Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: 4PA2O9yAmOf0n4aKAhCP15HCyb/t1ToSTxNu/1eke0o=
Subject key identifier: 85:E8:C2:5C:F7:78:8B:52:90:D7:2F:9E:E2:DE:5A:B1:00:B1:67:01
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01A0D0489938975572042DA33AC68506D8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 14E3
Signing time: Wed 23 Sep 2026 22:00:13 +0000
Manifest this update: Wed 23 Sep 2026 22:00:13 +0000
Manifest next update: Thu 24 Sep 2026 22:00:13 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: r8H9wOWpClygKuTU8jERU/01AqE95T+LIbHlBsU0GsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:99:38:97:55:72:04:2d:a3:3a:c6:85:06:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Sep 23 22:00:13 2026 GMT
Not After : Sep 24 22:00:13 2026 GMT
Subject: CN=85e8c25cf7788b5290d72f9ee2de5ab100b16701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:85:86:a5:cb:75:24:df:ec:5a:1f:fa:17:
b9:11:a2:78:1e:ee:48:64:74:69:70:05:de:de:ff:
34:05:b7:ac:73:d5:09:4e:27:c0:44:00:23:db:3f:
ce:f7:6c:ac:02:bd:6f:80:2e:c2:db:cd:3b:ad:36:
79:c5:9d:d3:43:f7:cd:23:7a:53:72:b3:ee:66:31:
d9:9b:68:6d:6d:2d:5c:83:39:cb:b6:55:88:e5:45:
81:00:bb:b6:a5:07:ff:44:6d:c3:05:13:9e:56:ac:
b0:e6:c0:04:f6:8c:bd:b8:1f:83:12:ca:bd:96:1d:
35:61:24:8a:94:20:7d:f5:5d:70:37:6e:f4:13:70:
8f:de:79:c1:6d:dd:8b:b3:67:53:ea:99:51:96:af:
c9:23:bc:32:73:61:fc:11:28:be:4c:61:46:43:cb:
b9:d6:e4:05:a8:19:b0:e9:18:8b:c3:d6:71:98:f1:
27:1d:e7:b4:4d:65:eb:34:31:aa:94:70:49:8b:7c:
1f:ac:39:a8:d3:f7:c7:49:ec:8d:b3:10:b8:ab:68:
a4:a0:b8:16:52:ef:f2:0d:78:e8:cf:35:54:90:b4:
71:fd:1a:16:f6:4d:7a:ba:2b:0f:75:3f:f5:3d:68:
ad:e3:74:cc:4c:dd:8e:ea:7c:d6:39:12:a9:c2:f9:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:C2:5C:F7:78:8B:52:90:D7:2F:9E:E2:DE:5A:B1:00:B1:67:01
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:63:ee:f0:94:de:ad:eb:05:fc:27:2e:07:c8:da:51:6a:
2f:a7:fd:e0:36:c7:6b:25:6d:ec:df:35:d9:37:d5:17:0a:35:
6f:91:75:b2:82:b7:fb:ee:6f:1c:92:04:9d:81:53:10:3a:6e:
9f:c5:71:34:77:5a:2e:bb:94:b5:bc:27:fe:5b:d2:e6:d4:cc:
56:94:73:b9:3c:c4:90:81:2a:76:52:37:89:9f:ff:c4:2e:75:
f2:37:98:dc:e4:c5:f2:8d:f1:2c:42:1b:2a:b9:3f:fe:e8:ab:
b8:4e:87:8a:11:6d:c4:de:9f:d6:1a:b2:cb:eb:7d:56:b9:4f:
59:62:15:f3:93:da:8d:a7:4b:2e:bf:c5:b8:90:78:58:40:01:
22:be:2d:96:ea:ab:62:31:1d:07:0a:ae:06:af:1a:de:90:12:
a3:6b:ea:1e:cb:59:4a:ae:43:46:b2:ea:1a:99:68:24:2e:2c:
73:52:06:74:c3:43:0b:94:b7:5f:c2:c7:70:99:41:5e:b6:8c:
53:e3:db:8f:25:48:99:40:6c:3c:a6:96:f5:de:fb:e4:d0:ab:
76:36:74:f1:6e:bf:1e:6a:ce:00:ef:ae:96:e6:2b:d0:0e:d3:
6c:b2:15:0f:b3:f1:d7:9c:ca:e9:b0:8d:ec:4f:19:2e:bd:51:
60:04:59:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSJk4l1VyBC2jOsaFBtiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjYwOTIzMjIwMDEzWhcNMjYwOTI0MjIwMDEzWjAzMTEwLwYDVQQD
Eyg4NWU4YzI1Y2Y3Nzg4YjUyOTBkNzJmOWVlMmRlNWFiMTAwYjE2NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HeFhqXLdSTf7Fof+he5EaJ4Hu5I
ZHRpcAXe3v80Bbesc9UJTifARAAj2z/O92ysAr1vgC7C2807rTZ5xZ3TQ/fNI3pT
crPuZjHZm2htbS1cgznLtlWI5UWBALu2pQf/RG3DBROeVqyw5sAE9oy9uB+DEsq9
lh01YSSKlCB99V1wN270E3CP3nnBbd2Ls2dT6plRlq/JI7wyc2H8ESi+TGFGQ8u5
1uQFqBmw6RiLw9ZxmPEnHee0TWXrNDGqlHBJi3wfrDmo0/fHSeyNsxC4q2ikoLgW
Uu/yDXjozzVUkLRx/RoW9k16uisPdT/1PWit43TMTN2O6nzWORKpwvnuxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXowlz3eItSkNcvnuLeWrEAsWcBMB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/pj7vCU
3q3rBfwnLgfI2lFqL6f94DbHayVt7N812TfVFwo1b5F1soK3++5vHJIEnYFTEDpu
n8VxNHdaLruUtbwn/lvS5tTMVpRzuTzEkIEqdlI3iZ//xC518jeY3OTF8o3xLEIb
Krk//uiruE6HihFtxN6f1hqyy+t9VrlPWWIV85PajadLLr/FuJB4WEABIr4tluqr
YjEdBwquBq8a3pASo2vqHstZSq5DRrLqGploJC4sc1IGdMNDC5S3X8LHcJlBXraM
U+PbjyVImUBsPKaW9d775NCrdjZ08W6/HmrOAO+uluYr0A7TbLIVD7Px15zK6bCN
7E8ZLr1RYARZ4Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:14:00 2026 by rpki-client