Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: d5IWttpbS99ymteZnMSqiM2slaZZHkzlx3j4qyuNd7M=
Subject key identifier: A8:85:59:D7:DF:79:F9:87:BF:39:46:E2:B3:30:71:07:92:22:B7:38
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01A0E061751BFAE946AD7CA2C62EE4828601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1A83
Signing time: Sun 27 Sep 2026 01:01:18 +0000
Manifest this update: Sun 27 Sep 2026 01:01:18 +0000
Manifest next update: Mon 28 Sep 2026 01:01:18 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: kbjhi1JbGiaO+fiSgnqgsHROAks8yMZNNJTuYMiaZ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:75:1b:fa:e9:46:ad:7c:a2:c6:2e:e4:82:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Sep 27 01:01:18 2026 GMT
Not After : Sep 28 01:01:18 2026 GMT
Subject: CN=a88559d7df79f987bf3946e2b33071079222b738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:10:66:41:fb:24:4b:54:3a:22:33:60:5f:
be:c4:24:6f:58:0f:12:c2:c7:a7:39:25:b2:52:af:
99:7d:46:9e:a6:91:18:fe:37:3d:b9:c0:9a:83:d9:
6e:5e:cb:a7:56:8f:09:ea:38:80:18:1d:6f:02:a2:
b6:33:c7:39:ec:d9:e4:0d:14:fd:ba:e5:45:48:d4:
90:d0:72:9e:1e:47:92:3b:46:64:0f:75:71:9a:dd:
d9:14:f8:d3:74:b0:c2:75:82:4f:1f:c3:08:30:19:
c6:b3:60:6e:bb:0a:df:b6:5c:77:88:4b:d6:f7:62:
d0:ce:a3:00:86:19:dd:92:67:43:2e:0f:95:ca:24:
f9:b9:b9:c3:09:68:ae:97:38:1f:c6:11:07:d0:ef:
52:88:ee:0c:07:ee:73:7b:9a:97:b3:4c:df:b2:11:
58:2a:ac:82:5b:b7:29:f2:38:43:cb:23:aa:04:9a:
1c:ba:eb:c4:06:ab:34:2a:36:f0:b2:37:37:4d:b6:
63:93:41:c2:6e:34:01:58:48:b4:b0:64:24:56:89:
56:79:90:e9:c1:dc:f1:6b:e9:60:ff:c3:f2:b2:61:
41:6f:9b:6d:c9:f1:7a:23:43:3d:9c:2c:d4:d5:b3:
d0:18:e9:b5:64:4a:fd:b4:8f:74:29:36:b5:5f:cc:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:59:D7:DF:79:F9:87:BF:39:46:E2:B3:30:71:07:92:22:B7:38
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:8b:8c:98:54:de:4f:0d:bd:05:6c:4c:fa:4e:16:bb:c3:
8e:b5:12:15:c3:3e:e6:3c:09:29:be:04:96:c0:3f:4e:ed:44:
83:8b:a6:96:b1:37:a3:45:5f:59:3a:38:f7:56:b2:c7:3f:1b:
85:24:c0:20:0e:1c:18:39:3b:9a:fd:39:42:f3:af:c8:b6:f2:
06:dc:98:bf:c4:b1:5c:65:42:dd:0e:77:0c:8f:fe:14:63:d6:
3e:c3:9b:11:d2:cf:cc:bf:a7:1d:ed:a1:4b:67:f4:cd:54:f0:
73:f3:0d:e4:66:84:e5:02:d3:50:c0:00:02:d8:b5:99:78:12:
17:10:7b:35:25:06:75:f7:51:74:2a:fe:74:26:a1:91:e1:a0:
7d:83:f6:5b:44:07:77:35:9c:ca:c1:30:57:4f:64:a4:6a:b8:
b0:23:0a:ac:df:03:7c:06:b3:a3:1c:06:26:52:3d:d9:33:cb:
d6:b9:6f:4d:06:30:a5:ff:08:46:d5:76:30:a4:5d:86:2e:bd:
e2:4d:5c:d7:98:90:f8:3c:a8:c4:1d:c5:72:1f:a3:27:18:b2:
28:f9:28:cc:45:8a:d9:fa:73:fa:e2:f9:ec:09:ef:dd:68:0b:
0e:41:af:14:6c:90:85:63:45:df:66:89:b1:3f:0c:55:0f:63:
27:31:f3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYXUb+ulGrXyixi7kgoYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjYwOTI3MDEwMTE4WhcNMjYwOTI4MDEwMTE4WjAzMTEwLwYDVQQD
EyhhODg1NTlkN2RmNzlmOTg3YmYzOTQ2ZTJiMzMwNzEwNzkyMjJiNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPoQZkH7JEtUOiIzYF++xCRvWA8S
wsenOSWyUq+ZfUaeppEY/jc9ucCag9luXsunVo8J6jiAGB1vAqK2M8c57NnkDRT9
uuVFSNSQ0HKeHkeSO0ZkD3Vxmt3ZFPjTdLDCdYJPH8MIMBnGs2Buuwrftlx3iEvW
92LQzqMAhhndkmdDLg+VyiT5ubnDCWiulzgfxhEH0O9SiO4MB+5ze5qXs0zfshFY
KqyCW7cp8jhDyyOqBJocuuvEBqs0Kjbwsjc3TbZjk0HCbjQBWEi0sGQkVolWeZDp
wdzxa+lg/8PysmFBb5ttyfF6I0M9nCzU1bPQGOm1ZEr9tI90KTa1X8y4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiFWdffefmHvzlG4rMwcQeSIrc4MB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwaLjJhU
3k8NvQVsTPpOFrvDjrUSFcM+5jwJKb4ElsA/Tu1Eg4umlrE3o0VfWTo491ayxz8b
hSTAIA4cGDk7mv05QvOvyLbyBtyYv8SxXGVC3Q53DI/+FGPWPsObEdLPzL+nHe2h
S2f0zVTwc/MN5GaE5QLTUMAAAti1mXgSFxB7NSUGdfdRdCr+dCahkeGgfYP2W0QH
dzWcysEwV09kpGq4sCMKrN8DfAazoxwGJlI92TPL1rlvTQYwpf8IRtV2MKRdhi69
4k1c15iQ+DyoxB3Fch+jJxiyKPkozEWK2fpz+uL57Anv3WgLDkGvFGyQhWNF32aJ
sT8MVQ9jJzHz7g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:24 2026 by rpki-client