Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: RfZXb2BEexPUz+wDLhJBndbpc4+AKCry110tM7ZKLYA=
Subject key identifier: 5C:F5:85:27:53:32:69:E9:A8:1B:6B:10:DB:57:F7:51:FB:2E:D0:4A
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 01A0E1750156B47CCF77A5BD0093F54CA51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 1291
Signing time: Sun 27 Sep 2026 06:02:16 +0000
Manifest this update: Sun 27 Sep 2026 06:02:16 +0000
Manifest next update: Mon 28 Sep 2026 06:02:16 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: J7tPhXOEEqGjmnz4TFlj+mbklaIhwTFlQDm1w1jlHQ8=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:01:56:b4:7c:cf:77:a5:bd:00:93:f5:4c:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Sep 27 06:02:16 2026 GMT
Not After : Sep 28 06:02:16 2026 GMT
Subject: CN=5cf58527533269e9a81b6b10db57f751fb2ed04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:6e:d8:e7:26:d3:07:0c:72:97:c0:42:81:
26:72:9d:1a:e0:ab:d5:ed:b1:6f:c1:5d:8f:8e:15:
aa:b3:c9:87:17:eb:9f:64:75:01:7d:53:1d:75:a0:
7c:38:5b:63:b3:b2:ef:1b:19:31:49:45:d4:90:b2:
a8:bb:94:17:02:14:0e:af:80:1f:43:40:db:8c:ad:
2f:6c:c5:53:8c:9d:44:92:a3:ed:4d:e3:85:33:86:
e0:d0:5b:13:5c:a7:cd:c9:03:8f:97:60:83:54:ec:
cb:8d:b0:1a:17:87:07:2b:73:b2:2d:b5:86:fe:33:
cb:09:e9:bf:de:72:3d:7f:dc:2f:7e:5d:d3:4a:b5:
2c:e9:c9:9e:c0:7c:b6:06:89:67:fb:30:11:6f:44:
b6:89:f7:ae:d6:4e:16:f7:d7:44:72:4b:0e:92:f9:
25:c5:c2:4b:2b:c5:85:ca:d8:60:3a:f0:3e:77:38:
1f:3a:3b:ab:be:46:72:97:bb:6b:f4:96:11:03:5c:
4b:c1:50:6b:86:ef:32:75:56:ff:34:66:30:02:65:
cf:1b:e7:9a:47:66:77:d2:e8:ae:ee:98:19:2a:68:
e8:24:a1:31:4b:34:90:74:06:55:ce:87:16:1c:96:
80:71:96:ad:a6:d3:8b:ad:bd:99:1e:77:6b:82:f7:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:85:27:53:32:69:E9:A8:1B:6B:10:DB:57:F7:51:FB:2E:D0:4A
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2d:98:46:2c:43:06:63:28:d4:07:de:fa:0a:02:4f:91:8c:
a2:46:54:55:3d:de:d4:e4:0a:a6:b4:59:45:e4:0e:3b:26:3e:
be:df:3c:aa:e1:8f:06:b1:6a:a0:70:de:9b:4b:c7:9a:3f:02:
b4:ae:04:be:81:5f:02:6a:30:90:53:93:0d:46:f6:3c:27:df:
75:41:5f:a9:6d:9a:e9:1d:ec:07:ff:78:ed:55:4b:0e:99:10:
68:93:90:62:95:a9:cc:af:95:0b:2c:0a:ef:2a:6e:d1:62:d1:
45:e2:01:60:15:de:8a:6b:3c:8a:b3:dc:00:60:44:ba:4b:4e:
f6:73:42:23:54:95:1b:98:8e:12:71:66:1e:40:a7:24:a8:b4:
7e:b7:f8:11:ba:52:70:bc:b2:56:5a:20:1a:a6:15:cf:08:c4:
3a:73:2f:f4:0c:59:76:c8:b3:88:9e:31:a0:03:3b:5b:80:55:
c0:1a:2e:ad:42:91:ac:da:2c:b9:07:98:01:06:7e:78:38:9e:
3f:cc:5c:ea:e0:a1:7a:d8:81:52:2e:1f:00:8e:3a:9c:45:54:
d2:16:6a:a2:00:c5:e6:a0:11:83:43:cf:cc:18:a5:eb:19:74:
33:22:c2:c4:91:ce:d7:42:8e:af:00:5e:ed:52:16:5c:48:ec:
c8:46:25:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdQFWtHzPd6W9AJP1TKUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzVkYWQ1NDRkZjQ5NzE2MDg1ZWJlODBkYmU4MmViNjhh
MjA5YzkwHhcNMjYwOTI3MDYwMjE2WhcNMjYwOTI4MDYwMjE2WjAzMTEwLwYDVQQD
Eyg1Y2Y1ODUyNzUzMzI2OWU5YTgxYjZiMTBkYjU3Zjc1MWZiMmVkMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVpu2Ocm0wcMcpfAQoEmcp0a4KvV
7bFvwV2PjhWqs8mHF+ufZHUBfVMddaB8OFtjs7LvGxkxSUXUkLKou5QXAhQOr4Af
Q0DbjK0vbMVTjJ1EkqPtTeOFM4bg0FsTXKfNyQOPl2CDVOzLjbAaF4cHK3OyLbWG
/jPLCem/3nI9f9wvfl3TSrUs6cmewHy2Boln+zARb0S2ifeu1k4W99dEcksOkvkl
xcJLK8WFythgOvA+dzgfOjurvkZyl7tr9JYRA1xLwVBrhu8ydVb/NGYwAmXPG+ea
R2Z30uiu7pgZKmjoJKExSzSQdAZVzocWHJaAcZatptOLrb2ZHndrgvc1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz1hSdTMmnpqBtrENtX91H7LtBKMB8GA1UdIwQY
MBaAFGXF2tVE30lxYIXr6A2+gutoognJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAt
YWQwMTJhZmY1MTcyLzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcy
LzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvC2YRixD
BmMo1Afe+goCT5GMokZUVT3e1OQKprRZReQOOyY+vt88quGPBrFqoHDem0vHmj8C
tK4EvoFfAmowkFOTDUb2PCffdUFfqW2a6R3sB/947VVLDpkQaJOQYpWpzK+VCywK
7ypu0WLRReIBYBXeims8irPcAGBEuktO9nNCI1SVG5iOEnFmHkCnJKi0frf4EbpS
cLyyVlogGqYVzwjEOnMv9AxZdsiziJ4xoAM7W4BVwBourUKRrNosuQeYAQZ+eDie
P8xc6uChetiBUi4fAI46nEVU0hZqogDF5qARg0PPzBil6xl0MyLCxJHO10KOrwBe
7VIWXEjsyEYlfA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:56 2026 by rpki-client