Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: BSL+9ZYXi8FC96w1DKATB7aBpjtBdX7oBhlPNe+eArU=
Subject key identifier: 33:E7:BD:86:53:8E:70:CA:86:10:C4:9E:60:FC:84:8B:FB:CE:B9:30
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 01A0EA4013AAEDD8FD2EF453CF2C4D841285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 062E
Signing time: Mon 28 Sep 2026 23:01:02 +0000
Manifest this update: Mon 28 Sep 2026 23:01:02 +0000
Manifest next update: Tue 29 Sep 2026 23:01:02 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: VEm9mHZnoG8yLGjxSK2YFqFyvPcuxNxjgIY7oESv1es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:13:aa:ed:d8:fd:2e:f4:53:cf:2c:4d:84:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Sep 28 23:01:02 2026 GMT
Not After : Sep 29 23:01:02 2026 GMT
Subject: CN=33e7bd86538e70ca8610c49e60fc848bfbceb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:9b:ad:7c:62:6c:8f:7c:40:23:29:bf:a5:
fd:33:ac:21:c0:e0:b7:56:e5:dd:0f:ff:d2:63:7d:
65:07:2b:40:3f:15:38:c8:59:6c:33:07:ba:43:78:
96:03:cd:42:6a:9a:69:b4:a3:b3:1c:b8:25:29:bc:
9a:ad:88:95:4f:6e:3b:4b:30:20:90:f1:06:06:bc:
43:88:95:eb:39:f3:d3:33:2b:5a:b4:fe:c6:cc:cd:
19:8c:80:e3:e4:e3:68:f0:97:97:6d:1e:79:fb:da:
58:ac:88:56:0c:8d:40:17:c7:80:a9:c3:7d:da:a1:
fd:84:5a:39:b5:2e:f1:b2:a6:ea:ca:ea:9c:6f:c7:
6a:a5:30:3b:6b:04:d3:2c:9f:a4:0b:09:fc:c9:1d:
85:93:9d:b5:a5:a7:7f:ec:53:94:1a:10:61:a2:22:
37:cc:de:f0:a9:ed:1e:ea:9f:39:34:d6:6b:70:ce:
82:ef:57:12:04:59:33:2c:8f:01:04:70:d6:d3:87:
a9:42:1c:7e:36:02:aa:ae:81:c3:75:e6:0e:7c:78:
88:30:ef:c1:7f:27:77:17:93:fd:2e:da:06:2d:39:
29:52:83:da:f9:c6:35:95:19:a8:4a:e8:9f:22:55:
79:1e:8e:93:58:d5:21:48:af:fd:dc:9a:07:78:e4:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:BD:86:53:8E:70:CA:86:10:C4:9E:60:FC:84:8B:FB:CE:B9:30
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:c9:8e:56:25:87:79:51:a2:a3:db:a3:92:9c:92:40:80:
4f:78:fd:0e:51:31:08:3f:83:d3:eb:78:53:30:70:80:68:db:
02:b1:a1:cc:61:71:47:d3:16:b7:74:9d:74:fe:14:70:cd:2e:
0f:13:2b:2a:e6:23:7e:cf:5a:cf:79:60:b2:85:03:3e:bd:64:
51:4c:68:56:26:66:89:3e:46:ec:e2:85:9c:f0:91:43:d1:43:
48:12:e1:ce:97:92:d5:0b:be:1e:52:39:ed:e3:1a:a8:64:a5:
c0:d4:70:c6:9d:9b:3e:21:18:ed:9d:a1:64:c5:4d:87:82:47:
d1:93:4e:4d:93:ff:e0:29:3b:d8:4f:0e:19:5c:dc:08:fe:44:
cd:14:03:37:0b:ab:98:24:9c:0f:b9:e3:b3:4e:f0:01:fb:9a:
09:73:cb:84:9b:1e:18:4a:c4:75:fa:59:d7:10:45:5e:76:7a:
3b:83:bd:4d:5f:1f:61:0d:80:ec:6a:f6:fb:27:33:b9:fa:df:
d7:6f:b4:bb:1a:32:4e:c9:09:b1:44:15:07:5e:bc:8e:ea:b2:
c8:2d:4b:8d:ec:0f:26:b2:94:a5:e8:9e:e4:f8:94:32:2b:65:
b4:35:a8:18:61:29:2e:16:f7:20:c9:59:84:05:3e:68:ee:8d:
da:96:45:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQBOq7dj9LvRTzyxNhBKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm
MWJiNmQwHhcNMjYwOTI4MjMwMTAyWhcNMjYwOTI5MjMwMTAyWjAzMTEwLwYDVQQD
EygzM2U3YmQ4NjUzOGU3MGNhODYxMGM0OWU2MGZjODQ4YmZiY2ViOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ6brXxibI98QCMpv6X9M6whwOC3
VuXdD//SY31lBytAPxU4yFlsMwe6Q3iWA81CappptKOzHLglKbyarYiVT247SzAg
kPEGBrxDiJXrOfPTMytatP7GzM0ZjIDj5ONo8JeXbR55+9pYrIhWDI1AF8eAqcN9
2qH9hFo5tS7xsqbqyuqcb8dqpTA7awTTLJ+kCwn8yR2Fk521pad/7FOUGhBhoiI3
zN7wqe0e6p85NNZrcM6C71cSBFkzLI8BBHDW04epQhx+NgKqroHDdeYOfHiIMO/B
fyd3F5P9LtoGLTkpUoPa+cY1lRmoSuifIlV5Ho6TWNUhSK/93JoHeOQMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPnvYZTjnDKhhDEnmD8hIv7zrkwMB8GA1UdIwQY
MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt
MDllYjAwMTNmYzI0LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0
LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtnJjlYl
h3lRoqPbo5KckkCAT3j9DlExCD+D0+t4UzBwgGjbArGhzGFxR9MWt3SddP4UcM0u
DxMrKuYjfs9az3lgsoUDPr1kUUxoViZmiT5G7OKFnPCRQ9FDSBLhzpeS1Qu+HlI5
7eMaqGSlwNRwxp2bPiEY7Z2hZMVNh4JH0ZNOTZP/4Ck72E8OGVzcCP5EzRQDNwur
mCScD7njs07wAfuaCXPLhJseGErEdfpZ1xBFXnZ6O4O9TV8fYQ2A7Gr2+yczufrf
12+0uxoyTskJsUQVB168juqyyC1LjewPJrKUpeie5PiUMitltDWoGGEpLhb3IMlZ
hAU+aO6N2pZFsg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:02:21 2026 by rpki-client