Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: 1uL3IwEEX1x6ZdRLxTArMfj8qIQzwKokfr/H967m0Is=
Subject key identifier: 72:0A:0E:0C:C9:B9:7A:17:B4:4F:D3:6D:A9:61:87:9A:8E:E7:C6:86
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 01A0DFF36180949ACCBB5A0ED7019ED2D867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 198C
Signing time: Sat 26 Sep 2026 23:01:04 +0000
Manifest this update: Sat 26 Sep 2026 23:01:04 +0000
Manifest next update: Sun 27 Sep 2026 23:01:04 +0000
Files and hashes: 1: J-e1EK_LAkajkxzNj6LSi_DOMCQ.roa (hash: 2wHbXc4iH7fDMwb/pEgkJZF38SGZEaDWW6KVL/qYSzQ=)
2: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: QgAN0eFYG7ETTQxnMAVTHIQTs25valj90tfHeheFJhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:61:80:94:9a:cc:bb:5a:0e:d7:01:9e:d2:d8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Sep 26 23:01:04 2026 GMT
Not After : Sep 27 23:01:04 2026 GMT
Subject: CN=720a0e0cc9b97a17b44fd36da961879a8ee7c686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:7b:bc:e8:52:15:cc:c6:bb:9c:ed:55:7c:
bc:d4:2a:ef:41:e4:9b:72:ba:e1:42:ca:45:72:10:
15:c2:89:93:2a:36:79:75:f1:46:fc:b8:6e:43:7f:
dc:47:f0:3e:94:83:59:38:f9:d9:47:25:e6:9d:54:
52:1c:fb:c0:54:a6:90:dc:83:89:dd:d0:b9:22:90:
e5:7a:4a:a1:96:fb:8a:7d:0d:75:bb:af:85:65:73:
99:52:80:31:1b:d8:60:66:ca:74:48:b1:94:99:5c:
06:2b:73:c2:4a:41:d3:02:c1:f2:56:c4:6c:f2:0b:
6c:c8:b4:ef:2b:62:f2:63:c6:4b:ae:4f:65:50:a1:
da:b4:9a:85:e6:c8:42:f8:cc:6a:72:46:e2:21:3e:
e7:95:0f:9f:a7:76:f7:e7:53:52:a8:30:c4:12:a5:
0b:58:bf:36:6c:a3:38:5e:a1:df:e6:b6:5c:6d:e1:
48:f9:36:ae:5b:46:fc:5c:27:09:3b:71:0f:9a:90:
48:7b:ce:16:c7:5f:47:ab:07:a2:36:b5:0f:1c:8e:
72:9d:b0:03:b4:f9:fc:8d:ff:2b:b4:b2:6f:f7:e6:
e9:86:6b:a4:01:c4:ff:84:91:c8:28:84:ef:84:96:
59:91:ae:81:73:b1:51:01:41:32:12:3d:48:a6:41:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:0E:0C:C9:B9:7A:17:B4:4F:D3:6D:A9:61:87:9A:8E:E7:C6:86
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:3a:5a:0c:d2:70:95:e4:c2:de:f2:f2:4b:a6:54:75:b3:
74:28:34:24:b5:1b:f4:56:1d:f6:88:17:88:34:66:69:aa:f8:
98:e3:44:b6:a6:de:6e:47:60:35:b8:1e:33:a4:a3:14:05:7d:
dd:bb:34:df:ca:1e:dd:63:95:ae:c8:be:d5:b0:c0:71:cc:0d:
fe:f0:4f:50:7e:ac:82:92:1c:4f:b5:7c:90:c2:f7:51:c0:3f:
8a:97:57:83:d9:76:eb:0f:41:d9:e7:9a:82:a4:96:5a:24:c0:
97:64:f3:7d:27:1f:17:ac:6c:35:22:fd:2c:6e:d4:2f:86:b8:
ab:34:9f:ef:92:b3:56:a3:a5:bc:3b:86:8c:6e:cf:a0:70:87:
5a:e3:cb:16:89:e5:83:d2:41:7b:2f:ca:7b:f9:8d:2a:a0:8d:
35:c4:6d:8f:b9:e8:19:af:69:60:14:9f:06:dd:2d:0b:82:a4:
7b:9d:e2:c4:06:82:e3:98:37:62:a0:58:92:75:d5:e6:f3:f2:
05:86:88:8c:a4:86:d7:74:9f:7c:41:19:ce:0e:16:5b:38:b5:
1b:7b:86:37:1f:a9:dd:86:36:9e:9e:c1:74:cb:0f:f3:96:7a:
9a:6c:71:bf:a4:61:53:fb:a2:01:18:d1:c7:95:a3:e5:8a:a2:
d5:e9:7a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf82GAlJrMu1oO1wGe0thnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjMxZGNkNmJiNTMwODAyOWM0MjczMjMwNTE0ZjcyNmIx
Yjg2YmEwHhcNMjYwOTI2MjMwMTA0WhcNMjYwOTI3MjMwMTA0WjAzMTEwLwYDVQQD
Eyg3MjBhMGUwY2M5Yjk3YTE3YjQ0ZmQzNmRhOTYxODc5YThlZTdjNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LJ7vOhSFczGu5ztVXy81CrvQeSb
crrhQspFchAVwomTKjZ5dfFG/LhuQ3/cR/A+lINZOPnZRyXmnVRSHPvAVKaQ3IOJ
3dC5IpDlekqhlvuKfQ11u6+FZXOZUoAxG9hgZsp0SLGUmVwGK3PCSkHTAsHyVsRs
8gtsyLTvK2LyY8ZLrk9lUKHatJqF5shC+MxqckbiIT7nlQ+fp3b351NSqDDEEqUL
WL82bKM4XqHf5rZcbeFI+TauW0b8XCcJO3EPmpBIe84Wx19HqweiNrUPHI5ynbAD
tPn8jf8rtLJv9+bphmukAcT/hJHIKITvhJZZka6Bc7FRAUEyEj1IpkHkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIKDgzJuXoXtE/Tbalhh5qO58aGMB8GA1UdIwQY
MBaAFGSzHc1rtTCAKcQnMjBRT3JrG4a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQt
NDRhYjY4OWUxZDRkLzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQtNDRhYjY4OWUxZDRk
LzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2w6WgzS
cJXkwt7y8kumVHWzdCg0JLUb9FYd9ogXiDRmaar4mONEtqbebkdgNbgeM6SjFAV9
3bs038oe3WOVrsi+1bDAccwN/vBPUH6sgpIcT7V8kML3UcA/ipdXg9l26w9B2eea
gqSWWiTAl2TzfScfF6xsNSL9LG7UL4a4qzSf75KzVqOlvDuGjG7PoHCHWuPLFonl
g9JBey/Ke/mNKqCNNcRtj7noGa9pYBSfBt0tC4Kke53ixAaC45g3YqBYknXV5vPy
BYaIjKSG13SffEEZzg4WWzi1G3uGNx+p3YY2np7BdMsP85Z6mmxxv6RhU/uiARjR
x5Wj5Yqi1el6tw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:49 2026 by rpki-client