Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: eFMnVw5xm9xSKhjexViPGDbKTCq0Uug81caDvOAWz/s=
Subject key identifier: 4F:74:8B:37:13:00:10:D4:FF:98:7A:25:6C:91:B5:53:BC:C7:54:04
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 01A0E106C378D2817EBAADDA01C4D8D452EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 0CB5
Signing time: Sun 27 Sep 2026 04:01:51 +0000
Manifest this update: Sun 27 Sep 2026 04:01:51 +0000
Manifest next update: Mon 28 Sep 2026 04:01:51 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: 4IsDbSWCQKrv4FrcPPKFu1YeL8tyhD0e9TwiINW8UJ8=)
2: sNdU_E9AeTRcV1tQUPKaysFTZxA.roa (hash: RsVC7/l8xCsWReH4ylGowvPT0B2fPTstrTBA1NPEml0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:c3:78:d2:81:7e:ba:ad:da:01:c4:d8:d4:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Sep 27 04:01:51 2026 GMT
Not After : Sep 28 04:01:51 2026 GMT
Subject: CN=4f748b37130010d4ff987a256c91b553bcc75404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:5a:bb:ef:b4:fc:3c:24:62:e1:7f:07:17:
d3:4b:71:83:c6:1c:8c:ac:71:4e:71:ef:d7:b8:77:
73:73:82:77:f2:99:0f:58:46:45:9a:58:0f:7e:6a:
e1:0f:3e:c0:f4:ae:11:8c:3a:1d:14:6c:60:2e:55:
a3:b6:41:bc:4a:89:e4:fe:fe:f7:58:23:06:24:f7:
16:fa:f7:ef:bb:52:84:96:ac:61:d9:88:c3:e6:29:
b9:21:07:f3:f8:e0:d8:63:c5:8b:db:ef:16:32:dd:
a5:c9:dc:13:98:35:2a:97:39:7e:a2:36:5d:c3:8d:
61:54:53:8d:43:df:8c:4c:62:ec:23:40:74:77:f3:
46:a8:cd:db:0c:1e:af:dd:4d:66:d6:4b:d7:1e:7b:
f1:81:a0:f7:9f:b5:ac:b7:87:6c:b5:de:6a:a0:8c:
bb:af:cc:3d:f8:38:52:bf:0e:02:40:19:85:51:e5:
60:e3:2c:dc:d6:dc:ba:fc:9b:00:a1:ee:37:df:45:
d4:b6:89:c4:43:1d:83:52:0c:fd:0a:11:b7:c6:80:
c6:cc:8f:50:32:eb:a2:0f:c9:e6:84:9f:1d:41:ee:
77:56:f8:3c:03:58:9a:be:91:8e:55:53:9f:0d:e6:
17:07:e1:78:b4:6b:0f:2f:e5:da:69:48:ee:e4:10:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:8B:37:13:00:10:D4:FF:98:7A:25:6C:91:B5:53:BC:C7:54:04
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4b:7c:92:4d:9e:23:ad:db:21:64:ed:94:54:1e:34:69:92:
b7:ef:61:79:38:e1:e3:a8:62:af:6e:d5:33:8a:07:b8:8f:8c:
30:33:19:88:ec:d8:aa:5d:18:4c:e2:d2:c9:3d:42:3c:58:bc:
83:60:1c:74:bd:d6:64:83:39:42:43:1a:63:d9:9a:b5:59:94:
d8:9e:3e:b9:a3:17:fd:a4:74:a6:e8:62:81:8c:52:95:23:21:
22:19:ae:59:7a:45:08:51:e4:ff:9a:19:01:90:80:ba:34:86:
1c:fe:7f:8d:52:64:bb:cc:7d:0b:61:63:16:49:55:37:85:1e:
ad:07:91:f6:6d:31:3b:85:88:44:50:05:5a:7d:a7:89:34:f3:
e9:e0:98:78:e2:a0:1f:47:aa:bd:1e:bc:50:09:c1:a1:0a:59:
ac:77:51:50:8a:7d:64:da:e7:a9:1b:43:d7:c3:7e:5b:72:a9:
5f:53:ca:fa:52:ac:08:e1:7a:a6:f2:69:ba:4a:81:11:f6:de:
25:c2:d4:9c:d5:c1:e7:48:55:59:77:16:b8:fa:21:18:ee:3a:
38:31:b6:99:b7:c0:72:eb:22:b2:77:67:01:52:2c:c8:fa:e3:
aa:a0:ff:69:11:f9:96:83:71:35:34:54:b0:9e:6e:dc:de:f3:
86:de:de:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhBsN40oF+uq3aAcTY1FLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz
ZmJjNDYwHhcNMjYwOTI3MDQwMTUxWhcNMjYwOTI4MDQwMTUxWjAzMTEwLwYDVQQD
Eyg0Zjc0OGIzNzEzMDAxMGQ0ZmY5ODdhMjU2YzkxYjU1M2JjYzc1NDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS1au++0/DwkYuF/BxfTS3GDxhyM
rHFOce/XuHdzc4J38pkPWEZFmlgPfmrhDz7A9K4RjDodFGxgLlWjtkG8Sonk/v73
WCMGJPcW+vfvu1KElqxh2YjD5im5IQfz+ODYY8WL2+8WMt2lydwTmDUqlzl+ojZd
w41hVFONQ9+MTGLsI0B0d/NGqM3bDB6v3U1m1kvXHnvxgaD3n7Wst4dstd5qoIy7
r8w9+DhSvw4CQBmFUeVg4yzc1ty6/JsAoe4330XUtonEQx2DUgz9ChG3xoDGzI9Q
MuuiD8nmhJ8dQe53Vvg8A1iavpGOVVOfDeYXB+F4tGsPL+XaaUju5BB01wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE90izcTABDU/5h6JWyRtVO8x1QEMB8GA1UdIwQY
MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt
ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4
LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkt8kk2e
I63bIWTtlFQeNGmSt+9heTjh46hir27VM4oHuI+MMDMZiOzYql0YTOLSyT1CPFi8
g2AcdL3WZIM5QkMaY9matVmU2J4+uaMX/aR0puhigYxSlSMhIhmuWXpFCFHk/5oZ
AZCAujSGHP5/jVJku8x9C2FjFklVN4UerQeR9m0xO4WIRFAFWn2niTTz6eCYeOKg
H0eqvR68UAnBoQpZrHdRUIp9ZNrnqRtD18N+W3KpX1PK+lKsCOF6pvJpukqBEfbe
JcLUnNXB50hVWXcWuPohGO46ODG2mbfAcusisndnAVIsyPrjqqD/aRH5loNxNTRU
sJ5u3N7zht7eQw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:14:01 2026 by rpki-client