Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: oMJi0JtHRjf7YmS2/FCQP81+MyJAZfAJ4vHtbDqL9vI=
Subject key identifier: 3F:E4:44:F7:91:C0:1A:6E:48:DE:BB:7C:12:48:A0:D3:10:63:62:22
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 01A0FC7E1C5C70A9AC5949079014DDE38BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 17F0
Signing time: Fri 02 Oct 2026 12:01:58 +0000
Manifest this update: Fri 02 Oct 2026 12:01:58 +0000
Manifest next update: Sat 03 Oct 2026 12:01:58 +0000
Files and hashes: 1: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (hash: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: LQw8PHuyKsBXC4j7VKz8eKPzn2f6UGFM7hq4x3l8lbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7e:1c:5c:70:a9:ac:59:49:07:90:14:dd:e3:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Oct 2 12:01:58 2026 GMT
Not After : Oct 3 12:01:58 2026 GMT
Subject: CN=3fe444f791c01a6e48debb7c1248a0d310636222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:d9:62:ac:29:49:af:91:a4:63:46:2b:f3:
78:64:f9:6d:a8:15:26:2e:c5:22:87:a7:7f:75:f1:
df:aa:1b:a1:3d:42:59:a0:f0:b5:2c:77:e6:37:c7:
44:62:13:c4:02:62:9d:45:1d:26:ff:b8:ea:a4:4c:
1b:32:f2:95:a5:d3:c4:53:c6:bb:3c:3b:d0:76:aa:
57:59:97:77:cc:08:4b:bb:06:7c:11:b8:7b:58:a1:
8e:e9:f0:b2:cd:e8:2c:64:e5:54:63:c1:94:f4:ea:
ef:c7:b4:71:06:67:e0:b6:8a:27:fd:d4:27:11:39:
65:c8:83:c0:b2:bb:e9:a9:41:66:a4:0a:e8:95:7c:
8a:e5:e1:8e:d1:33:47:9e:fc:34:0d:b3:c3:8b:d1:
26:d0:23:f3:c3:bd:a0:9b:0c:ab:0d:c6:c8:ac:87:
63:8a:16:c8:bb:bf:36:d5:60:5d:a3:36:c1:4b:ea:
7f:d0:de:6f:8f:e1:27:45:21:ad:4c:95:e9:77:81:
61:3a:86:40:63:ad:1e:1e:05:01:8c:11:8f:6d:6d:
71:38:a5:5e:c1:79:d6:11:08:a9:2d:54:66:20:81:
f6:2a:a3:2e:33:b2:9e:2b:b4:ed:89:6c:33:60:9e:
85:0d:df:cc:70:58:67:45:01:5f:ed:4a:09:93:18:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:44:F7:91:C0:1A:6E:48:DE:BB:7C:12:48:A0:D3:10:63:62:22
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:71:ed:cb:74:64:03:25:0d:6a:ed:cb:ed:30:60:8a:fc:
b5:14:29:b5:98:1a:aa:99:cc:44:99:16:db:94:7c:bc:bc:f8:
0f:80:e9:e9:86:92:80:b3:d4:a1:22:6a:35:ed:ae:04:1a:ca:
b0:1a:21:0e:4b:c8:5f:fe:fa:ff:32:8e:be:95:ad:2d:c8:07:
e5:67:25:f2:fa:d4:3f:ad:94:17:a8:1c:cf:96:a5:ac:2e:41:
bd:49:8f:a5:3d:d0:8a:ef:bd:cf:6a:5b:46:c5:5f:dc:42:1e:
8f:32:5c:30:c9:b4:a1:20:81:38:b9:23:db:f9:ac:d8:04:ac:
54:bf:2c:4f:77:fb:89:0d:34:da:eb:a8:04:ee:63:75:ac:84:
b4:9c:dd:e3:60:52:c7:6e:54:33:b1:e8:58:03:d0:3b:64:77:
d2:88:cc:90:07:dc:5c:6c:d2:16:32:74:b4:56:2d:1c:d4:0a:
25:ea:07:c5:ad:66:83:3d:f1:6c:26:f9:67:e2:63:17:fb:5c:
6d:0d:ee:f7:f5:bd:af:3f:41:5c:39:6c:46:7a:c1:84:43:a4:
5c:f3:48:1e:93:d2:0e:24:cb:19:58:b3:9c:7e:21:d9:54:8a:
6f:a9:4d:55:03:d8:4b:70:07:9f:07:41:5f:21:a8:30:6e:b5:
d4:0d:76:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8fhxccKmsWUkHkBTd44uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0
NWRiYzgwHhcNMjYxMDAyMTIwMTU4WhcNMjYxMDAzMTIwMTU4WjAzMTEwLwYDVQQD
EygzZmU0NDRmNzkxYzAxYTZlNDhkZWJiN2MxMjQ4YTBkMzEwNjM2MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl3ZYqwpSa+RpGNGK/N4ZPltqBUm
LsUih6d/dfHfqhuhPUJZoPC1LHfmN8dEYhPEAmKdRR0m/7jqpEwbMvKVpdPEU8a7
PDvQdqpXWZd3zAhLuwZ8Ebh7WKGO6fCyzegsZOVUY8GU9Orvx7RxBmfgtoon/dQn
ETllyIPAsrvpqUFmpArolXyK5eGO0TNHnvw0DbPDi9Em0CPzw72gmwyrDcbIrIdj
ihbIu7821WBdozbBS+p/0N5vj+EnRSGtTJXpd4FhOoZAY60eHgUBjBGPbW1xOKVe
wXnWEQipLVRmIIH2KqMuM7KeK7TtiWwzYJ6FDd/McFhnRQFf7UoJkxhxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/kRPeRwBpuSN67fBJIoNMQY2IiMB8GA1UdIwQY
MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt
NGViMjY5NWE4NjhkLzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk
LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyxx7ct0
ZAMlDWrty+0wYIr8tRQptZgaqpnMRJkW25R8vLz4D4Dp6YaSgLPUoSJqNe2uBBrK
sBohDkvIX/76/zKOvpWtLcgH5Wcl8vrUP62UF6gcz5alrC5BvUmPpT3Qiu+9z2pb
RsVf3EIejzJcMMm0oSCBOLkj2/ms2ASsVL8sT3f7iQ002uuoBO5jdayEtJzd42BS
x25UM7HoWAPQO2R30ojMkAfcXGzSFjJ0tFYtHNQKJeoHxa1mgz3xbCb5Z+JjF/tc
bQ3u9/W9rz9BXDlsRnrBhEOkXPNIHpPSDiTLGViznH4h2VSKb6lNVQPYS3AHnwdB
XyGoMG611A12Mw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 17:22:07 2026 by rpki-client