Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: igaJ8CRLDjGyFSbRdhRZOp23Wz3o2vYLGj2yOrsk8qI=
Subject key identifier: B2:8C:7D:64:55:3C:74:15:40:5E:6E:22:EB:48:5D:79:9E:BF:0A:07
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01A0D0EDDE59FCECAE11DA6A7FC82A789A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0BDE
Signing time: Thu 24 Sep 2026 01:00:44 +0000
Manifest this update: Thu 24 Sep 2026 01:00:44 +0000
Manifest next update: Fri 25 Sep 2026 01:00:44 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: wFaJd509RW6Tj1ZWdi1Uxg4xP3KOsYtPVPgzqEq2PXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:de:59:fc:ec:ae:11:da:6a:7f:c8:2a:78:9a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Sep 24 01:00:44 2026 GMT
Not After : Sep 25 01:00:44 2026 GMT
Subject: CN=b28c7d64553c7415405e6e22eb485d799ebf0a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:82:30:24:1e:89:34:b1:10:a0:42:3d:21:
25:43:31:c8:d5:c6:6d:2f:d4:1a:c0:b0:71:70:7c:
b9:dd:bd:6e:c2:22:c1:73:77:99:48:d1:86:c7:56:
76:80:37:49:5b:19:6f:40:95:9b:3d:75:90:81:f8:
24:17:56:78:c5:a0:ea:c4:b6:11:ab:cb:63:7b:c5:
7c:9a:ae:47:38:a3:f7:ee:d4:dd:da:f5:22:8e:8f:
be:c8:e9:25:48:e1:63:ab:e1:2c:55:ba:af:d6:01:
ce:6d:17:86:6a:2a:c2:91:9b:ef:f4:ab:fe:46:e8:
b0:dc:c2:f3:f1:c7:4c:8e:e0:fd:bb:ff:90:b6:7f:
38:43:dc:73:b9:a0:3d:62:0c:90:fb:8e:71:e8:45:
1d:4a:27:22:ee:48:0d:5f:a4:74:b8:d2:6a:e3:79:
30:fd:a2:15:a3:83:9a:ab:9c:14:9e:48:83:c6:fa:
e4:ba:72:d4:7c:55:d2:76:ea:df:63:41:2c:93:bb:
4b:5f:1f:2c:08:5a:e7:62:07:75:02:7f:ac:90:32:
0f:26:6e:e5:31:34:92:67:ae:55:67:2d:aa:03:07:
a3:dd:55:0a:b6:f3:ad:84:9f:cf:07:1b:af:6d:0d:
89:d7:66:4a:e8:a8:16:ef:a8:f7:62:2c:68:08:e4:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8C:7D:64:55:3C:74:15:40:5E:6E:22:EB:48:5D:79:9E:BF:0A:07
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:d3:39:09:5f:eb:20:ba:ea:5d:55:de:80:e0:75:d9:c5:
ed:f4:a3:c0:6f:f0:ef:0c:a1:f8:58:80:b8:f8:ed:49:21:8c:
1f:1a:ea:ab:b7:63:c0:0e:fd:77:19:15:3d:23:3b:ea:59:24:
ca:21:7f:39:62:25:7b:14:45:87:6b:29:3d:9f:9b:22:10:19:
84:04:f0:82:df:8a:52:3f:85:6c:d4:56:47:17:1d:8e:0a:57:
2b:9a:75:f5:5b:82:ec:fa:83:34:5d:5b:8e:cb:54:b2:49:a2:
b4:da:e4:69:80:91:59:d0:03:63:d8:4c:e5:28:05:55:af:96:
83:d8:9f:4b:74:19:c2:87:b5:84:d8:1a:6c:d2:44:2e:7f:87:
29:7d:d4:f9:b9:7e:e0:65:c8:45:c3:52:10:63:29:ad:70:c6:
08:e8:25:e8:6f:10:a2:aa:ec:5c:f4:07:cd:47:cd:ec:d8:8f:
56:eb:dc:35:10:ce:a6:e7:11:19:27:80:0f:eb:db:b0:4b:5d:
40:88:25:a0:a1:79:3c:00:20:be:50:f3:47:54:2f:9b:1e:f9:
99:f9:c9:ec:82:3a:57:da:ba:50:7d:7c:f5:4c:f4:fa:c3:05:
6d:fd:9e:56:93:c6:fc:a2:0f:b3:cc:12:fa:5a:9a:af:5f:0f:
60:5d:42:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7d5Z/OyuEdpqf8gqeJpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjYwOTI0MDEwMDQ0WhcNMjYwOTI1MDEwMDQ0WjAzMTEwLwYDVQQD
EyhiMjhjN2Q2NDU1M2M3NDE1NDA1ZTZlMjJlYjQ4NWQ3OTllYmYwYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpSCMCQeiTSxEKBCPSElQzHI1cZt
L9QawLBxcHy53b1uwiLBc3eZSNGGx1Z2gDdJWxlvQJWbPXWQgfgkF1Z4xaDqxLYR
q8tje8V8mq5HOKP37tTd2vUijo++yOklSOFjq+EsVbqv1gHObReGairCkZvv9Kv+
Ruiw3MLz8cdMjuD9u/+Qtn84Q9xzuaA9YgyQ+45x6EUdSici7kgNX6R0uNJq43kw
/aIVo4Oaq5wUnkiDxvrkunLUfFXSdurfY0Esk7tLXx8sCFrnYgd1An+skDIPJm7l
MTSSZ65VZy2qAwej3VUKtvOthJ/PBxuvbQ2J12ZK6KgW76j3YixoCORPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKMfWRVPHQVQF5uIutIXXmevwoHMB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKDTOQlf
6yC66l1V3oDgddnF7fSjwG/w7wyh+FiAuPjtSSGMHxrqq7djwA79dxkVPSM76lkk
yiF/OWIlexRFh2spPZ+bIhAZhATwgt+KUj+FbNRWRxcdjgpXK5p19VuC7PqDNF1b
jstUskmitNrkaYCRWdADY9hM5SgFVa+Wg9ifS3QZwoe1hNgabNJELn+HKX3U+bl+
4GXIRcNSEGMprXDGCOgl6G8QoqrsXPQHzUfN7NiPVuvcNRDOpucRGSeAD+vbsEtd
QIgloKF5PAAgvlDzR1Qvmx75mfnJ7II6V9q6UH189Uz0+sMFbf2eVpPG/KIPs8wS
+lqar18PYF1Cmg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:55:20 2026 by rpki-client