Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 7PbQCBb+Jz+SbXSFbZ5zwG7G/j8DHNmF/YaODOLWZNs=
Subject key identifier: CE:22:CB:96:4E:31:BF:58:27:AC:4E:27:41:88:54:B7:5B:B3:BF:81
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01A0DD98960A2BC885D59284D53EDBFB1A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 173A
Signing time: Sat 26 Sep 2026 12:02:39 +0000
Manifest this update: Sat 26 Sep 2026 12:02:39 +0000
Manifest next update: Sun 27 Sep 2026 12:02:39 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: HDcAKdBSKsBlN6PBJ28jfs5Lx7wAQrc3hY2WWbt5TIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:96:0a:2b:c8:85:d5:92:84:d5:3e:db:fb:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Sep 26 12:02:39 2026 GMT
Not After : Sep 27 12:02:39 2026 GMT
Subject: CN=ce22cb964e31bf5827ac4e27418854b75bb3bf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:65:85:bd:f5:25:81:81:10:72:61:7c:ec:
1a:50:f5:eb:95:2b:6a:c8:91:03:eb:39:28:a6:f8:
bd:d1:39:51:51:71:f9:93:0d:ac:b5:56:ac:5a:00:
70:9b:40:55:94:6f:57:3d:4a:50:a4:9c:b5:6b:59:
e5:39:80:73:6d:50:28:62:69:d8:3e:2f:d0:17:5e:
65:8b:76:1c:1d:9e:2a:59:46:f6:09:b4:c8:e8:3a:
c0:d0:37:02:ca:b2:91:cf:1d:6a:69:b4:b5:4e:84:
aa:05:fe:95:27:35:e5:5c:c7:74:00:88:fd:49:2d:
a7:f0:2d:a6:0d:2c:08:3e:02:60:60:24:e0:03:02:
fe:8a:0c:9a:ee:ff:16:73:4a:0e:64:ea:9a:7f:e1:
9c:29:ce:87:0e:71:c3:02:90:b0:5e:35:ee:59:49:
c1:12:64:e8:78:b1:5a:4d:21:5b:d7:37:a2:c6:99:
49:0e:87:61:6c:09:aa:0f:7c:c7:0e:fb:a5:43:f5:
da:60:fa:89:87:5c:0e:f9:00:be:0f:91:3d:ec:54:
88:ad:5f:6d:bf:fd:a2:73:2f:ed:2c:61:17:14:43:
5f:ef:27:c5:7b:2a:6f:6d:e4:a5:29:bf:ea:db:33:
71:25:cc:30:2f:5d:ec:44:eb:39:be:8b:bb:77:0f:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:CB:96:4E:31:BF:58:27:AC:4E:27:41:88:54:B7:5B:B3:BF:81
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:85:13:7b:d3:08:46:60:3d:8e:65:76:51:36:7b:fe:cf:
b7:b7:50:f4:b1:10:5c:ae:d3:19:58:1c:2e:28:89:6f:cb:37:
1b:a1:a9:87:31:98:11:49:98:8b:75:3d:60:4e:c7:54:26:16:
3c:e8:e1:87:09:b2:05:eb:54:ab:a8:df:bc:36:33:95:07:18:
b9:6d:a4:c3:ae:83:fe:d8:fc:9a:b9:03:b9:c3:04:18:5c:5c:
15:90:5b:ea:f3:51:2c:1e:93:2e:e0:fa:6c:83:a2:49:7f:d3:
5a:7f:e9:3a:89:81:00:30:56:34:13:f1:0e:c3:3a:44:64:90:
69:72:9b:02:b8:2f:15:16:57:c8:a5:bd:03:38:17:0f:f4:72:
5f:10:7a:08:7d:d0:28:cc:ef:8c:1b:7c:1e:43:4c:a7:7f:3a:
96:8d:b5:a4:ed:54:f5:2c:a7:df:a9:d5:bd:de:5e:ae:42:63:
3b:79:14:87:21:1f:d2:04:f1:ea:1a:b2:c3:56:f8:12:84:4b:
46:aa:94:bd:2e:83:17:0d:b5:e8:e6:ad:40:00:41:4d:77:20:
09:89:a9:0e:25:fd:f1:5c:f2:5f:36:5d:a3:bc:22:1d:19:88:
04:1b:6d:86:d2:44:eb:58:ef:a2:99:c7:c9:e7:91:c4:fc:0b:
ae:b9:24:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdmJYKK8iF1ZKE1T7b+xoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3
M2NhZjIwHhcNMjYwOTI2MTIwMjM5WhcNMjYwOTI3MTIwMjM5WjAzMTEwLwYDVQQD
EyhjZTIyY2I5NjRlMzFiZjU4MjdhYzRlMjc0MTg4NTRiNzViYjNiZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRZlhb31JYGBEHJhfOwaUPXrlStq
yJED6zkopvi90TlRUXH5kw2stVasWgBwm0BVlG9XPUpQpJy1a1nlOYBzbVAoYmnY
Pi/QF15li3YcHZ4qWUb2CbTI6DrA0DcCyrKRzx1qabS1ToSqBf6VJzXlXMd0AIj9
SS2n8C2mDSwIPgJgYCTgAwL+igya7v8Wc0oOZOqaf+GcKc6HDnHDApCwXjXuWUnB
EmToeLFaTSFb1zeixplJDodhbAmqD3zHDvulQ/XaYPqJh1wO+QC+D5E97FSIrV9t
v/2icy/tLGEXFENf7yfFeypvbeSlKb/q2zNxJcwwL13sROs5vou7dw8DtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4iy5ZOMb9YJ6xOJ0GIVLdbs7+BMB8GA1UdIwQY
MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt
NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2
LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFqFE3vT
CEZgPY5ldlE2e/7Pt7dQ9LEQXK7TGVgcLiiJb8s3G6GphzGYEUmYi3U9YE7HVCYW
POjhhwmyBetUq6jfvDYzlQcYuW2kw66D/tj8mrkDucMEGFxcFZBb6vNRLB6TLuD6
bIOiSX/TWn/pOomBADBWNBPxDsM6RGSQaXKbArgvFRZXyKW9AzgXD/RyXxB6CH3Q
KMzvjBt8HkNMp386lo21pO1U9Syn36nVvd5erkJjO3kUhyEf0gTx6hqyw1b4EoRL
RqqUvS6DFw216OatQABBTXcgCYmpDiX98VzyXzZdo7wiHRmIBBtthtJE61jvopnH
yeeRxPwLrrkkww==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:17:26 2026 by rpki-client