Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: PipCVdPSa1JMl5RkPhbDXHPl8WiwuNZg+io8igtCuRQ=
Subject key identifier: C4:15:04:FE:33:BA:6F:63:41:C1:99:31:CD:80:A3:D6:00:1D:B7:BC
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01A1DDCBD698AB9341558A4400A463E52142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 06:01:25 +0000
Manifest this update: Sun 15 Nov 2026 06:01:25 +0000
Manifest next update: Mon 16 Nov 2026 06:01:25 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: 1zjkEvoN+L8mKZ/dV4+8QQiHqzRb8uFsXArBChEzHXk=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d6:98:ab:93:41:55:8a:44:00:a4:63:e5:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Nov 15 06:01:25 2026 GMT
Not After : Nov 16 06:01:25 2026 GMT
Subject: CN=c41504fe33ba6f6341c19931cd80a3d6001db7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:34:11:fc:a4:21:40:a6:1b:ec:bc:25:94:
db:2c:28:95:5f:43:02:16:1e:a6:08:39:b3:3c:92:
ec:2f:fa:a9:5f:94:9b:8e:91:ce:6f:76:40:8f:ae:
0d:8b:e6:a4:72:d4:8b:b8:a1:c0:04:a5:f5:f2:05:
83:fd:46:48:91:aa:55:96:d0:04:62:cd:e5:10:1d:
9f:8e:3c:00:a0:cd:6e:7f:04:c4:ae:e8:24:0a:8a:
85:75:e9:f8:d6:b0:be:06:6f:25:e7:04:af:7f:a4:
ce:6a:61:ec:c9:74:cd:5d:f8:96:8d:fe:86:ac:36:
9c:cb:25:1e:2b:32:3a:dd:b0:e9:68:f9:6f:10:5b:
05:7f:af:08:c9:68:6c:e1:c4:11:8b:c5:dc:bc:76:
54:c0:59:75:55:62:28:2b:9b:24:c8:f6:e3:64:ce:
4d:e0:4e:21:f3:c0:1f:3d:46:2f:80:b0:3c:06:13:
ba:76:ce:5e:f7:e3:4e:75:1a:02:55:f1:05:b6:91:
4e:ad:9c:5a:96:fc:c8:a2:76:2a:b9:12:0d:dc:ef:
5b:61:23:5c:3f:fb:7b:ad:6c:1e:0b:69:bb:90:2b:
5a:95:08:aa:1e:ce:aa:49:7f:07:fc:30:df:e3:a9:
2a:6d:15:b0:16:2c:4c:86:d9:c0:7b:40:61:41:ba:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:04:FE:33:BA:6F:63:41:C1:99:31:CD:80:A3:D6:00:1D:B7:BC
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:0b:6a:3f:13:ef:cf:37:85:86:c1:a7:cc:b9:1f:9d:65:
b1:92:6f:23:69:5f:90:75:09:9d:df:5e:67:58:a1:a5:3b:3b:
55:08:5e:20:92:66:39:b1:54:8e:f5:cd:da:8f:35:ae:bd:7a:
9c:e3:2e:11:fd:60:b5:42:1a:2a:d7:f4:ee:6a:c9:6a:c4:c7:
ee:06:59:40:f5:90:aa:15:b9:cf:2c:c0:dd:90:dc:d7:97:a4:
61:dc:7d:55:f2:72:8a:d0:ad:40:63:c1:7e:69:ae:5b:58:f3:
82:bc:16:af:b8:a3:ca:32:52:11:56:f6:35:6c:d9:b5:7f:87:
72:b1:8f:78:be:3f:7a:6d:c6:d8:9b:8a:f5:d5:ca:71:f9:b2:
27:e0:ff:8d:23:72:04:a0:ea:6a:7d:95:b1:c3:82:77:80:60:
6d:f8:dc:b8:90:d2:a5:bb:dd:bd:25:df:a4:0f:83:72:ca:c8:
37:60:13:1d:31:66:1b:31:17:cc:55:7e:0b:d4:e5:2d:73:6f:
18:5d:72:97:b3:9e:3e:0c:40:e3:9b:d6:e2:02:6c:e2:d2:d2:
1e:e2:46:f2:d7:c4:6a:f0:77:56:6e:9f:38:82:f5:9a:ab:ee:
5c:6d:87:14:75:29:71:2f:da:4a:87:4b:16:31:01:8b:09:67:
03:19:ec:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy9aYq5NBVYpEAKRj5SFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy
M2ViZTcwHhcNMjYxMTE1MDYwMTI1WhcNMjYxMTE2MDYwMTI1WjAzMTEwLwYDVQQD
EyhjNDE1MDRmZTMzYmE2ZjYzNDFjMTk5MzFjZDgwYTNkNjAwMWRiN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSU0EfykIUCmG+y8JZTbLCiVX0MC
Fh6mCDmzPJLsL/qpX5SbjpHOb3ZAj64Ni+akctSLuKHABKX18gWD/UZIkapVltAE
Ys3lEB2fjjwAoM1ufwTErugkCoqFden41rC+Bm8l5wSvf6TOamHsyXTNXfiWjf6G
rDacyyUeKzI63bDpaPlvEFsFf68IyWhs4cQRi8XcvHZUwFl1VWIoK5skyPbjZM5N
4E4h88AfPUYvgLA8BhO6ds5e9+NOdRoCVfEFtpFOrZxalvzIonYquRIN3O9bYSNc
P/t7rWweC2m7kCtalQiqHs6qSX8H/DDf46kqbRWwFixMhtnAe0BhQbpfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQVBP4zum9jQcGZMc2Ao9YAHbe8MB8GA1UdIwQY
MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt
ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj
LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3ALaj8T
7883hYbBp8y5H51lsZJvI2lfkHUJnd9eZ1ihpTs7VQheIJJmObFUjvXN2o81rr16
nOMuEf1gtUIaKtf07mrJasTH7gZZQPWQqhW5zyzA3ZDc15ekYdx9VfJyitCtQGPB
fmmuW1jzgrwWr7ijyjJSEVb2NWzZtX+HcrGPeL4/em3G2JuK9dXKcfmyJ+D/jSNy
BKDqan2VscOCd4BgbfjcuJDSpbvdvSXfpA+DcsrIN2ATHTFmGzEXzFV+C9TlLXNv
GF1yl7OePgxA45vW4gJs4tLSHuJG8tfEavB3Vm6fOIL1mqvuXG2HFHUpcS/aSodL
FjEBiwlnAxnsmQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:08:49 2026 by rpki-client