Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 54Lp3fvonjzm7dIK4XpzX09pnUxC7jXPA6lwEWKthU0=
Subject key identifier: 84:8B:6C:D4:E2:F1:78:84:18:54:1F:36:F2:C0:77:FC:BD:3C:B7:7B
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 01A0EBF9CB4168437BEA044F8AD19F0D3C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 07D1
Signing time: Tue 29 Sep 2026 07:03:31 +0000
Manifest this update: Tue 29 Sep 2026 07:03:31 +0000
Manifest next update: Wed 30 Sep 2026 07:03:31 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: WyDxC4k04Rp9ZVANME5SXYnTKYxMEm+CmkWIdHWG8VY=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:cb:41:68:43:7b:ea:04:4f:8a:d1:9f:0d:3c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Sep 29 07:03:31 2026 GMT
Not After : Sep 30 07:03:31 2026 GMT
Subject: CN=848b6cd4e2f1788418541f36f2c077fcbd3cb77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:0f:cf:ee:8f:da:48:61:28:ee:42:45:a8:
96:c7:18:d4:87:fd:1b:35:79:01:88:be:78:1b:30:
ba:0a:4b:20:69:91:8b:40:83:f1:7d:1e:d1:b6:38:
99:c0:69:a3:bc:40:6f:c8:7e:ff:f8:e6:17:e7:b3:
de:ac:b0:0c:3a:14:fd:ae:1e:00:7f:31:26:e0:ba:
8d:d3:9e:9d:c7:86:eb:90:bc:d4:de:90:6c:c4:a5:
06:ca:d1:7e:b3:a8:fe:54:d9:60:70:4f:55:b7:2b:
86:0c:db:94:8c:a7:4c:19:d9:14:d0:7e:59:43:cd:
e2:35:08:6c:85:b4:75:20:4e:b3:92:88:e1:f5:a3:
c2:b9:f8:13:05:c8:07:4b:e6:de:e2:54:18:32:7c:
a2:61:d2:ab:18:21:a7:2c:6a:0f:81:2e:4f:59:6d:
ca:b9:29:22:c0:9f:fc:10:19:11:ea:af:c9:67:f2:
54:41:94:c5:d8:98:d0:52:09:ce:bd:03:11:7c:1e:
e2:6d:44:e5:9d:50:e4:a1:5d:ee:e1:e0:1b:91:f2:
1d:1e:e2:ed:c7:8f:41:b5:9c:56:cc:63:0c:b6:5c:
5e:f1:93:27:6a:ff:eb:52:25:6e:44:06:ca:d1:51:
ce:ab:ac:af:b3:8c:61:32:9d:a7:72:8e:fc:c9:76:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:6C:D4:E2:F1:78:84:18:54:1F:36:F2:C0:77:FC:BD:3C:B7:7B
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:34:ba:b0:6e:3c:a4:f0:b1:31:e4:d5:79:7e:5e:2d:2a:c8:
2f:80:37:fa:db:06:f7:10:0e:85:30:91:36:6d:18:72:4d:0d:
22:7a:22:7e:93:71:ed:0b:b1:52:f2:43:47:9c:cd:50:1f:bb:
04:0f:38:fa:ae:c2:58:0a:8b:1f:19:ae:48:69:b0:31:a3:7b:
33:68:f6:ae:72:ec:8d:c1:75:e6:47:ac:3b:f4:31:46:da:b1:
db:3f:cb:20:03:47:bd:17:9e:04:78:36:c5:31:d7:98:b3:05:
35:f9:04:7e:82:69:dc:8b:e1:18:cf:f6:51:6a:80:cd:ee:be:
43:5c:63:61:58:e3:f1:58:32:2e:0d:62:2a:8e:4a:3f:76:48:
6c:b5:d3:fc:7f:3c:a9:7a:51:d7:ca:cf:ad:0c:f5:d8:fa:83:
b7:6f:20:0e:a5:92:19:f0:9e:4f:75:26:86:72:31:84:bf:d2:
a2:24:ac:70:b0:38:6a:be:93:82:cf:5a:58:5b:f6:95:7e:da:
eb:30:78:f2:7e:5e:5d:43:99:b6:ff:06:83:d6:da:ac:48:a4:
23:20:af:f9:8b:da:0f:fe:7e:36:f6:ad:1f:ac:75:36:ef:93:
0d:dd:f3:7e:39:e1:45:58:8e:3e:49:84:a5:14:4d:92:9f:68:
46:31:8f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDr+ctBaEN76gRPitGfDTwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0
ZDhlN2IwHhcNMjYwOTI5MDcwMzMxWhcNMjYwOTMwMDcwMzMxWjAzMTEwLwYDVQQD
Eyg4NDhiNmNkNGUyZjE3ODg0MTg1NDFmMzZmMmMwNzdmY2JkM2NiNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgPz+6P2khhKO5CRaiWxxjUh/0b
NXkBiL54GzC6CksgaZGLQIPxfR7RtjiZwGmjvEBvyH7/+OYX57PerLAMOhT9rh4A
fzEm4LqN056dx4brkLzU3pBsxKUGytF+s6j+VNlgcE9VtyuGDNuUjKdMGdkU0H5Z
Q83iNQhshbR1IE6zkojh9aPCufgTBcgHS+be4lQYMnyiYdKrGCGnLGoPgS5PWW3K
uSkiwJ/8EBkR6q/JZ/JUQZTF2JjQUgnOvQMRfB7ibUTlnVDkoV3u4eAbkfIdHuLt
x49BtZxWzGMMtlxe8ZMnav/rUiVuRAbK0VHOq6yvs4xhMp2nco78yXbJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISLbNTi8XiEGFQfNvLAd/y9PLd7MB8GA1UdIwQY
MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt
MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx
LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzS6sG48
pPCxMeTVeX5eLSrIL4A3+tsG9xAOhTCRNm0Yck0NInoifpNx7QuxUvJDR5zNUB+7
BA84+q7CWAqLHxmuSGmwMaN7M2j2rnLsjcF15kesO/QxRtqx2z/LIANHvReeBHg2
xTHXmLMFNfkEfoJp3IvhGM/2UWqAze6+Q1xjYVjj8VgyLg1iKo5KP3ZIbLXT/H88
qXpR18rPrQz12PqDt28gDqWSGfCeT3UmhnIxhL/SoiSscLA4ar6Tgs9aWFv2lX7a
6zB48n5eXUOZtv8Gg9barEikIyCv+YvaD/5+NvatH6x1Nu+TDd3zfjnhRViOPkmE
pRRNkp9oRjGPKg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:38:13 2026 by rpki-client