Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: Ox/hz0Sgdk5/jlhnZM19p4tl3sF3m2x9RaPpMCWO1ho=
Subject key identifier: 4D:9A:DA:6E:04:60:8F:87:74:4D:DB:EA:33:4E:A1:EE:63:24:D1:BE
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01A13A123A2A995EE265F1161F5D526AA0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0B20
Signing time: Wed 14 Oct 2026 11:00:35 +0000
Manifest this update: Wed 14 Oct 2026 11:00:35 +0000
Manifest next update: Thu 15 Oct 2026 11:00:35 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: WAY8DevxROIaQcHS4yZc3+cxYDZjh7ob9jfk3DOGZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:3a:2a:99:5e:e2:65:f1:16:1f:5d:52:6a:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Oct 14 11:00:35 2026 GMT
Not After : Oct 15 11:00:35 2026 GMT
Subject: CN=4d9ada6e04608f87744ddbea334ea1ee6324d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:79:0c:47:63:4f:26:be:72:6c:a1:13:56:
62:c2:05:3c:ee:1f:3e:28:a2:92:20:20:3e:a6:1e:
2c:a8:65:4d:d4:a3:38:fe:54:25:2f:9e:fe:e4:e6:
6b:fb:79:95:05:8c:06:ba:e9:2b:fb:41:cf:9b:9f:
3f:a6:e1:8d:84:b3:fd:3c:53:f7:75:54:77:a3:5e:
b9:2c:8e:6d:3a:33:f6:c9:10:c1:57:46:dd:97:ef:
4c:42:55:76:f9:d2:34:57:28:82:2b:ac:cd:5d:22:
d0:3d:14:fa:54:6d:eb:3e:46:57:ea:62:03:e7:75:
88:c8:96:7e:eb:17:91:8e:9f:0e:81:94:57:dc:1f:
a5:a8:bc:44:ab:9f:e7:74:b7:54:cc:f3:d3:7d:9a:
5d:f0:d4:3a:43:63:ea:ef:54:29:bb:61:96:3e:3c:
43:32:07:93:5e:3c:5e:39:53:8a:e4:90:cf:73:1d:
4e:a5:9d:48:52:94:2e:97:63:14:70:b6:be:e7:f8:
9f:82:16:ce:33:55:89:11:46:8a:02:f2:8a:b8:23:
5f:e0:66:72:72:fb:0a:97:19:1b:e5:3e:5b:66:60:
bc:fd:d0:0c:ae:0e:4f:ad:5a:d6:39:8d:c3:10:0c:
d0:23:4e:7e:2b:c7:01:7b:9b:8e:b5:11:d9:04:e4:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:DA:6E:04:60:8F:87:74:4D:DB:EA:33:4E:A1:EE:63:24:D1:BE
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:98:e6:5f:13:95:9c:70:e0:9c:9e:cb:ea:44:ac:b1:4b:dd:
12:3a:09:49:a5:a6:60:25:73:7c:4a:42:9f:c0:cb:e2:ea:6d:
7a:e1:1a:85:00:cd:67:87:a4:bc:13:38:ad:da:3b:d0:a1:c4:
a0:40:61:b6:2b:0d:35:25:09:eb:d8:92:c9:e0:66:2d:51:97:
45:54:39:3a:96:dc:ce:cb:85:e2:25:a1:db:cf:be:bf:21:50:
e5:83:90:26:b0:c1:b7:fc:0a:aa:49:90:13:e4:8e:69:11:1a:
d5:46:b0:af:4b:de:ff:39:8c:c7:3f:ea:5c:6f:e0:ff:9d:1b:
cb:50:b5:3b:d9:ba:68:df:21:61:fa:cb:bb:8a:83:53:eb:f4:
65:c1:34:10:d8:f8:f1:36:38:40:1c:4c:a7:6e:ba:c9:5e:5c:
f3:a0:d7:c7:53:71:a3:a2:74:0c:a4:53:1e:c1:d4:2d:af:91:
d1:bc:dd:64:07:56:fd:0e:35:30:fd:01:cc:03:60:4f:de:4f:
e2:10:3f:33:6f:0f:6d:27:7d:ad:52:b9:ba:c3:20:fc:21:b6:
2f:59:6d:a0:d1:64:2e:08:e1:cd:f5:b7:af:f4:6a:17:de:c2:
dc:00:dc:30:1b:ff:2d:3c:68:14:04:93:86:ee:1a:61:73:c2:
ec:db:38:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE6EjoqmV7iZfEWH11SaqCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk
MGI5MTEwHhcNMjYxMDE0MTEwMDM1WhcNMjYxMDE1MTEwMDM1WjAzMTEwLwYDVQQD
Eyg0ZDlhZGE2ZTA0NjA4Zjg3NzQ0ZGRiZWEzMzRlYTFlZTYzMjRkMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLB5DEdjTya+cmyhE1ZiwgU87h8+
KKKSICA+ph4sqGVN1KM4/lQlL57+5OZr+3mVBYwGuukr+0HPm58/puGNhLP9PFP3
dVR3o165LI5tOjP2yRDBV0bdl+9MQlV2+dI0VyiCK6zNXSLQPRT6VG3rPkZX6mID
53WIyJZ+6xeRjp8OgZRX3B+lqLxEq5/ndLdUzPPTfZpd8NQ6Q2Pq71Qpu2GWPjxD
MgeTXjxeOVOK5JDPcx1OpZ1IUpQul2MUcLa+5/ifghbOM1WJEUaKAvKKuCNf4GZy
cvsKlxkb5T5bZmC8/dAMrg5PrVrWOY3DEAzQI05+K8cBe5uOtRHZBOThlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2a2m4EYI+HdE3b6jNOoe5jJNG+MB8GA1UdIwQY
MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt
ZDU3MDQ4M2MzNjhiLzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi
LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpjmXxOV
nHDgnJ7L6kSssUvdEjoJSaWmYCVzfEpCn8DL4upteuEahQDNZ4ekvBM4rdo70KHE
oEBhtisNNSUJ69iSyeBmLVGXRVQ5OpbczsuF4iWh28++vyFQ5YOQJrDBt/wKqkmQ
E+SOaREa1Uawr0ve/zmMxz/qXG/g/50by1C1O9m6aN8hYfrLu4qDU+v0ZcE0ENj4
8TY4QBxMp266yV5c86DXx1Nxo6J0DKRTHsHULa+R0bzdZAdW/Q41MP0BzANgT95P
4hA/M28PbSd9rVK5usMg/CG2L1ltoNFkLgjhzfW3r/RqF97C3ADcMBv/LTxoFAST
hu4aYXPC7Ns4Iw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:12:18 2026 by rpki-client