Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: GxFPFpLMwmHU/0D9izN9b+bYGnCSHLa3ZC/jLZN8tcU=
Subject key identifier: C9:B7:A3:79:3A:C2:C7:03:7A:3A:00:F9:58:1A:3F:BF:78:8E:DB:3C
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01A10AA6FBBB82DCA26B1F07F8A316EA928D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0A30
Signing time: Mon 05 Oct 2026 06:01:17 +0000
Manifest this update: Mon 05 Oct 2026 06:01:17 +0000
Manifest next update: Tue 06 Oct 2026 06:01:17 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: q7MwUgipdRWw+SF+7PKyXV+II6QKt6NTLwtP6F6jvZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a6:fb:bb:82:dc:a2:6b:1f:07:f8:a3:16:ea:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Oct 5 06:01:17 2026 GMT
Not After : Oct 6 06:01:17 2026 GMT
Subject: CN=c9b7a3793ac2c7037a3a00f9581a3fbf788edb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:20:3a:2c:e4:5f:95:21:17:9e:27:8b:bc:
56:1c:d3:d8:e0:da:37:0f:89:13:26:8e:2c:99:9f:
b8:31:16:fa:28:f4:54:ad:4f:ea:31:23:dd:79:1f:
e4:51:ff:85:25:30:e9:cd:bb:98:d9:74:85:53:27:
3e:ba:b6:f9:22:e4:01:fc:c8:7f:3f:1d:85:3f:68:
16:35:be:9c:3a:93:00:ce:03:53:e3:fa:41:57:a4:
8a:02:0f:e6:22:45:45:de:a7:4e:b2:56:3b:d2:94:
f4:b7:fc:db:20:ca:05:78:f2:14:9b:b1:f0:61:6c:
67:da:07:96:2d:d2:d5:2a:35:6f:cf:1d:73:4c:0d:
37:a5:9b:12:31:d5:18:9f:f3:f4:2e:e7:f9:33:ae:
96:5e:b9:03:99:a9:66:d2:5a:06:bb:1e:c2:57:5f:
9e:c0:96:6b:4f:a1:cb:92:a6:e5:7e:5f:3a:35:96:
88:49:3c:3e:a5:b5:4a:16:e2:cb:9f:b9:7e:7a:43:
04:37:54:9d:88:8d:d5:36:30:dc:fe:b7:22:d0:25:
fd:ff:0f:84:2a:bd:88:33:81:be:14:3c:0d:8d:3a:
ca:5e:3c:35:08:41:43:dd:74:a0:73:cc:48:d8:5e:
25:3a:f0:22:f1:fb:18:c8:e3:85:fa:8e:77:b8:49:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:A3:79:3A:C2:C7:03:7A:3A:00:F9:58:1A:3F:BF:78:8E:DB:3C
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6e:e3:5d:63:c4:1a:33:4b:aa:41:0c:a4:bb:7d:65:85:a7:
20:0f:d3:f4:4b:22:bc:04:44:57:7d:4b:58:51:99:86:f9:34:
af:84:a1:0e:10:70:2e:c7:6a:7e:4e:d2:65:e1:5d:9a:5a:72:
f6:6c:35:26:58:cd:5b:ee:4f:ef:73:06:20:98:33:b8:64:cf:
5e:75:0e:bc:b7:8c:de:d9:89:ec:43:ef:3e:15:98:15:1f:98:
35:78:5d:bb:7a:a2:0d:98:51:a8:2f:a0:43:74:ab:34:9d:c7:
46:09:04:68:1b:a5:29:83:fd:56:25:46:47:50:1a:e5:03:2b:
f7:c7:68:26:e1:be:9c:b1:ee:1c:f5:e5:30:61:bf:ad:c5:4e:
f9:56:b6:99:27:95:98:b1:84:36:ea:9c:61:bb:58:4c:51:49:
16:1e:91:03:17:0a:be:b4:8a:61:44:d8:20:05:f2:cb:27:8e:
8b:f1:ea:d7:5d:c8:26:a9:68:96:ba:f4:08:81:71:57:2b:93:
10:19:c5:46:0f:b5:fd:e5:6c:1a:97:a6:2f:94:d7:54:eb:20:
62:1a:d3:3b:a2:c0:3a:2a:a5:a6:9f:d6:3f:9b:4c:7b:ec:2b:
6d:62:d4:a0:6c:2a:15:5f:71:60:77:99:fa:3f:53:e1:54:67:
46:61:98:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKpvu7gtyiax8H+KMW6pKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2
MmFmM2UwHhcNMjYxMDA1MDYwMTE3WhcNMjYxMDA2MDYwMTE3WjAzMTEwLwYDVQQD
EyhjOWI3YTM3OTNhYzJjNzAzN2EzYTAwZjk1ODFhM2ZiZjc4OGVkYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4gOizkX5UhF54ni7xWHNPY4No3
D4kTJo4smZ+4MRb6KPRUrU/qMSPdeR/kUf+FJTDpzbuY2XSFUyc+urb5IuQB/Mh/
Px2FP2gWNb6cOpMAzgNT4/pBV6SKAg/mIkVF3qdOslY70pT0t/zbIMoFePIUm7Hw
YWxn2geWLdLVKjVvzx1zTA03pZsSMdUYn/P0Luf5M66WXrkDmalm0loGux7CV1+e
wJZrT6HLkqblfl86NZaISTw+pbVKFuLLn7l+ekMEN1SdiI3VNjDc/rci0CX9/w+E
Kr2IM4G+FDwNjTrKXjw1CEFD3XSgc8xI2F4lOvAi8fsYyOOF+o53uEkmZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm3o3k6wscDejoA+VgaP794jts8MB8GA1UdIwQY
MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt
OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj
LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm7jXWPE
GjNLqkEMpLt9ZYWnIA/T9EsivAREV31LWFGZhvk0r4ShDhBwLsdqfk7SZeFdmlpy
9mw1JljNW+5P73MGIJgzuGTPXnUOvLeM3tmJ7EPvPhWYFR+YNXhdu3qiDZhRqC+g
Q3SrNJ3HRgkEaBulKYP9ViVGR1Aa5QMr98doJuG+nLHuHPXlMGG/rcVO+Va2mSeV
mLGENuqcYbtYTFFJFh6RAxcKvrSKYUTYIAXyyyeOi/Hq113IJqlolrr0CIFxVyuT
EBnFRg+1/eVsGpemL5TXVOsgYhrTO6LAOiqlpp/WP5tMe+wrbWLUoGwqFV9xYHeZ
+j9T4VRnRmGYBA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:06:49 2026 by rpki-client