
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: 5PB98/FCvM/lafJGi2n8WBxnB4jubvhZDFYEQDJa+WQ=
Subject key identifier: 35:6E:38:38:F7:11:38:81:EC:C8:F9:4A:DB:43:69:B7:41:D9:E2:3E
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 0199FDD9D4613525FCD1716E323947F31F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:15 +0000
Manifest this update: Sun 19 Oct 2025 19:02:15 +0000
Manifest next update: Mon 20 Oct 2025 19:02:15 +0000
Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: yevzRJCQWOi8zxVnsyYT94mhcsR4rb1mdGNuBz4Y6SA=)
4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d4:61:35:25:fc:d1:71:6e:32:39:47:f3:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Oct 19 19:02:15 2025 GMT
Not After : Oct 20 19:02:15 2025 GMT
Subject: CN=356e3838f7113881ecc8f94adb4369b741d9e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:6a:11:a0:f4:fc:61:29:c6:b7:45:5d:8b:
e0:7e:2e:19:28:2f:7a:d1:88:be:19:aa:cc:51:b7:
c6:ed:6c:68:c6:d6:7d:77:bb:fa:3a:67:75:4f:68:
8d:73:8f:19:75:5e:5f:d6:34:a4:43:78:02:ba:29:
18:f6:fd:59:e1:12:1b:f2:e8:f0:13:c1:67:db:ab:
da:60:3b:30:be:87:60:2b:63:38:74:13:df:43:9e:
38:24:97:1b:c4:51:6b:d0:bb:56:5f:81:7b:5a:e6:
a8:3d:a9:1d:75:42:51:cb:c5:50:57:cc:74:72:10:
01:cd:4f:58:20:23:8d:02:74:27:89:bf:57:eb:65:
05:57:c0:c5:ed:c6:f1:1f:2c:bf:c3:31:db:20:62:
63:dd:6f:2a:a8:ce:f9:1b:5d:46:e3:ba:a6:86:bd:
1e:46:93:40:30:11:97:f7:60:3a:9d:52:0b:a5:a7:
5a:4b:ff:12:1c:6c:6d:e7:05:5e:a4:57:b7:62:c2:
b9:3a:5b:d7:95:3d:f9:a2:58:8d:a3:25:ac:66:f6:
f5:96:77:55:ab:9f:c3:c0:07:0b:f0:c0:b1:e8:60:
64:e6:f4:46:13:40:ce:61:5b:c6:90:86:60:e8:66:
04:dd:d0:ec:4d:4b:17:7c:8b:14:d2:55:95:e8:aa:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:38:38:F7:11:38:81:EC:C8:F9:4A:DB:43:69:B7:41:D9:E2:3E
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2f:af:00:2c:61:1a:b1:bd:26:ef:17:d6:7c:78:41:63:08:
fa:82:fd:06:e7:0e:cc:40:36:34:27:27:7d:1e:b9:39:68:3d:
73:7c:71:d2:b8:f6:ab:99:0d:85:c9:c8:d8:89:b4:56:64:cd:
68:b4:4b:7c:86:c1:3b:05:6a:05:57:bc:19:86:90:5b:fb:88:
db:9d:9f:bb:58:55:1d:b8:c9:49:ce:cc:8d:d9:66:9c:59:f5:
4a:3c:47:fc:13:7e:9e:00:4e:c1:bd:b9:22:a0:5e:30:ec:ee:
5d:c5:0f:9e:53:02:f5:25:ac:cf:c0:b6:8a:7e:ea:9f:f4:46:
9d:62:af:82:8b:e6:39:33:fe:b4:0f:8f:36:7a:fa:56:aa:65:
d5:60:bd:61:7c:62:b7:2d:11:35:44:d8:3a:04:ea:a2:30:68:
6e:02:9c:78:0d:f4:1d:ab:a8:09:4b:18:cb:a4:a7:7f:38:2e:
c1:57:b8:5b:2b:cb:b0:5c:eb:10:49:d3:d0:43:b6:3e:4b:a7:
85:5d:b2:7d:2d:49:34:44:32:c7:dc:89:a0:78:42:c1:88:81:
9f:e1:b5:40:f2:f3:75:b0:f1:b5:26:95:69:6f:c0:e0:23:cc:
81:7f:ca:70:11:a4:e9:eb:21:65:b0:4b:98:d2:c1:99:ca:4f:
14:75:12:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92dRhNSX80XFuMjlH8x9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk
YjAzYTgwHhcNMjUxMDE5MTkwMjE1WhcNMjUxMDIwMTkwMjE1WjAzMTEwLwYDVQQD
EygzNTZlMzgzOGY3MTEzODgxZWNjOGY5NGFkYjQzNjliNzQxZDllMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8pqEaD0/GEpxrdFXYvgfi4ZKC96
0Yi+GarMUbfG7WxoxtZ9d7v6Omd1T2iNc48ZdV5f1jSkQ3gCuikY9v1Z4RIb8ujw
E8Fn26vaYDswvodgK2M4dBPfQ544JJcbxFFr0LtWX4F7WuaoPakddUJRy8VQV8x0
chABzU9YICONAnQnib9X62UFV8DF7cbxHyy/wzHbIGJj3W8qqM75G11G47qmhr0e
RpNAMBGX92A6nVILpadaS/8SHGxt5wVepFe3YsK5OlvXlT35oliNoyWsZvb1lndV
q5/DwAcL8MCx6GBk5vRGE0DOYVvGkIZg6GYE3dDsTUsXfIsU0lWV6KoDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVuODj3ETiB7Mj5SttDabdB2eI+MB8GA1UdIwQY
MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct
MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh
LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC+vACxh
GrG9Ju8X1nx4QWMI+oL9BucOzEA2NCcnfR65OWg9c3xx0rj2q5kNhcnI2Im0VmTN
aLRLfIbBOwVqBVe8GYaQW/uI252fu1hVHbjJSc7MjdlmnFn1SjxH/BN+ngBOwb25
IqBeMOzuXcUPnlMC9SWsz8C2in7qn/RGnWKvgovmOTP+tA+PNnr6Vqpl1WC9YXxi
ty0RNUTYOgTqojBobgKceA30HauoCUsYy6SnfzguwVe4WyvLsFzrEEnT0EO2Pkun
hV2yfS1JNEQyx9yJoHhCwYiBn+G1QPLzdbDxtSaVaW/A4CPMgX/KcBGk6eshZbBL
mNLBmcpPFHUSZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:34 2025 by rpki-client