Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: mDhL/7CVuB+XACK9GjnHXNOKL7y5ik04Yr9QGVRo9M8=
Subject key identifier: AE:71:34:14:39:9A:45:71:BA:62:08:F4:2B:D0:4D:2D:F5:57:8D:97
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01A0DA281B16A570D8FE64D69128BB7CB482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0FBB
Signing time: Fri 25 Sep 2026 20:00:56 +0000
Manifest this update: Fri 25 Sep 2026 20:00:56 +0000
Manifest next update: Sat 26 Sep 2026 20:00:56 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: MXXMf7g7/5PR7B/HRy6sH3pHJ1Q4whrwWEJ+Rj7Iu8k=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:1b:16:a5:70:d8:fe:64:d6:91:28:bb:7c:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Sep 25 20:00:56 2026 GMT
Not After : Sep 26 20:00:56 2026 GMT
Subject: CN=ae713414399a4571ba6208f42bd04d2df5578d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:51:dc:7a:4d:62:8c:d2:82:ba:47:e0:0d:
ea:dc:72:11:b2:ea:eb:f0:0c:46:ba:50:f1:5b:7c:
4e:47:71:82:87:45:0d:83:15:9f:32:4f:67:49:f8:
d2:fa:18:d9:34:45:b5:50:db:ed:9f:92:8d:79:2f:
a6:22:5e:51:08:33:58:e3:8d:b9:f7:1d:5d:ab:86:
50:45:e5:3b:16:8f:01:b3:e4:20:50:26:44:f7:bb:
5f:71:3b:4d:11:d1:a0:57:21:2f:40:e1:cd:e4:b5:
d8:e6:47:cf:92:4b:73:9e:11:27:7e:55:12:18:0f:
05:90:8c:0a:18:1c:0c:3a:97:e2:a2:f7:b6:a7:70:
68:75:ab:cd:03:5c:04:bd:16:17:84:8a:57:0b:e0:
0c:1c:e3:e3:36:2e:7f:4c:54:7f:28:5d:0e:01:7c:
c8:84:80:c6:aa:55:a6:10:79:3d:b5:7f:6a:c5:01:
5a:ba:48:45:c4:29:07:1c:c4:d5:24:49:66:ca:bc:
5e:1d:fd:9e:c3:7d:f0:e2:2f:c8:bf:7a:73:46:d3:
8e:8c:b0:33:c9:2d:8d:c8:8b:83:48:5b:80:62:de:
02:2c:49:2e:8f:98:27:e2:a9:de:a7:3f:f7:12:41:
bb:66:e0:ca:ff:09:fb:87:bb:d3:76:ac:07:31:3d:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:34:14:39:9A:45:71:BA:62:08:F4:2B:D0:4D:2D:F5:57:8D:97
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:7f:b8:86:a1:78:86:a1:45:ca:41:e8:28:3f:6a:66:19:
94:12:e2:c5:c3:5e:be:a9:68:e4:d6:30:50:a7:bc:c8:db:f1:
89:7c:79:ba:dc:50:7a:ca:13:0d:2b:5c:55:ce:c1:0e:21:df:
fb:19:5e:c8:78:71:39:51:09:23:43:e6:4e:fd:23:6b:e1:85:
70:32:09:2a:0a:2c:27:d5:3b:03:e0:7d:63:69:1c:5f:9f:33:
d0:1a:1b:62:e8:8d:ae:dc:96:f0:20:81:fe:a5:3c:a0:e3:36:
e8:69:de:ae:b4:f6:2d:d3:ee:95:a0:c6:fe:fc:b5:3d:ba:2b:
69:38:20:c1:fa:0e:b9:3d:2c:e8:a4:81:9a:70:87:2e:40:6c:
75:f5:90:c3:ed:e6:a9:16:2d:fa:61:a6:7d:ff:41:ce:fe:77:
63:b9:88:69:8c:f7:43:23:bb:cb:7a:f1:3a:7b:45:e1:20:f6:
1f:30:61:90:cb:e3:43:5e:cb:58:9f:01:89:99:88:4b:7b:0e:
f6:67:5b:a9:99:13:20:e4:95:ca:cf:47:cc:e1:87:ce:15:e9:
57:50:77:3d:14:1c:7c:5b:d1:40:e5:e2:a7:37:f2:db:ff:5d:
68:8e:f8:b7:25:27:3d:f3:d0:bd:0c:28:e5:4f:fe:29:dc:f3:
36:0f:bc:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKBsWpXDY/mTWkSi7fLSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjYwOTI1MjAwMDU2WhcNMjYwOTI2MjAwMDU2WjAzMTEwLwYDVQQD
EyhhZTcxMzQxNDM5OWE0NTcxYmE2MjA4ZjQyYmQwNGQyZGY1NTc4ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS1R3HpNYozSgrpH4A3q3HIRsurr
8AxGulDxW3xOR3GCh0UNgxWfMk9nSfjS+hjZNEW1UNvtn5KNeS+mIl5RCDNY4425
9x1dq4ZQReU7Fo8Bs+QgUCZE97tfcTtNEdGgVyEvQOHN5LXY5kfPkktznhEnflUS
GA8FkIwKGBwMOpfiove2p3BodavNA1wEvRYXhIpXC+AMHOPjNi5/TFR/KF0OAXzI
hIDGqlWmEHk9tX9qxQFaukhFxCkHHMTVJElmyrxeHf2ew33w4i/Iv3pzRtOOjLAz
yS2NyIuDSFuAYt4CLEkuj5gn4qnepz/3EkG7ZuDK/wn7h7vTdqwHMT2OlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5xNBQ5mkVxumII9CvQTS31V42XMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbx/uIah
eIahRcpB6Cg/amYZlBLixcNevqlo5NYwUKe8yNvxiXx5utxQesoTDStcVc7BDiHf
+xleyHhxOVEJI0PmTv0ja+GFcDIJKgosJ9U7A+B9Y2kcX58z0BobYuiNrtyW8CCB
/qU8oOM26GnerrT2LdPulaDG/vy1PboraTggwfoOuT0s6KSBmnCHLkBsdfWQw+3m
qRYt+mGmff9Bzv53Y7mIaYz3QyO7y3rxOntF4SD2HzBhkMvjQ17LWJ8BiZmIS3sO
9mdbqZkTIOSVys9HzOGHzhXpV1B3PRQcfFvRQOXipzfy2/9daI74tyUnPfPQvQwo
5U/+KdzzNg+8Dw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:59:23 2026 by rpki-client