Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier: at3v+tDL16VF4jt8n5du1oG5cg7DG2E/dTt2xihys/g=
Subject key identifier: EC:72:C7:3F:95:5F:58:59:3E:37:E2:37:5B:26:4E:4C:01:03:23:C3
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 01A10ADE7D1F8D74703ECCDFC400B5C610FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number: 1A8E
Signing time: Mon 05 Oct 2026 07:01:55 +0000
Manifest this update: Mon 05 Oct 2026 07:01:55 +0000
Manifest next update: Tue 06 Oct 2026 07:01:55 +0000
Files and hashes: 1: 5qgROKxHOicoj6aXRRzKoWhQEys.roa (hash: cbdLbf/a0AVWeV/g7UhTY6JncYkBe68DrZLAHz3ibQE=)
2: D0wGS-yddeO0xfMmRUxbHkj9wmQ.roa (hash: 1GkR1ZZ4k8rO+nd6oDot6saKoU0S85i7RRYtoQ2NVC8=)
3: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (hash: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w=)
4: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (hash: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc=)
5: hXDlG2G0xbowy6t6EZnHJ70Ehao.roa (hash: 3IDUKM+58lF7xSd9cxW6Agkn2PnQGt/z8nVFt8JreYU=)
6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: ssPYan/fPS4IjrhGux4VQgKZoSND7FVYl45SS++7AWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:de:7d:1f:8d:74:70:3e:cc:df:c4:00:b5:c6:10:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Oct 5 07:01:55 2026 GMT
Not After : Oct 6 07:01:55 2026 GMT
Subject: CN=ec72c73f955f58593e37e2375b264e4c010323c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:8e:cc:c4:3c:82:99:c9:37:65:f7:cd:66:
0a:98:79:04:59:55:25:91:43:6a:4a:78:bd:47:ab:
7a:0a:b9:06:ed:31:53:ed:71:0c:48:db:c3:c9:5d:
44:bc:b2:1d:e0:98:a9:bf:16:15:15:b6:00:29:d2:
a6:e6:7a:34:12:6b:a2:42:45:9e:f6:ef:03:dc:81:
af:2c:5d:51:92:ce:e3:86:12:a7:67:82:42:a7:d7:
7c:e2:28:33:fe:da:ad:86:cb:59:26:bd:34:c7:c2:
48:02:b7:e3:fc:63:29:51:68:d7:22:12:c5:e3:90:
78:84:62:1d:c4:bf:e0:e0:76:a6:86:4a:62:82:07:
c9:75:2e:15:7e:b4:61:66:3a:87:e6:f5:eb:96:2f:
99:69:3e:b8:ff:04:af:46:4d:31:a0:ef:39:31:1d:
e0:5d:c8:ca:d3:fe:27:17:3b:e7:34:db:b9:67:9c:
96:60:75:ff:a0:f4:0e:a1:20:5e:db:a9:c0:93:aa:
29:32:82:9b:71:0e:c2:d4:28:0a:76:63:2f:d6:f2:
13:cd:b7:35:d7:25:3e:97:77:c7:c0:30:5a:f2:c4:
ab:d5:01:e8:a0:97:15:64:35:da:94:42:ae:51:95:
b6:a6:f7:20:b4:c8:d0:8f:5d:55:55:39:61:99:51:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:C7:3F:95:5F:58:59:3E:37:E2:37:5B:26:4E:4C:01:03:23:C3
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:47:22:81:47:87:86:63:9e:22:f5:f6:bc:40:e5:6a:a9:
24:35:20:29:87:cb:4b:00:a3:67:02:e6:9f:3c:f3:15:f7:f7:
b7:67:eb:46:cd:46:74:36:e0:07:c5:ee:16:5d:25:59:f6:e1:
32:50:6b:40:ba:cc:b8:57:31:af:a7:d5:a3:60:a3:a3:4f:66:
41:bc:a6:e4:fc:33:74:e8:51:b8:bf:a4:b8:0f:52:a9:9b:b4:
f6:c2:a9:14:81:dd:ac:ed:ec:68:cf:03:8c:1c:5b:9f:3c:bc:
78:65:f6:b2:5e:a2:69:80:ab:9e:2b:b8:18:99:9d:b6:d7:fe:
99:ff:8b:6f:40:7e:55:85:6a:de:29:ca:c7:45:82:6d:1b:75:
17:10:39:a0:52:fa:06:77:de:e6:6e:12:1c:6c:c1:84:2e:3e:
74:67:b1:53:f5:9e:68:61:c1:be:16:c7:a9:a2:48:49:65:79:
ab:8f:81:fc:c3:91:d1:75:1e:cc:64:2f:05:b8:b8:8d:7e:d3:
24:dc:85:40:dd:7c:e9:0e:ff:cb:54:3a:14:e5:91:10:7e:03:
1a:15:ca:28:c8:22:f2:c6:12:ad:90:40:43:e5:87:4b:4b:2a:
3c:fb:cb:c0:7b:1f:46:15:d9:42:c2:02:3a:6d:34:e3:20:50:
d1:74:7f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEK3n0fjXRwPszfxAC1xhD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi
MDAxOTQwHhcNMjYxMDA1MDcwMTU1WhcNMjYxMDA2MDcwMTU1WjAzMTEwLwYDVQQD
EyhlYzcyYzczZjk1NWY1ODU5M2UzN2UyMzc1YjI2NGU0YzAxMDMyM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3mOzMQ8gpnJN2X3zWYKmHkEWVUl
kUNqSni9R6t6CrkG7TFT7XEMSNvDyV1EvLId4JipvxYVFbYAKdKm5no0EmuiQkWe
9u8D3IGvLF1Rks7jhhKnZ4JCp9d84igz/tqthstZJr00x8JIArfj/GMpUWjXIhLF
45B4hGIdxL/g4HamhkpiggfJdS4VfrRhZjqH5vXrli+ZaT64/wSvRk0xoO85MR3g
XcjK0/4nFzvnNNu5Z5yWYHX/oPQOoSBe26nAk6opMoKbcQ7C1CgKdmMv1vITzbc1
1yU+l3fHwDBa8sSr1QHooJcVZDXalEKuUZW2pvcgtMjQj11VVTlhmVHrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxyxz+VX1hZPjfiN1smTkwBAyPDMB8GA1UdIwQY
MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt
ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw
LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcpHIoFH
h4ZjniL19rxA5WqpJDUgKYfLSwCjZwLmnzzzFff3t2frRs1GdDbgB8XuFl0lWfbh
MlBrQLrMuFcxr6fVo2Cjo09mQbym5PwzdOhRuL+kuA9SqZu09sKpFIHdrO3saM8D
jBxbnzy8eGX2sl6iaYCrniu4GJmdttf+mf+Lb0B+VYVq3inKx0WCbRt1FxA5oFL6
Bnfe5m4SHGzBhC4+dGexU/WeaGHBvhbHqaJISWV5q4+B/MOR0XUezGQvBbi4jX7T
JNyFQN186Q7/y1Q6FOWREH4DGhXKKMgi8sYSrZBAQ+WHS0sqPPvLwHsfRhXZQsIC
Om004yBQ0XR/WA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:33:10 2026 by rpki-client