Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: zRerRdw4iEHnGyi2lirMJ/p6yZXuXxC2XAAs7tfoI4s=
Subject key identifier: 5F:18:72:64:C3:40:E4:D1:6C:57:87:8F:B6:1D:C0:24:70:D0:87:E4
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 01A1DBA646F55E2F535CC218CF175B1FB9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 20:01:09 +0000
Manifest this update: Sat 14 Nov 2026 20:01:09 +0000
Manifest next update: Sun 15 Nov 2026 20:01:09 +0000
Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: iTlQFrPrbSbEB4hQc5hlOpiCW9uToZ/tt32Xz3PpCbQ=)
4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:46:f5:5e:2f:53:5c:c2:18:cf:17:5b:1f:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Nov 14 20:01:09 2026 GMT
Not After : Nov 15 20:01:09 2026 GMT
Subject: CN=5f187264c340e4d16c57878fb61dc02470d087e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:50:56:87:b3:c8:d2:5d:73:5a:cd:f0:67:
35:09:ca:1b:c5:88:98:5a:a4:d1:ac:c1:98:aa:9a:
6a:dd:91:c0:f2:8c:5d:43:4b:82:71:32:bf:c4:41:
12:bd:e8:c9:09:52:80:0c:02:6d:98:40:fb:a3:6b:
fc:59:6b:ab:ad:e7:1b:b7:09:52:5f:ea:5f:01:4b:
cd:23:54:c4:09:17:ce:1f:7d:44:29:2b:82:d0:84:
21:fe:37:e5:ff:e4:ae:f3:f2:6d:f1:6b:8a:ee:8b:
f4:f4:e5:8d:2f:40:06:6f:ff:2c:bc:bb:b9:d5:8d:
76:87:cc:45:a3:88:cb:50:89:c2:16:7c:64:21:e3:
38:1c:c9:d6:17:9a:96:02:2a:d0:ef:4b:31:25:d1:
12:4e:fd:bd:3f:7b:ee:af:63:bd:e0:38:b5:61:f0:
c2:0b:75:26:1b:9e:b7:96:db:16:42:b7:5f:ec:7e:
a3:25:b9:5a:46:84:e2:2c:f4:8a:33:16:fe:d6:9f:
04:51:8c:43:66:b1:7e:0e:d8:fb:78:62:20:64:a8:
5f:4a:94:1d:81:29:a1:93:0f:19:96:25:ff:9c:a5:
73:d5:11:34:4e:25:20:64:57:67:c9:61:ba:c8:5d:
4b:5b:99:25:41:24:17:70:3b:7c:b2:f1:91:fe:ad:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:18:72:64:C3:40:E4:D1:6C:57:87:8F:B6:1D:C0:24:70:D0:87:E4
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:00:25:14:ff:84:60:00:42:1a:b6:de:98:4a:07:48:7e:61:
cf:29:78:98:1c:90:b5:21:dc:3d:da:bc:be:a1:cf:c0:ab:8c:
2f:ba:a6:e5:53:52:e6:4d:ae:ab:c6:e4:b2:93:47:e0:8a:92:
2f:71:34:ac:12:01:c9:f9:ec:8a:8a:80:59:ae:df:db:73:c1:
f2:90:3a:b9:53:e5:d0:e4:54:71:70:03:b2:4e:20:be:6b:3c:
56:f6:60:82:d0:22:f5:45:c9:39:aa:0c:87:00:f9:5a:dc:1c:
86:67:92:47:83:a1:5f:1f:1b:e8:b5:6f:37:a7:ff:d1:55:f4:
26:0f:70:aa:8e:28:e4:61:36:e0:b8:db:9b:28:e3:ad:7f:d6:
ff:d5:84:d3:16:9b:0d:63:68:78:0b:5b:2d:bd:f1:12:21:91:
90:55:19:7c:62:68:ca:8b:37:89:22:79:4f:d3:cb:23:26:2a:
e7:e1:8a:9a:ae:c8:57:60:9f:1e:1f:fc:e7:91:0d:ca:a1:ce:
15:2a:11:9f:88:41:2d:fb:87:42:d1:21:c1:b0:b7:ef:6b:6a:
d4:88:50:6c:ab:ba:e6:60:46:11:eb:87:21:49:8f:e2:6d:87:
92:7b:49:59:73:6b:df:09:54:f2:bc:a7:c0:15:73:d1:5d:81:
8f:e1:62:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbpkb1Xi9TXMIYzxdbH7njMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjYxMTE0MjAwMTA5WhcNMjYxMTE1MjAwMTA5WjAzMTEwLwYDVQQD
Eyg1ZjE4NzI2NGMzNDBlNGQxNmM1Nzg3OGZiNjFkYzAyNDcwZDA4N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg9QVoezyNJdc1rN8Gc1CcobxYiY
WqTRrMGYqppq3ZHA8oxdQ0uCcTK/xEESvejJCVKADAJtmED7o2v8WWurrecbtwlS
X+pfAUvNI1TECRfOH31EKSuC0IQh/jfl/+Su8/Jt8WuK7ov09OWNL0AGb/8svLu5
1Y12h8xFo4jLUInCFnxkIeM4HMnWF5qWAirQ70sxJdESTv29P3vur2O94Di1YfDC
C3UmG563ltsWQrdf7H6jJblaRoTiLPSKMxb+1p8EUYxDZrF+Dtj7eGIgZKhfSpQd
gSmhkw8ZliX/nKVz1RE0TiUgZFdnyWG6yF1LW5klQSQXcDt8svGR/q3N4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8YcmTDQOTRbFeHj7YdwCRw0IfkMB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAAlFP+E
YABCGrbemEoHSH5hzyl4mByQtSHcPdq8vqHPwKuML7qm5VNS5k2uq8bkspNH4IqS
L3E0rBIByfnsioqAWa7f23PB8pA6uVPl0ORUcXADsk4gvms8VvZggtAi9UXJOaoM
hwD5WtwchmeSR4OhXx8b6LVvN6f/0VX0Jg9wqo4o5GE24LjbmyjjrX/W/9WE0xab
DWNoeAtbLb3xEiGRkFUZfGJoyos3iSJ5T9PLIyYq5+GKmq7IV2CfHh/855ENyqHO
FSoRn4hBLfuHQtEhwbC372tq1IhQbKu65mBGEeuHIUmP4m2HkntJWXNr3wlU8ryn
wBVz0V2Bj+FijQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:23 2026 by rpki-client