Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: AL0jZKdx6Vo5xmUlBISBLWr9/05ffb6P3kbibpJ7L9w=
Subject key identifier: 55:85:22:FC:D8:59:82:9D:6B:57:5A:65:52:D4:07:41:48:C5:9D:83
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 01A0C9A1ED79174F9E27F466EC4BFA7FDAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 051E
Signing time: Tue 22 Sep 2026 15:00:27 +0000
Manifest this update: Tue 22 Sep 2026 15:00:27 +0000
Manifest next update: Wed 23 Sep 2026 15:00:27 +0000
Files and hashes: 1: 4khbVFEEtELbVKjdX-EOY4D-84o.asa (hash: jJbuP4gphJUD/kkuEq/w+9/whek2vyfSwhJa4fmVm8Y=)
2: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
3: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
4: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: 7lUaAGyccgMXEWInmoAb/aSrQA84UOkJnEfxELRFn4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:ed:79:17:4f:9e:27:f4:66:ec:4b:fa:7f:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Sep 22 15:00:27 2026 GMT
Not After : Sep 23 15:00:27 2026 GMT
Subject: CN=558522fcd859829d6b575a6552d4074148c59d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:74:df:e4:c8:3d:77:47:43:d9:36:61:e4:
04:d4:38:c6:c3:67:8f:78:d8:d9:68:40:a6:31:eb:
49:28:d3:50:3b:9e:2d:10:8c:70:62:ac:f2:83:af:
69:91:89:58:d6:41:06:11:9a:08:09:4e:60:ed:fa:
35:b0:f1:4c:c5:16:f5:fd:54:a5:0d:8d:16:6c:8a:
b3:e5:72:14:9e:24:ad:3a:02:be:69:0f:22:c6:c7:
43:e9:f4:ec:a6:a8:15:20:11:12:e1:60:62:d4:43:
53:87:e5:49:8e:79:ab:65:41:2f:cf:48:13:61:21:
4e:8c:3e:ff:dc:a2:09:03:c5:86:68:ae:be:60:80:
41:41:b1:46:be:82:8b:f1:62:ab:1d:13:3b:5b:67:
86:ff:00:ae:3d:c7:f3:66:f8:b6:68:d1:63:ab:30:
0a:5f:42:e4:3d:f7:c5:3f:c7:5f:b1:20:bc:cf:4d:
60:04:c8:44:92:ef:96:46:ec:da:fe:35:eb:f6:27:
48:2c:0b:16:2b:87:f9:3d:dc:d5:56:01:d4:a3:f2:
ab:a3:f2:1d:71:78:b0:5d:ee:8a:d5:7f:9c:cd:8b:
f2:1c:16:cd:e9:12:c5:a8:21:62:b8:6a:2d:b8:ef:
dc:a2:8b:84:d4:db:d4:7b:ef:cd:e0:d9:07:09:e1:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:22:FC:D8:59:82:9D:6B:57:5A:65:52:D4:07:41:48:C5:9D:83
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:00:7a:eb:70:7d:9e:ab:18:62:18:7c:f1:cb:2a:a6:6f:
93:1d:2f:9e:e8:78:fe:37:b9:78:53:ac:03:a7:f7:d0:0e:f8:
bd:32:c4:29:ab:af:50:c9:e8:8a:a4:96:fe:3f:d6:7b:9c:4a:
f1:0d:d0:e6:2d:a3:14:de:d2:57:29:73:e4:75:12:9d:0a:a6:
a6:41:4e:49:67:e7:d3:c9:fa:17:be:7f:9f:f0:f8:70:6e:51:
5f:c9:06:c0:5e:e0:2a:47:11:f4:be:57:42:6f:2b:ae:2b:bf:
91:eb:cc:0b:0d:b9:69:59:54:28:b8:3f:4a:43:e5:8d:31:7f:
9d:b3:a3:d5:cc:54:a7:8e:54:93:3e:d6:0b:b0:6a:2e:f6:e4:
f9:f5:d5:59:45:ff:b0:27:00:3d:72:48:60:a8:2e:97:47:f2:
66:b7:2d:a3:b5:fc:c9:55:86:9f:c4:77:3d:aa:e9:2c:27:32:
ee:ef:4b:81:e2:c2:e1:3a:78:ab:8b:44:31:73:3c:48:2c:c4:
ef:41:81:bf:6f:0b:b0:b6:8e:07:f8:3f:49:2d:9a:ca:10:15:
94:3c:6a:72:56:a0:64:f7:97:0b:7b:38:ff:2c:f6:f8:ee:e7:
82:c2:43:3a:8e:8c:02:5b:ec:54:07:9f:dd:03:29:ac:51:d8:
f6:42:ad:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoe15F0+eJ/Rm7Ev6f9rhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDA5MzIxNzJhYTJkMWM3N2M0YmI5ODM3MGFhYjNkZTZh
YzM0NTcwHhcNMjYwOTIyMTUwMDI3WhcNMjYwOTIzMTUwMDI3WjAzMTEwLwYDVQQD
Eyg1NTg1MjJmY2Q4NTk4MjlkNmI1NzVhNjU1MmQ0MDc0MTQ4YzU5ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVt03+TIPXdHQ9k2YeQE1DjGw2eP
eNjZaECmMetJKNNQO54tEIxwYqzyg69pkYlY1kEGEZoICU5g7fo1sPFMxRb1/VSl
DY0WbIqz5XIUniStOgK+aQ8ixsdD6fTspqgVIBES4WBi1ENTh+VJjnmrZUEvz0gT
YSFOjD7/3KIJA8WGaK6+YIBBQbFGvoKL8WKrHRM7W2eG/wCuPcfzZvi2aNFjqzAK
X0LkPffFP8dfsSC8z01gBMhEku+WRuza/jXr9idILAsWK4f5PdzVVgHUo/Kro/Id
cXiwXe6K1X+czYvyHBbN6RLFqCFiuGotuO/coouE1NvUe+/N4NkHCeGCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWFIvzYWYKda1daZVLUB0FIxZ2DMB8GA1UdIwQY
MBaAFGXQkyFyqi0cd8S7mDcKqz3mrDRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMt
MWVkZGU2YzlkOTZhLzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMtMWVkZGU2YzlkOTZh
LzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk8Aeutw
fZ6rGGIYfPHLKqZvkx0vnuh4/je5eFOsA6f30A74vTLEKauvUMnoiqSW/j/We5xK
8Q3Q5i2jFN7SVylz5HUSnQqmpkFOSWfn08n6F75/n/D4cG5RX8kGwF7gKkcR9L5X
Qm8rriu/kevMCw25aVlUKLg/SkPljTF/nbOj1cxUp45Ukz7WC7BqLvbk+fXVWUX/
sCcAPXJIYKgul0fyZrcto7X8yVWGn8R3ParpLCcy7u9LgeLC4Tp4q4tEMXM8SCzE
70GBv28LsLaOB/g/SS2ayhAVlDxqclagZPeXC3s4/yz2+O7ngsJDOo6MAlvsVAef
3QMprFHY9kKttw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:33:40 2026 by rpki-client