Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: QiCfE7Jrb3hF+hF6yEQ/u2Y8WslJldIfmTQg7Pnz3vk=
Subject key identifier: 21:C0:13:40:F2:CE:C7:21:4F:DA:AE:57:62:C3:6E:F4:E1:40:57:FF
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 01A0DBA9BC15568A7444AFAE8332426EFD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 1207
Signing time: Sat 26 Sep 2026 03:02:09 +0000
Manifest this update: Sat 26 Sep 2026 03:02:09 +0000
Manifest next update: Sun 27 Sep 2026 03:02:09 +0000
Files and hashes: 1: IN4aftU4mxLp5KA49YCP9vHKTic.asa (hash: 3oIJ+Tz8iLDJDKYlcLRCqkZSodGIL5xewYbZeBiTC/4=)
2: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: R0v1bpYQep6ovAyIFCgEbnIq2d8t9+DvszfFUFldJms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:bc:15:56:8a:74:44:af:ae:83:32:42:6e:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Sep 26 03:02:09 2026 GMT
Not After : Sep 27 03:02:09 2026 GMT
Subject: CN=21c01340f2cec7214fdaae5762c36ef4e14057ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:ad:1d:98:d5:50:99:86:d5:e3:f9:49:33:
9d:e1:e7:9d:4c:b9:0d:56:2b:f7:b8:0d:43:62:42:
3d:b9:5f:ea:04:76:a5:ad:87:8e:12:57:aa:78:0d:
1c:d5:17:2a:75:70:f0:b4:b3:b2:d4:b1:77:f7:81:
28:be:30:75:81:3e:62:9b:d0:cf:a4:ec:cd:d5:e5:
35:b5:b1:3b:47:6f:8d:83:60:ca:dc:07:d0:9c:11:
76:c7:ec:28:a3:14:ea:9f:03:1d:aa:3c:72:7c:f7:
02:1a:43:88:e6:2d:14:8b:32:95:0f:9a:c2:ed:01:
a8:1c:3f:d9:3b:f0:79:b6:98:0e:e8:9c:77:b3:1c:
f4:c4:e1:94:9a:68:ad:b9:8a:c2:e3:64:80:5a:7a:
17:3d:97:9b:79:98:a9:3a:8a:9e:6c:e6:1b:fe:65:
c4:ac:20:99:f6:c0:fd:58:ab:04:ee:60:0d:dd:9a:
27:56:5e:19:a9:d6:33:ca:a4:4c:2c:e0:66:01:96:
56:b3:51:8f:9d:60:67:a7:b0:3f:f3:c9:df:64:6c:
72:d3:6f:7d:12:71:e1:cb:34:81:43:50:a1:ba:7c:
da:45:4f:31:10:40:4f:a1:4a:ec:ee:77:60:2b:46:
f1:56:01:f9:5f:0d:e8:83:54:b7:a7:bd:ae:32:31:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:13:40:F2:CE:C7:21:4F:DA:AE:57:62:C3:6E:F4:E1:40:57:FF
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:17:e9:bd:d8:b0:4a:a6:bb:04:b9:03:71:48:98:3f:ef:
ef:06:70:58:ca:27:09:8e:02:10:81:28:e1:8d:ea:57:8c:b1:
89:80:95:c0:31:21:d9:57:a3:46:ec:f0:8d:f8:9e:ee:5f:88:
75:3d:8b:74:e8:78:fb:37:fd:52:9e:2d:28:9b:f4:b0:a1:c7:
ee:e8:7f:f5:00:a4:d7:8a:d8:cf:59:16:cf:d8:15:f0:f1:30:
72:d1:65:5d:76:af:84:63:de:8c:ba:1d:62:6c:a5:7f:7e:96:
02:17:80:56:ab:68:14:97:66:75:b5:01:6d:31:0e:02:69:22:
b5:6f:f7:b0:c7:de:50:c3:61:a8:9c:1c:b6:f0:e2:0b:0f:8a:
5c:bf:ae:61:18:2e:38:7c:89:5e:2f:b9:81:56:2d:0f:10:86:
b8:7e:54:04:5d:4e:3a:56:ac:ed:9c:26:7b:8f:bf:bb:88:91:
20:f1:5d:03:4c:5c:c0:d0:61:57:f7:f4:b2:96:8c:05:c2:74:
14:80:05:ec:cc:70:18:57:ac:58:d1:70:cf:9d:2c:b1:2c:3e:
4b:18:ac:61:78:43:7d:df:fa:46:29:c8:70:55:f2:57:95:2f:
47:b9:b6:0f:51:24:95:de:0e:ce:84:45:91:0c:6b:d6:48:00:
56:fb:e0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqbwVVop0RK+ugzJCbv1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj
NjhiN2IwHhcNMjYwOTI2MDMwMjA5WhcNMjYwOTI3MDMwMjA5WjAzMTEwLwYDVQQD
EygyMWMwMTM0MGYyY2VjNzIxNGZkYWFlNTc2MmMzNmVmNGUxNDA1N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3atHZjVUJmG1eP5STOd4eedTLkN
Viv3uA1DYkI9uV/qBHalrYeOEleqeA0c1RcqdXDwtLOy1LF394EovjB1gT5im9DP
pOzN1eU1tbE7R2+Ng2DK3AfQnBF2x+wooxTqnwMdqjxyfPcCGkOI5i0UizKVD5rC
7QGoHD/ZO/B5tpgO6Jx3sxz0xOGUmmituYrC42SAWnoXPZebeZipOoqebOYb/mXE
rCCZ9sD9WKsE7mAN3ZonVl4ZqdYzyqRMLOBmAZZWs1GPnWBnp7A/88nfZGxy0299
EnHhyzSBQ1ChunzaRU8xEEBPoUrs7ndgK0bxVgH5Xw3og1S3p72uMjGidQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHAE0DyzschT9quV2LDbvThQFf/MB8GA1UdIwQY
MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt
YzQ1MDJkYTg2OWJiLzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi
LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUsX6b3Y
sEqmuwS5A3FImD/v7wZwWMonCY4CEIEo4Y3qV4yxiYCVwDEh2VejRuzwjfie7l+I
dT2LdOh4+zf9Up4tKJv0sKHH7uh/9QCk14rYz1kWz9gV8PEwctFlXXavhGPejLod
Ymylf36WAheAVqtoFJdmdbUBbTEOAmkitW/3sMfeUMNhqJwctvDiCw+KXL+uYRgu
OHyJXi+5gVYtDxCGuH5UBF1OOlas7Zwme4+/u4iRIPFdA0xcwNBhV/f0spaMBcJ0
FIAF7MxwGFesWNFwz50ssSw+SxisYXhDfd/6RinIcFXyV5UvR7m2D1Ekld4OzoRF
kQxr1kgAVvvgAw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:10 2026 by rpki-client