Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: wijzQ2aPykA4JbZgDmhuKma59nBeX08FI7MmsgnVO+c=
Subject key identifier: 90:45:AD:19:97:5E:33:02:6C:98:D4:18:A8:39:26:BD:3D:48:58:FB
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 01A1DB020CADFA55F24FFA67B7886513E5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 1122
Signing time: Sat 14 Nov 2026 17:01:46 +0000
Manifest this update: Sat 14 Nov 2026 17:01:46 +0000
Manifest next update: Sun 15 Nov 2026 17:01:46 +0000
Files and hashes: 1: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (hash: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: +L1b1srTc5WfUvRPn8ZzmeVUyNarroVqRfLncmNSyko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:0c:ad:fa:55:f2:4f:fa:67:b7:88:65:13:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Nov 14 17:01:46 2026 GMT
Not After : Nov 15 17:01:46 2026 GMT
Subject: CN=9045ad19975e33026c98d418a83926bd3d4858fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:9e:95:f8:1d:61:3a:df:33:e7:4d:fd:49:
da:26:80:68:be:a0:f5:86:c2:e4:5e:3b:17:00:ee:
67:23:22:1a:54:7b:10:1b:e7:81:39:00:99:3c:33:
e2:c3:55:90:93:37:8d:63:00:77:17:b9:4e:b7:10:
8a:55:45:e7:44:7a:30:d1:6b:74:2a:a5:ef:ae:84:
0c:53:99:61:e3:55:51:8a:c5:be:c5:25:7f:53:20:
23:56:dd:f7:0b:98:78:63:7c:c3:5d:73:0e:d7:3f:
44:f4:4c:ed:3e:a6:6a:85:05:6d:f2:65:b9:9a:f9:
cf:08:23:20:0f:9f:fe:37:73:b9:de:5b:32:83:54:
f0:30:90:b6:6e:0e:cb:98:46:7a:51:4b:6a:d2:6f:
ab:70:51:9a:c7:29:5d:8f:49:16:23:0c:22:5b:1b:
75:5b:64:d3:0a:a6:cd:19:cd:c1:aa:b2:aa:6d:e1:
5e:86:05:2d:c4:31:0c:3e:51:52:4d:d2:93:78:ba:
40:a3:12:b4:4f:81:de:38:4e:a6:3d:87:76:77:7f:
66:f4:28:01:dd:c9:b3:10:af:99:35:ec:01:cd:c8:
68:26:0a:46:de:61:3d:52:0b:c8:2e:4d:ba:ac:32:
cb:9f:d9:03:f1:14:2f:eb:02:4c:95:69:d8:a9:e3:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:AD:19:97:5E:33:02:6C:98:D4:18:A8:39:26:BD:3D:48:58:FB
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:70:08:f9:3a:77:72:8f:9b:47:74:dd:d4:20:89:50:c0:81:
06:9e:b2:61:d7:38:8a:18:0a:70:c4:41:aa:59:90:61:75:98:
7b:fe:9c:7e:74:b8:30:b0:82:cc:6c:3a:6f:15:3a:ba:9d:b1:
2f:a3:7b:37:ba:8c:ad:24:f2:6e:c2:58:30:bd:45:d6:31:fd:
f1:d8:d7:c0:5d:02:21:4e:11:79:af:62:e0:df:df:51:6a:7a:
28:fe:1f:96:49:c5:4b:9a:8d:e1:d0:68:b2:eb:db:a8:bd:07:
ae:a5:25:61:ad:e0:d3:d2:ec:e4:5d:f4:e9:fb:73:76:26:41:
b6:b0:79:93:87:4e:e4:28:2b:60:85:d5:0c:db:26:be:a5:f0:
03:37:59:c8:91:f8:a5:a1:27:17:68:2c:d4:c9:e5:e3:12:53:
aa:89:f2:7d:52:9e:79:0f:22:fb:32:80:f4:78:1a:26:aa:fd:
8f:cd:b0:f6:ee:e2:50:da:03:ad:8c:0d:c4:b3:d0:7a:d5:26:
04:72:73:e3:40:19:fd:d0:c0:6b:37:d6:21:ac:d5:03:22:89:
87:c5:ee:5f:f8:55:a4:e9:9a:56:69:93:ad:0d:07:59:bd:2b:
bd:b3:7a:59:4d:9a:77:13:89:a9:43:3e:54:31:86:f2:6c:51:
85:06:b8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbAgyt+lXyT/pnt4hlE+X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjYxMTE0MTcwMTQ2WhcNMjYxMTE1MTcwMTQ2WjAzMTEwLwYDVQQD
Eyg5MDQ1YWQxOTk3NWUzMzAyNmM5OGQ0MThhODM5MjZiZDNkNDg1OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx2elfgdYTrfM+dN/UnaJoBovqD1
hsLkXjsXAO5nIyIaVHsQG+eBOQCZPDPiw1WQkzeNYwB3F7lOtxCKVUXnRHow0Wt0
KqXvroQMU5lh41VRisW+xSV/UyAjVt33C5h4Y3zDXXMO1z9E9EztPqZqhQVt8mW5
mvnPCCMgD5/+N3O53lsyg1TwMJC2bg7LmEZ6UUtq0m+rcFGaxyldj0kWIwwiWxt1
W2TTCqbNGc3BqrKqbeFehgUtxDEMPlFSTdKTeLpAoxK0T4HeOE6mPYd2d39m9CgB
3cmzEK+ZNewBzchoJgpG3mE9UgvILk26rDLLn9kD8RQv6wJMlWnYqeMjiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBFrRmXXjMCbJjUGKg5Jr09SFj7MB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnAI+Tp3
co+bR3Td1CCJUMCBBp6yYdc4ihgKcMRBqlmQYXWYe/6cfnS4MLCCzGw6bxU6up2x
L6N7N7qMrSTybsJYML1F1jH98djXwF0CIU4Rea9i4N/fUWp6KP4flknFS5qN4dBo
suvbqL0HrqUlYa3g09Ls5F306ftzdiZBtrB5k4dO5CgrYIXVDNsmvqXwAzdZyJH4
paEnF2gs1Mnl4xJTqonyfVKeeQ8i+zKA9HgaJqr9j82w9u7iUNoDrYwNxLPQetUm
BHJz40AZ/dDAazfWIazVAyKJh8XuX/hVpOmaVmmTrQ0HWb0rvbN6WU2adxOJqUM+
VDGG8mxRhQa4ZQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:49:40 2026 by rpki-client