Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: zpwxKKfFPM8VSfvcw1KYnlVcc4xY6UzUXsXhT7r2u8w=
Subject key identifier: E4:78:29:93:F2:4D:C4:80:77:CE:C2:A4:46:3E:7B:D9:91:D8:06:96
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 01A0D2DEA4C293E1389BFD0283A740543A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: D8
Signing time: Thu 24 Sep 2026 10:03:21 +0000
Manifest this update: Thu 24 Sep 2026 10:03:21 +0000
Manifest next update: Fri 25 Sep 2026 10:03:21 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: qD0P3fco/mCLd0/8VwNFysj6itQHSmVKSGla3usaqjw=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:a4:c2:93:e1:38:9b:fd:02:83:a7:40:54:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Sep 24 10:03:21 2026 GMT
Not After : Sep 25 10:03:21 2026 GMT
Subject: CN=e4782993f24dc48077cec2a4463e7bd991d80696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:90:08:4a:61:0f:c1:c3:00:b8:d9:a9:ad:
a5:1b:a9:6a:f6:50:d5:3a:11:bb:4a:ea:e2:e8:be:
c7:df:4d:d2:0f:a1:5d:82:86:98:88:26:03:fd:81:
6a:48:7a:6e:77:7b:d3:0e:2d:5a:37:42:ff:61:a4:
da:89:db:82:02:2e:fe:eb:df:0a:29:c2:96:2c:d4:
64:48:16:be:56:ee:19:46:1d:ed:61:8a:2d:78:5e:
d2:d1:59:7e:b9:45:4d:4b:30:09:9a:fa:c2:f8:f1:
46:27:03:b4:2d:62:14:ca:e6:87:b4:6f:ec:3b:9a:
16:74:19:cf:3a:a7:e2:e8:ce:fa:1a:cf:79:55:bb:
a4:bf:6d:4a:06:90:f5:a6:1f:8a:7d:16:38:62:84:
a1:f0:4a:03:83:44:21:7b:97:d9:82:17:b4:85:5a:
8e:46:9a:c3:92:c2:a4:55:e2:cc:00:fa:26:33:59:
8c:39:0d:24:19:f0:09:14:b7:24:1d:0b:b0:14:14:
41:f8:a5:92:3b:3e:7a:01:0e:f6:ae:b8:98:79:c9:
a0:18:8d:85:3d:e5:02:e4:73:3b:4d:66:21:e6:a0:
77:17:c0:56:33:54:a2:64:92:6a:9e:10:c3:a9:4b:
30:a6:ad:91:bf:a8:cb:53:16:b0:6e:ec:b9:e9:2a:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:29:93:F2:4D:C4:80:77:CE:C2:A4:46:3E:7B:D9:91:D8:06:96
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:35:09:6c:1b:27:15:70:1f:7e:90:ca:52:73:c9:cb:08:fd:
7e:4f:de:e1:3a:db:66:d0:43:39:a6:01:af:aa:8b:d5:71:63:
6b:74:62:a8:e1:87:e2:61:82:2d:b5:08:4e:1c:d4:17:8e:70:
e0:46:85:2d:91:18:ad:44:43:6a:ac:69:88:24:8e:4e:62:93:
db:73:d3:d5:de:81:ea:2d:ce:f4:f2:6f:df:b1:ec:4b:67:ef:
44:e6:32:36:af:ec:2e:2d:da:f7:3e:4b:55:a1:3c:ef:ce:b3:
54:62:54:a4:c0:b7:5f:7b:ec:89:67:f3:1c:4d:8e:17:68:73:
5e:a9:3e:0b:6a:6b:7c:1d:20:97:17:1b:bf:c6:44:c2:3d:d8:
9d:03:b4:f0:7e:9b:c9:70:6f:09:d3:55:e7:2b:5e:f6:21:83:
90:c6:1f:48:8a:61:ec:8e:87:cd:2d:b1:e2:ff:e6:3c:11:35:
13:a6:88:3c:c9:64:77:01:f7:6c:4f:0a:9d:84:a4:e7:da:32:
d0:a7:84:e2:8f:5b:93:db:7f:4a:dd:aa:e3:3b:4d:e4:52:9a:
eb:3b:f9:23:6f:da:a8:1b:de:7f:02:10:06:7e:6c:4c:c5:cf:
41:b0:b0:9d:fc:b2:30:09:e3:a3:c9:be:64:b1:eb:9a:e0:da:
80:08:a0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3qTCk+E4m/0Cg6dAVDpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE1NTdhMjBkMzI5OTYxM2M3MDJlOTk5M2U5ZDU5YzM5
YjQ3MDgwHhcNMjYwOTI0MTAwMzIxWhcNMjYwOTI1MTAwMzIxWjAzMTEwLwYDVQQD
EyhlNDc4Mjk5M2YyNGRjNDgwNzdjZWMyYTQ0NjNlN2JkOTkxZDgwNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnyQCEphD8HDALjZqa2lG6lq9lDV
OhG7Suri6L7H303SD6FdgoaYiCYD/YFqSHpud3vTDi1aN0L/YaTaiduCAi7+698K
KcKWLNRkSBa+Vu4ZRh3tYYoteF7S0Vl+uUVNSzAJmvrC+PFGJwO0LWIUyuaHtG/s
O5oWdBnPOqfi6M76Gs95Vbukv21KBpD1ph+KfRY4YoSh8EoDg0Qhe5fZghe0hVqO
RprDksKkVeLMAPomM1mMOQ0kGfAJFLckHQuwFBRB+KWSOz56AQ72rriYecmgGI2F
PeUC5HM7TWYh5qB3F8BWM1SiZJJqnhDDqUswpq2Rv6jLUxawbuy56SoC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR4KZPyTcSAd87CpEY+e9mR2AaWMB8GA1UdIwQY
MBaAFNGRVXog0ymWE8cC6Zk+nVnDm0cIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80MzljYjctNGEzNi00MjVlLWEwODQt
ZGNmOGFlOTI0OTkzLzEvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80MzljYjctNGEzNi00MjVlLWEwODQtZGNmOGFlOTI0OTkz
LzEvMFpGVmVpRFRLWllUeHdMcG1UNmRXY09iUndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozUJbBsn
FXAffpDKUnPJywj9fk/e4TrbZtBDOaYBr6qL1XFja3RiqOGH4mGCLbUIThzUF45w
4EaFLZEYrURDaqxpiCSOTmKT23PT1d6B6i3O9PJv37HsS2fvROYyNq/sLi3a9z5L
VaE8786zVGJUpMC3X3vsiWfzHE2OF2hzXqk+C2prfB0glxcbv8ZEwj3YnQO08H6b
yXBvCdNV5yte9iGDkMYfSIph7I6HzS2x4v/mPBE1E6aIPMlkdwH3bE8KnYSk59oy
0KeE4o9bk9t/St2q4ztN5FKa6zv5I2/aqBvefwIQBn5sTMXPQbCwnfyyMAnjo8m+
ZLHrmuDagAig8g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:46 2026 by rpki-client