd9zKpksi6XayMOE0aLvesgHytXxTFgQFI2GVl7JuMGVRkBcf8
EjFzWesfEfTRlw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:34 2026 by rpki-client