Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: NvNTjNQa+3Uqq7bWcJmciKwcLJsupscWj0cE6+9m+2U=
Subject key identifier: B8:83:62:59:31:F3:0E:C1:60:CB:C8:F5:88:72:16:28:CF:AC:3B:30
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 01A10C5DA31AB8D5F21C55E85D327A252940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0BF8
Signing time: Mon 05 Oct 2026 14:00:25 +0000
Manifest this update: Mon 05 Oct 2026 14:00:25 +0000
Manifest next update: Tue 06 Oct 2026 14:00:25 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: EE8pDP+QLgQz14r7pd+7YGuE0UeMVpFqq1YxS8XitV8=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5d:a3:1a:b8:d5:f2:1c:55:e8:5d:32:7a:25:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Oct 5 14:00:25 2026 GMT
Not After : Oct 6 14:00:25 2026 GMT
Subject: CN=b883625931f30ec160cbc8f588721628cfac3b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:5b:58:f9:d2:d1:b5:dd:f0:e9:e8:07:85:
79:07:9d:57:8f:b5:d2:ba:63:f9:06:1b:7f:e8:f2:
75:9b:ff:87:d4:d6:c0:04:cb:da:fd:01:94:e7:c9:
94:e9:b6:3d:6a:3d:f1:cd:3f:d3:15:0b:fd:c4:0d:
72:5e:a4:c6:0e:e0:bf:1e:b5:84:a0:9f:f5:e8:88:
81:47:95:bf:3a:19:3f:07:e2:b8:60:ef:09:07:e9:
df:d6:9c:d3:6c:20:67:63:84:ac:14:bb:83:c0:20:
38:49:85:74:62:65:2c:f5:87:c4:42:40:37:8e:d4:
c6:a7:40:e9:44:e1:a7:8b:5d:99:ba:0e:aa:bc:2a:
6a:2c:36:4b:29:33:47:29:67:26:13:90:d1:4f:67:
3e:60:a3:a0:2e:8c:81:c9:d6:e9:6e:30:9c:d7:ba:
88:92:8f:23:30:96:06:b3:85:64:d5:d3:59:99:2a:
7a:75:01:00:3c:5f:bf:98:12:97:16:0b:9b:4a:22:
37:d5:f3:c6:af:83:22:ce:19:a7:78:4f:77:46:b7:
da:e4:02:e7:30:4b:01:e0:49:4d:5d:a7:4e:30:8b:
b1:44:a1:fb:5b:1d:29:0e:7c:7f:8c:6b:69:cb:83:
82:76:e4:58:5b:1a:e1:4a:a3:5d:98:a2:b0:20:ef:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:62:59:31:F3:0E:C1:60:CB:C8:F5:88:72:16:28:CF:AC:3B:30
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3b:bd:f0:b8:33:86:64:bd:98:3f:fc:b8:c7:06:5d:a7:ba:
48:1c:98:4a:04:27:06:c0:7a:fd:9e:87:86:a7:e2:ab:c8:fc:
53:5c:60:fb:75:77:df:82:69:ed:47:e8:dc:d3:1b:8f:52:15:
76:64:6c:66:69:b0:b6:2c:df:f7:e8:70:28:93:6c:fb:56:67:
28:31:a4:6c:77:1c:17:12:95:5b:89:32:59:4d:7f:ca:2f:e8:
11:c8:3a:81:93:56:5b:99:5e:12:2e:47:d1:3d:ae:3a:15:a6:
64:51:1a:15:11:49:90:84:92:3d:49:db:fb:02:1b:e8:2a:6f:
8b:ff:80:d5:6c:6d:0c:70:c5:e7:05:49:fe:55:bb:e9:4c:f1:
e1:08:da:00:5c:f3:58:83:d5:71:fe:e0:23:4e:14:5f:0a:59:
43:7c:e8:fd:77:93:9d:5f:a7:aa:5e:c0:6b:6a:d5:f2:5a:72:
18:1d:35:db:2d:f8:ca:dc:7e:03:27:0f:94:0e:c3:42:2c:ed:
3e:47:bc:f5:19:9a:ca:aa:53:76:95:31:9e:ce:7c:68:4c:e0:
59:7c:23:4a:2d:23:c7:dd:bc:0c:8a:d6:6a:05:62:00:3d:4b:
e9:66:12:fd:0c:e5:8c:97:8e:cc:85:99:14:3c:04:6d:a1:14:
a1:c0:ca:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMXaMauNXyHFXoXTJ6JSlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0
YjI5ZDcwHhcNMjYxMDA1MTQwMDI1WhcNMjYxMDA2MTQwMDI1WjAzMTEwLwYDVQQD
EyhiODgzNjI1OTMxZjMwZWMxNjBjYmM4ZjU4ODcyMTYyOGNmYWMzYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhbWPnS0bXd8OnoB4V5B51Xj7XS
umP5Bht/6PJ1m/+H1NbABMva/QGU58mU6bY9aj3xzT/TFQv9xA1yXqTGDuC/HrWE
oJ/16IiBR5W/Ohk/B+K4YO8JB+nf1pzTbCBnY4SsFLuDwCA4SYV0YmUs9YfEQkA3
jtTGp0DpROGni12Zug6qvCpqLDZLKTNHKWcmE5DRT2c+YKOgLoyBydbpbjCc17qI
ko8jMJYGs4Vk1dNZmSp6dQEAPF+/mBKXFgubSiI31fPGr4MizhmneE93Rrfa5ALn
MEsB4ElNXadOMIuxRKH7Wx0pDnx/jGtpy4OCduRYWxrhSqNdmKKwIO+TbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiDYlkx8w7BYMvI9YhyFijPrDswMB8GA1UdIwQY
MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt
NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4
LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKju98Lgz
hmS9mD/8uMcGXae6SByYSgQnBsB6/Z6Hhqfiq8j8U1xg+3V334Jp7Ufo3NMbj1IV
dmRsZmmwtizf9+hwKJNs+1ZnKDGkbHccFxKVW4kyWU1/yi/oEcg6gZNWW5leEi5H
0T2uOhWmZFEaFRFJkISSPUnb+wIb6Cpvi/+A1WxtDHDF5wVJ/lW76Uzx4QjaAFzz
WIPVcf7gI04UXwpZQ3zo/XeTnV+nql7Aa2rV8lpyGB012y34ytx+AycPlA7DQizt
Pke89RmayqpTdpUxns58aEzgWXwjSi0jx928DIrWagViAD1L6WYS/QzljJeOzIWZ
FDwEbaEUocDKQw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:16:47 2026 by rpki-client