Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: GshOQlbxBLDqeOOpdXB6zuXo95GWjgh6YFcBeJbV2as=
Subject key identifier: 11:CB:77:B5:34:43:5C:00:FC:54:BB:56:3A:C6:E6:01:CD:38:45:1B
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 01A12A6857DC9C4CE673A202D4EDFC68DEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 1048
Signing time: Sun 11 Oct 2026 10:00:43 +0000
Manifest this update: Sun 11 Oct 2026 10:00:43 +0000
Manifest next update: Mon 12 Oct 2026 10:00:43 +0000
Files and hashes: 1: QOvuUL6JmFjMR4OHkrweykbMl00.roa (hash: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA=)
2: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (hash: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: dHeSXkXwqXOOtwVBgpAMtcFIUCp4TkuHsk4STN7jVd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:57:dc:9c:4c:e6:73:a2:02:d4:ed:fc:68:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Oct 11 10:00:43 2026 GMT
Not After : Oct 12 10:00:43 2026 GMT
Subject: CN=11cb77b534435c00fc54bb563ac6e601cd38451b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:8e:52:ce:ec:13:0c:d3:e8:b4:ac:23:a8:
f4:99:ad:0f:5f:15:9c:93:ff:90:3e:29:89:2d:75:
b8:ee:cf:27:a8:ab:4b:ff:33:6b:7c:a0:2f:39:6c:
64:bb:d9:0a:6f:2f:78:bb:c4:66:2b:b8:27:4e:a6:
6d:61:dc:b8:95:84:77:4d:71:e6:2c:f7:34:15:f2:
e6:d1:6a:5c:2f:57:30:e5:37:ce:23:d1:f1:05:6c:
1d:3a:83:46:7a:29:49:ef:2e:55:6e:6c:b5:ce:05:
f1:6b:2f:a3:4c:0e:b9:ac:9e:22:21:79:ef:6f:1b:
8c:9a:34:fe:53:f7:81:c2:c3:46:71:1c:c4:83:10:
5b:3c:24:31:55:e8:cc:a7:21:ed:21:e9:4c:aa:53:
c6:42:b9:a0:ab:8c:42:13:0c:8a:7c:9e:12:37:9c:
44:ed:f3:ec:a6:d4:ac:15:2d:3c:1c:f1:64:e8:f9:
ae:83:b4:14:f5:f8:2f:2f:ef:80:11:af:93:90:e9:
7d:5f:3e:0f:e6:57:4a:8d:b1:9a:7f:9e:c9:93:a4:
73:09:d8:8d:35:cb:91:25:d4:00:4e:93:43:d6:ae:
c2:44:4c:5f:f3:ce:70:63:50:d3:a1:d9:91:32:d4:
87:64:98:44:4a:9d:5c:e5:3c:99:11:52:7b:e2:cb:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:77:B5:34:43:5C:00:FC:54:BB:56:3A:C6:E6:01:CD:38:45:1B
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2f:14:b3:7d:bb:df:17:c0:66:5a:93:1a:49:4b:5b:49:60:
83:8f:32:62:eb:ff:2b:df:72:c5:17:c7:7c:e7:9b:19:bf:c0:
f1:01:13:b1:ef:93:f0:f8:4d:ab:0c:4b:74:02:dd:df:32:4d:
b9:4b:fb:27:7a:f8:aa:cc:c4:24:e7:32:95:47:60:77:38:09:
d7:95:29:82:9a:9e:61:6c:33:d2:b6:0f:be:0c:ec:68:4d:10:
e1:45:fc:b8:e1:8c:42:f5:05:9c:00:d3:5a:e2:7f:2c:a0:84:
7e:e5:3a:a5:12:c2:bb:80:16:b7:0b:a2:ac:47:28:1f:86:b2:
76:92:30:a7:76:e5:e3:2c:d8:a1:cd:ce:f2:8c:01:07:ce:e4:
24:3a:03:6e:b5:58:24:64:a9:45:54:ab:ef:4d:4e:17:4e:b3:
45:3e:cc:9d:5a:fe:c8:9f:ca:d5:4f:03:61:5f:3b:57:93:9d:
73:81:89:b2:79:09:54:6b:7d:f6:72:6c:08:c8:cf:17:81:b0:
11:55:35:53:51:88:f4:89:f4:59:39:e2:06:d9:f6:0f:67:25:
6f:9c:5b:08:6a:e9:32:4f:96:18:fa:bc:a5:50:d6:24:dc:b3:
16:cc:de:6f:d7:cb:22:14:28:3f:e7:15:d5:51:91:62:a4:00:
ec:f2:9b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaFfcnEzmc6IC1O38aN6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjYxMDExMTAwMDQzWhcNMjYxMDEyMTAwMDQzWjAzMTEwLwYDVQQD
EygxMWNiNzdiNTM0NDM1YzAwZmM1NGJiNTYzYWM2ZTYwMWNkMzg0NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWWOUs7sEwzT6LSsI6j0ma0PXxWc
k/+QPimJLXW47s8nqKtL/zNrfKAvOWxku9kKby94u8RmK7gnTqZtYdy4lYR3TXHm
LPc0FfLm0WpcL1cw5TfOI9HxBWwdOoNGeilJ7y5Vbmy1zgXxay+jTA65rJ4iIXnv
bxuMmjT+U/eBwsNGcRzEgxBbPCQxVejMpyHtIelMqlPGQrmgq4xCEwyKfJ4SN5xE
7fPsptSsFS08HPFk6Pmug7QU9fgvL++AEa+TkOl9Xz4P5ldKjbGaf57Jk6RzCdiN
NcuRJdQATpND1q7CRExf885wY1DTodmRMtSHZJhESp1c5TyZEVJ74sslEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHLd7U0Q1wA/FS7VjrG5gHNOEUbMB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1
LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATi8Us327
3xfAZlqTGklLW0lgg48yYuv/K99yxRfHfOebGb/A8QETse+T8PhNqwxLdALd3zJN
uUv7J3r4qszEJOcylUdgdzgJ15UpgpqeYWwz0rYPvgzsaE0Q4UX8uOGMQvUFnADT
WuJ/LKCEfuU6pRLCu4AWtwuirEcoH4aydpIwp3bl4yzYoc3O8owBB87kJDoDbrVY
JGSpRVSr701OF06zRT7MnVr+yJ/K1U8DYV87V5Odc4GJsnkJVGt99nJsCMjPF4Gw
EVU1U1GI9In0WTniBtn2D2clb5xbCGrpMk+WGPq8pVDWJNyzFszeb9fLIhQoP+cV
1VGRYqQA7PKbKA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:55:21 2026 by rpki-client