Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: kUryvJ5uANvKIRlt70IbO76szLToqtz9ebs0zf6r/+4=
Subject key identifier: C8:FD:B2:DD:3E:09:AD:F5:36:CE:C2:CF:8D:1A:5B:99:FF:F4:69:C7
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01A0D4CB06C29A24DE58D41BB107666321BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:01:10 +0000
Manifest this update: Thu 24 Sep 2026 19:01:10 +0000
Manifest next update: Fri 25 Sep 2026 19:01:10 +0000
Files and hashes: 1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: mt0mKbpJnCeYlDbKroQ7twrSsXqtD/POZxIttcd1Fxc=)
5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:06:c2:9a:24:de:58:d4:1b:b1:07:66:63:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Sep 24 19:01:10 2026 GMT
Not After : Sep 25 19:01:10 2026 GMT
Subject: CN=c8fdb2dd3e09adf536cec2cf8d1a5b99fff469c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:6b:f8:fd:51:ad:bb:60:33:7f:f3:aa:e1:
d4:c9:05:27:81:37:8e:b7:99:3e:6e:fa:52:49:d1:
e3:2a:70:a1:7c:4a:a1:c4:b1:66:82:54:18:f3:3a:
01:29:c2:40:6b:f2:31:47:10:c8:dd:72:6b:80:24:
6f:b9:46:5b:52:b1:55:00:9f:0a:50:64:65:c1:7f:
d1:8d:ff:f3:03:27:8d:1d:3a:7b:4f:7f:92:3e:a0:
13:7b:34:1c:1c:b5:5e:65:39:e7:e2:ee:4f:d4:74:
d6:81:8d:c9:15:db:1a:dc:13:e6:c5:7a:30:61:cb:
82:d2:e0:6b:7a:d6:5a:f5:1c:e9:1f:2f:d5:0f:ac:
f3:f1:a3:f0:64:ce:d1:9c:9b:7a:d2:e6:5c:df:4c:
62:35:ea:00:e4:d6:b4:e7:d6:e6:51:b1:9b:9f:87:
6d:b6:a1:4a:1e:9a:13:ca:8a:ff:8f:1c:59:4e:b4:
79:6e:c5:98:c9:f6:1c:7b:72:9f:1a:9f:3e:76:77:
05:72:81:43:f7:b7:54:e9:84:9f:da:e0:92:7b:50:
6b:f7:22:b9:c5:72:d0:62:56:7f:9f:91:c5:2d:9d:
9b:d7:44:b9:91:1a:63:22:58:a3:ea:49:86:85:ab:
99:01:88:a2:35:16:a5:21:30:4c:cd:12:1f:62:48:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:B2:DD:3E:09:AD:F5:36:CE:C2:CF:8D:1A:5B:99:FF:F4:69:C7
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8c:c2:f5:f7:5f:c4:1b:82:f0:b2:de:ff:09:1e:1e:7d:26:
46:66:ce:b8:7b:67:46:e1:fc:85:72:39:e5:fd:b5:1f:4a:f6:
44:db:11:62:9e:be:c4:d9:cd:94:3a:f4:ac:b4:42:46:4f:1e:
25:57:70:c9:6f:b2:00:dc:af:8b:75:fb:ec:93:36:60:20:83:
b6:5e:32:db:65:bc:16:ff:07:fd:16:4c:a1:27:28:4b:6e:a5:
c2:ce:28:7e:de:53:08:3f:90:c2:6e:3e:f1:6a:75:05:cb:ae:
9f:62:17:6f:92:c4:55:e6:42:2b:79:40:8a:2d:11:cc:30:b1:
47:75:4b:26:5e:a7:e6:15:3d:aa:fd:8b:22:f8:c9:34:96:b6:
c5:fb:25:72:5d:64:73:2f:d2:6e:69:bb:50:cc:e4:5c:1e:8d:
68:e6:dd:23:cf:be:f7:20:ed:c9:73:c0:f6:27:60:89:7a:42:
9b:77:c9:ac:3b:60:84:c3:1e:e9:08:44:ff:58:7e:3e:21:ff:
ce:6e:d0:d5:b3:29:60:92:73:37:f2:2a:4d:37:5d:f1:ea:cc:
f7:a0:5e:9a:40:9d:ee:8c:0c:72:1d:1b:08:51:f6:45:c5:36:
8b:67:5d:b2:c8:6b:f1:4b:f1:ca:bf:8a:92:9a:60:2f:e8:17:
ca:29:53:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUywbCmiTeWNQbsQdmYyG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk
YjAzYTgwHhcNMjYwOTI0MTkwMTEwWhcNMjYwOTI1MTkwMTEwWjAzMTEwLwYDVQQD
EyhjOGZkYjJkZDNlMDlhZGY1MzZjZWMyY2Y4ZDFhNWI5OWZmZjQ2OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV1r+P1RrbtgM3/zquHUyQUngTeO
t5k+bvpSSdHjKnChfEqhxLFmglQY8zoBKcJAa/IxRxDI3XJrgCRvuUZbUrFVAJ8K
UGRlwX/Rjf/zAyeNHTp7T3+SPqATezQcHLVeZTnn4u5P1HTWgY3JFdsa3BPmxXow
YcuC0uBretZa9RzpHy/VD6zz8aPwZM7RnJt60uZc30xiNeoA5Na059bmUbGbn4dt
tqFKHpoTyor/jxxZTrR5bsWYyfYce3KfGp8+dncFcoFD97dU6YSf2uCSe1Br9yK5
xXLQYlZ/n5HFLZ2b10S5kRpjIlij6kmGhauZAYiiNRalITBMzRIfYkiK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj9st0+Ca31Ns7Cz40aW5n/9GnHMB8GA1UdIwQY
MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct
MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh
LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIzC9fdf
xBuC8LLe/wkeHn0mRmbOuHtnRuH8hXI55f21H0r2RNsRYp6+xNnNlDr0rLRCRk8e
JVdwyW+yANyvi3X77JM2YCCDtl4y22W8Fv8H/RZMoScoS26lws4oft5TCD+Qwm4+
8Wp1Bcuun2IXb5LEVeZCK3lAii0RzDCxR3VLJl6n5hU9qv2LIvjJNJa2xfslcl1k
cy/Sbmm7UMzkXB6NaObdI8++9yDtyXPA9idgiXpCm3fJrDtghMMe6QhE/1h+PiH/
zm7Q1bMpYJJzN/IqTTdd8erM96BemkCd7owMch0bCFH2RcU2i2ddsshr8Uvxyr+K
kppgL+gXyilT6w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:32 2026 by rpki-client