Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: Z48SNknH4kONBWOPCVSydsd7jnzCQ99JPtISO+vByuU=
Subject key identifier: 3C:67:F2:0F:82:7F:57:51:86:9F:0C:F4:30:22:EB:CC:99:07:B1:ED
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 01A0D614DDCBD299CBED5C6DB658740C2DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 1288
Signing time: Fri 25 Sep 2026 01:01:26 +0000
Manifest this update: Fri 25 Sep 2026 01:01:26 +0000
Manifest next update: Sat 26 Sep 2026 01:01:26 +0000
Files and hashes: 1: 690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa (hash: PpmrZ0y4OmHYRlFtG+Q32uLuVImrpYxd2geJcOWhBFs=)
2: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
3: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: bCEGbtbLXWeX+uzZkzMQtQ6wtUTh/rCWA1Z+EZm6ND8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:dd:cb:d2:99:cb:ed:5c:6d:b6:58:74:0c:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Sep 25 01:01:26 2026 GMT
Not After : Sep 26 01:01:26 2026 GMT
Subject: CN=3c67f20f827f5751869f0cf43022ebcc9907b1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:ae:03:4e:5a:43:4e:97:43:61:bd:6c:0b:
9f:b2:b4:dd:c0:32:f6:61:b4:54:07:6e:5a:b4:4f:
61:61:f6:dd:ee:8f:98:cd:81:c3:55:fc:27:ac:34:
aa:f0:80:36:7c:f8:5a:d6:2c:db:fd:c3:15:c1:d8:
9a:37:94:87:63:3f:f7:69:9b:9c:6c:43:8f:94:75:
f1:41:2a:57:38:7d:d9:42:3b:46:a9:6b:22:ea:8c:
5b:2d:a5:66:e4:f0:1e:68:49:85:f7:a4:55:cf:d3:
76:37:d6:1d:a1:97:50:d8:c7:1a:eb:95:3d:fc:59:
86:8e:06:d1:b9:d6:98:9c:9c:eb:1b:f7:0c:de:4f:
b2:01:14:c5:9a:7d:34:68:c9:60:a6:fb:15:c0:2f:
14:86:d6:b8:de:da:eb:7b:78:f9:46:c6:56:1a:d6:
b0:2a:01:f9:36:60:4f:6b:a8:1f:7f:84:7f:4c:8b:
c6:d2:d3:c9:da:74:5e:8c:74:31:d8:9b:3f:b9:e1:
b0:23:be:14:f3:a9:9a:dc:f6:5f:cc:ff:eb:c5:44:
50:b4:36:fa:83:f6:67:df:38:5c:dc:8e:85:7c:d1:
ea:c7:9e:b7:03:6c:56:c0:b3:ba:2f:b2:c1:b6:26:
d5:26:fe:61:ca:a0:f0:bf:85:21:dc:13:45:b4:03:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:F2:0F:82:7F:57:51:86:9F:0C:F4:30:22:EB:CC:99:07:B1:ED
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:05:f3:10:2d:99:b4:5c:a2:5d:16:cd:27:e7:04:b2:6b:
bb:99:4c:28:3d:4d:ef:f0:88:ab:e4:6b:a4:6f:d0:3e:0e:14:
e8:44:eb:77:48:a5:78:41:22:a2:56:49:7e:3d:bd:86:67:19:
19:e7:37:9f:18:14:39:e0:f3:45:ac:35:0e:bb:4b:bd:b2:cd:
e0:b0:b2:8f:ed:78:89:a8:90:f7:91:e6:33:c3:29:ab:f7:36:
24:23:0d:22:01:54:2c:c2:e6:99:df:57:e4:35:47:39:9c:98:
78:a4:b9:0a:19:7a:c9:7f:6a:d2:80:06:ab:50:e4:63:ea:d6:
4e:e8:92:aa:66:1b:da:b3:4e:ec:38:8b:4b:55:36:67:0d:1d:
2e:2d:dd:e4:94:9a:d8:c7:57:bb:67:0f:57:54:e0:e5:00:76:
6e:9e:88:5d:13:44:95:0a:fe:f9:ba:34:af:bc:69:96:e6:15:
bc:ea:6f:10:87:2a:50:03:b4:84:01:de:4b:22:bf:d4:71:da:
98:2e:e2:b1:7e:cc:7a:b1:6c:88:d3:79:3c:82:1b:9a:3b:dc:
71:b6:c8:91:ac:7a:b4:d7:42:38:78:5e:05:4d:36:8f:5a:53:
50:0b:29:02:13:55:f8:c6:ad:6c:ed:08:98:d0:c3:bf:ae:bd:
bf:58:83:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFN3L0pnL7Vxttlh0DC3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjYwOTI1MDEwMTI2WhcNMjYwOTI2MDEwMTI2WjAzMTEwLwYDVQQD
EygzYzY3ZjIwZjgyN2Y1NzUxODY5ZjBjZjQzMDIyZWJjYzk5MDdiMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MeuA05aQ06XQ2G9bAufsrTdwDL2
YbRUB25atE9hYfbd7o+YzYHDVfwnrDSq8IA2fPha1izb/cMVwdiaN5SHYz/3aZuc
bEOPlHXxQSpXOH3ZQjtGqWsi6oxbLaVm5PAeaEmF96RVz9N2N9YdoZdQ2Mca65U9
/FmGjgbRudaYnJzrG/cM3k+yARTFmn00aMlgpvsVwC8Uhta43trre3j5RsZWGtaw
KgH5NmBPa6gff4R/TIvG0tPJ2nRejHQx2Js/ueGwI74U86ma3PZfzP/rxURQtDb6
g/Zn3zhc3I6FfNHqx563A2xWwLO6L7LBtibVJv5hyqDwv4Uh3BNFtAMYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxn8g+Cf1dRhp8M9DAi68yZB7HtMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhakF8xAt
mbRcol0WzSfnBLJru5lMKD1N7/CIq+RrpG/QPg4U6ETrd0ileEEiolZJfj29hmcZ
Gec3nxgUOeDzRaw1DrtLvbLN4LCyj+14iaiQ95HmM8Mpq/c2JCMNIgFULMLmmd9X
5DVHOZyYeKS5Chl6yX9q0oAGq1DkY+rWTuiSqmYb2rNO7DiLS1U2Zw0dLi3d5JSa
2MdXu2cPV1Tg5QB2bp6IXRNElQr++bo0r7xpluYVvOpvEIcqUAO0hAHeSyK/1HHa
mC7isX7MerFsiNN5PIIbmjvccbbIkax6tNdCOHheBU02j1pTUAspAhNV+MatbO0I
mNDDv669v1iDXw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:41:13 2026 by rpki-client