Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: orEG3KR5yTRfNdpg4wxW14P2hElQC2dywb3O1bK9Tyw=
Subject key identifier: 88:97:FE:28:F6:6C:40:90:5A:D0:BB:57:73:52:51:0E:F7:C1:26:99
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 01A1DDCC38567B0252841A9407FA10254EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 13A9
Signing time: Sun 15 Nov 2026 06:01:50 +0000
Manifest this update: Sun 15 Nov 2026 06:01:50 +0000
Manifest next update: Mon 16 Nov 2026 06:01:50 +0000
Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: A0EvzUu0dD+J+DUX39TUjOw28OaoKRh0dbj14Nh0yeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:38:56:7b:02:52:84:1a:94:07:fa:10:25:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Nov 15 06:01:50 2026 GMT
Not After : Nov 16 06:01:50 2026 GMT
Subject: CN=8897fe28f66c40905ad0bb577352510ef7c12699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:80:94:47:21:90:8d:3b:6b:8f:b1:03:ea:
58:69:6f:65:5b:01:71:9c:33:1e:eb:2e:16:5d:52:
0e:4a:9e:bb:b5:75:57:4e:ed:14:81:0d:04:56:ef:
5a:07:58:5c:5b:44:44:c0:04:b4:39:cf:d0:8e:25:
32:d5:3d:5e:80:3e:ad:fb:79:ff:0a:4f:af:47:d3:
16:42:2c:88:c1:10:36:43:35:f6:3c:fc:3e:be:4a:
65:0e:26:fd:ff:51:4f:33:c0:6c:d8:42:68:5f:9b:
53:c0:d6:67:ad:07:3c:4b:0f:2f:31:8d:16:fe:09:
19:3c:56:31:52:22:32:d5:b8:1b:d0:a3:ba:1c:23:
5b:b3:8b:a5:1a:78:18:74:c3:8e:aa:0d:21:17:bf:
68:70:ac:5e:81:c6:b0:3e:68:aa:49:d7:d8:fc:10:
2f:d4:26:02:1e:47:61:cd:4a:b2:22:c6:b3:b6:3c:
0c:33:25:67:67:a7:ca:17:1e:09:c6:7e:0a:29:44:
0d:7f:6c:b8:3a:45:b5:c1:79:bc:da:1a:65:36:ad:
7f:a8:34:59:12:c2:3c:f6:ce:87:13:21:a4:5f:94:
fc:ef:c4:75:2d:9e:e6:06:6c:19:68:f6:ff:b7:be:
c6:91:0d:93:ad:1b:75:6f:73:a2:96:06:10:b8:16:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:FE:28:F6:6C:40:90:5A:D0:BB:57:73:52:51:0E:F7:C1:26:99
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:a5:ab:2d:44:7d:00:ce:ea:de:d6:87:c4:91:c8:3e:47:
58:24:f8:43:54:5e:5a:5f:ce:e5:cd:57:ad:6f:df:f2:e0:bd:
5c:11:5c:f2:ce:4b:38:06:51:22:34:05:6c:83:38:d7:3c:70:
e5:98:ca:7b:e7:4e:e6:c5:29:04:27:20:32:c3:ae:b6:3b:a9:
65:60:11:31:6d:6c:55:fa:25:a0:93:b5:86:0b:94:65:bc:cd:
59:eb:e8:6e:43:f4:cf:e1:59:27:77:c4:cf:29:18:e6:0e:3e:
e8:61:ba:f9:4e:99:c8:78:4d:14:44:39:3f:e8:00:29:7b:7e:
08:e2:90:d4:e9:fc:62:22:48:68:a1:43:5c:ad:77:90:e2:37:
3f:9d:93:b4:1a:d1:01:31:2b:11:79:8b:a7:67:f8:aa:9f:45:
74:d6:03:a5:db:99:fd:f8:fc:b9:4c:c2:00:e2:7d:6d:fe:42:
6d:64:12:97:9b:b6:81:54:02:44:7b:f2:88:a2:73:92:d5:6a:
71:f6:1e:63:19:6f:55:e5:d1:83:7e:25:d1:99:be:c9:e8:1d:
52:77:61:ce:8f:86:24:9f:79:92:3c:7d:96:87:31:59:9e:2b:
40:0a:ea:5f:e8:71:36:47:7f:c6:71:de:bc:48:07:48:38:af:
9e:df:02:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzDhWewJShBqUB/oQJU6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi
YjQ1YTQwHhcNMjYxMTE1MDYwMTUwWhcNMjYxMTE2MDYwMTUwWjAzMTEwLwYDVQQD
Eyg4ODk3ZmUyOGY2NmM0MDkwNWFkMGJiNTc3MzUyNTEwZWY3YzEyNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJyAlEchkI07a4+xA+pYaW9lWwFx
nDMe6y4WXVIOSp67tXVXTu0UgQ0EVu9aB1hcW0REwAS0Oc/QjiUy1T1egD6t+3n/
Ck+vR9MWQiyIwRA2QzX2PPw+vkplDib9/1FPM8Bs2EJoX5tTwNZnrQc8Sw8vMY0W
/gkZPFYxUiIy1bgb0KO6HCNbs4ulGngYdMOOqg0hF79ocKxegcawPmiqSdfY/BAv
1CYCHkdhzUqyIsaztjwMMyVnZ6fKFx4Jxn4KKUQNf2y4OkW1wXm82hplNq1/qDRZ
EsI89s6HEyGkX5T878R1LZ7mBmwZaPb/t77GkQ2TrRt1b3OilgYQuBatHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiX/ij2bECQWtC7V3NSUQ73wSaZMB8GA1UdIwQY
MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt
N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk
LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGASlqy1E
fQDO6t7Wh8SRyD5HWCT4Q1ReWl/O5c1XrW/f8uC9XBFc8s5LOAZRIjQFbIM41zxw
5ZjKe+dO5sUpBCcgMsOutjupZWARMW1sVfoloJO1hguUZbzNWevobkP0z+FZJ3fE
zykY5g4+6GG6+U6ZyHhNFEQ5P+gAKXt+COKQ1On8YiJIaKFDXK13kOI3P52TtBrR
ATErEXmLp2f4qp9FdNYDpduZ/fj8uUzCAOJ9bf5CbWQSl5u2gVQCRHvyiKJzktVq
cfYeYxlvVeXRg34l0Zm+yegdUndhzo+GJJ95kjx9locxWZ4rQArqX+hxNkd/xnHe
vEgHSDivnt8CDg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:18 2026 by rpki-client