Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: g57JEovyPwRUX4mdi1oasEOJHFReXewQm4HNtwwpk5Q=
Subject key identifier: DB:2B:2C:F5:2C:B2:4D:D9:3D:C8:24:E8:E4:AE:70:11:D3:48:98:0B
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01A0CFDB177B586F47F6ED5011652F07D58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0D60
Signing time: Wed 23 Sep 2026 20:00:37 +0000
Manifest this update: Wed 23 Sep 2026 20:00:37 +0000
Manifest next update: Thu 24 Sep 2026 20:00:37 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: bPfD6K7u1cReD+2QyqpyomvMMa4g99lpjT/MdegaBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:17:7b:58:6f:47:f6:ed:50:11:65:2f:07:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Sep 23 20:00:37 2026 GMT
Not After : Sep 24 20:00:37 2026 GMT
Subject: CN=db2b2cf52cb24dd93dc824e8e4ae7011d348980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:c5:ab:df:33:88:3b:69:91:66:7c:8e:7b:
ab:dc:b1:0b:bd:0f:99:29:b4:12:06:97:f2:4b:fc:
43:fd:92:80:ee:c8:f2:6c:20:b9:3a:10:3c:02:c7:
84:07:4e:ab:4a:8c:77:4d:7c:1e:af:3e:0b:2e:a1:
60:b4:e6:07:31:f8:33:4d:6c:94:09:14:39:9a:19:
17:dd:04:1f:4c:d7:d0:9f:1c:2e:66:56:a5:99:8c:
75:25:4b:36:58:dc:09:ef:5a:9c:e3:1c:fd:5a:e3:
2b:fb:7f:31:66:46:6d:0a:9d:6e:7e:28:02:9b:5c:
cb:56:d5:6a:7d:d7:c4:07:2b:b5:e2:3c:38:d4:1f:
66:66:5c:ff:22:ff:a6:2a:2a:f3:7c:b3:53:eb:7b:
33:8a:21:c0:ca:39:65:5f:0c:3e:31:fc:af:25:65:
81:e2:3c:01:52:84:b0:db:2d:6c:69:8b:c7:6c:52:
d6:39:ad:eb:61:2e:cb:0b:72:e7:dc:b6:2f:0c:a6:
ec:0e:3a:90:ac:74:fb:59:d0:b3:f4:b3:ff:48:6b:
6c:bb:f7:24:d7:6c:18:bd:61:f5:e5:14:2e:18:54:
f6:db:d2:ac:05:88:a5:6e:3f:b2:2d:69:97:c6:3e:
2c:c2:1c:89:21:1a:5a:58:e0:06:cd:b5:64:29:58:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2B:2C:F5:2C:B2:4D:D9:3D:C8:24:E8:E4:AE:70:11:D3:48:98:0B
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d0:e5:34:1d:e0:f1:c8:14:d6:6f:d5:82:45:24:61:f0:8a:
67:c9:03:71:8e:53:5f:99:5c:11:a5:a7:70:33:53:bf:64:e2:
10:dc:75:3e:6d:fa:8a:ae:45:39:f6:ff:d3:6a:02:e1:5c:2f:
6d:be:7b:3d:33:bc:b8:f3:6a:3b:e4:7c:cb:ba:79:d9:bd:95:
66:bb:28:47:b7:04:70:01:12:c3:fe:a0:c6:33:86:3a:e7:ef:
84:16:5a:06:b0:20:89:7f:48:b2:bd:c2:38:fc:c6:0e:c1:c0:
f4:9e:3d:6d:ab:05:08:1b:e7:47:ad:4a:6c:99:37:1a:7c:9b:
7e:91:33:52:43:50:43:5d:5d:1d:65:df:8f:71:57:30:06:e7:
ec:e7:f3:f0:c8:2c:db:d4:41:81:c6:a6:8e:ae:af:76:3b:9c:
3d:47:27:ca:95:48:2b:c8:98:03:68:a6:b4:20:ee:53:5f:48:
05:36:68:9a:51:f1:fc:1f:10:8f:10:05:ae:aa:ea:69:58:9d:
31:44:cf:98:8e:f1:bc:28:7d:27:2f:03:28:22:5c:6d:6f:80:
8c:c3:1c:cb:a6:33:5c:f6:80:1a:51:b2:13:f6:07:63:a7:8c:
9d:46:7a:5b:82:8d:d4:8e:ff:fe:bf:68:4c:91:01:ea:74:4d:
4e:8c:4e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2xd7WG9H9u1QEWUvB9WNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjYwOTIzMjAwMDM3WhcNMjYwOTI0MjAwMDM3WjAzMTEwLwYDVQQD
EyhkYjJiMmNmNTJjYjI0ZGQ5M2RjODI0ZThlNGFlNzAxMWQzNDg5ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDrFq98ziDtpkWZ8jnur3LELvQ+Z
KbQSBpfyS/xD/ZKA7sjybCC5OhA8AseEB06rSox3TXwerz4LLqFgtOYHMfgzTWyU
CRQ5mhkX3QQfTNfQnxwuZlalmYx1JUs2WNwJ71qc4xz9WuMr+38xZkZtCp1ufigC
m1zLVtVqfdfEByu14jw41B9mZlz/Iv+mKirzfLNT63sziiHAyjllXww+MfyvJWWB
4jwBUoSw2y1saYvHbFLWOa3rYS7LC3Ln3LYvDKbsDjqQrHT7WdCz9LP/SGtsu/ck
12wYvWH15RQuGFT229KsBYilbj+yLWmXxj4swhyJIRpaWOAGzbVkKVittQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsrLPUssk3ZPcgk6OSucBHTSJgLMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9DlNB3g
8cgU1m/VgkUkYfCKZ8kDcY5TX5lcEaWncDNTv2TiENx1Pm36iq5FOfb/02oC4Vwv
bb57PTO8uPNqO+R8y7p52b2VZrsoR7cEcAESw/6gxjOGOufvhBZaBrAgiX9Isr3C
OPzGDsHA9J49basFCBvnR61KbJk3GnybfpEzUkNQQ11dHWXfj3FXMAbn7Ofz8Mgs
29RBgcamjq6vdjucPUcnypVIK8iYA2imtCDuU19IBTZomlHx/B8QjxAFrqrqaVid
MUTPmI7xvCh9Jy8DKCJcbW+AjMMcy6YzXPaAGlGyE/YHY6eMnUZ6W4KN1I7//r9o
TJEB6nRNToxOTA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:17 2026 by rpki-client