
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: p+IOF9G9y0XaWZokC37XaSF5YdPNH1UD52jFYo17JxE=
Subject key identifier: 01:14:84:C3:38:DA:0E:38:7C:73:C0:BD:FF:34:6F:FB:BA:29:D2:10
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 01A0EC2F60CE766390BD611EA5C856A8DE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 1214
Signing time: Tue 29 Sep 2026 08:02:02 +0000
Manifest this update: Tue 29 Sep 2026 08:02:02 +0000
Manifest next update: Wed 30 Sep 2026 08:02:02 +0000
Files and hashes: 1: xybwCV1hWwBn4MLDW9HYu0-_w6w.asa (hash: t3PVU0MZBtOUV0rI7OL9UqMXFGu/+sqRp88+GVOPUEU=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: adt59h8SGzFsjB2FjAenYgvMAA+i3KZAHrtiQH4YW00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:60:ce:76:63:90:bd:61:1e:a5:c8:56:a8:de:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Sep 29 08:02:02 2026 GMT
Not After : Sep 30 08:02:02 2026 GMT
Subject: CN=011484c338da0e387c73c0bdff346ffbba29d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:17:c7:d5:33:ef:69:9a:3c:f4:96:92:46:
02:b7:dd:fa:e0:43:0b:c1:85:69:68:f0:8f:a9:3e:
46:0b:a7:d2:34:7b:17:26:4a:60:51:70:8f:6d:21:
d9:f5:ca:f2:fd:17:cd:5c:1d:38:0e:c1:7e:84:0d:
b4:ba:68:0d:ce:73:e7:85:5d:e6:58:82:59:5a:c3:
a5:38:eb:9b:b4:e0:87:bf:45:5c:3b:82:72:4f:9d:
b2:78:63:fe:2c:7e:1b:6f:8a:f6:42:82:83:cf:91:
7c:11:89:8b:cf:27:d2:1e:2e:f2:b1:3e:f6:4e:ae:
ba:f9:92:1a:2c:25:e5:f7:f8:41:b2:dd:07:42:64:
ed:89:f6:36:b0:f1:f7:a0:82:50:b5:9c:6f:75:89:
b8:02:9e:73:66:de:f6:59:9b:e1:75:7e:dd:ec:b6:
6b:b7:ab:bc:bc:34:31:79:21:a1:c7:5a:f7:3f:61:
8c:33:28:f6:fa:ec:e9:1e:c9:a5:34:b0:3e:07:85:
c1:fd:2c:26:e4:21:12:1a:af:b2:b8:30:c8:cd:c3:
44:54:82:df:c4:cf:eb:c2:81:c5:74:6d:99:72:0c:
3b:54:53:f2:79:86:d9:3d:f5:28:ea:76:60:a2:a0:
32:1a:55:a0:5d:5b:29:41:b5:1a:d9:a3:e6:80:f9:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:84:C3:38:DA:0E:38:7C:73:C0:BD:FF:34:6F:FB:BA:29:D2:10
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:24:c7:06:7b:56:4a:b1:7a:e1:4c:91:eb:a9:44:ee:40:17:
3a:6f:b8:e9:91:91:4e:d1:1c:b0:86:9e:68:14:fb:c4:a3:4b:
e0:32:ae:66:07:04:13:ce:29:5f:e4:ac:4f:80:91:d5:0d:7a:
4e:53:52:b2:0b:88:5c:a8:26:9c:97:a3:8d:11:42:57:32:52:
e3:2a:ed:f7:d2:ae:41:9f:1f:d9:df:41:a1:94:8d:0e:6c:88:
cb:0d:f3:66:b9:66:f4:be:c6:89:d0:3c:ff:17:c0:5a:5f:23:
e1:a3:05:ad:b2:07:d9:6e:d3:7e:b6:2c:cc:9f:15:67:18:f9:
f8:78:ad:f0:de:6e:fa:2d:1f:89:31:ce:0a:35:e5:79:08:ef:
04:2a:0b:4a:a9:c9:46:d1:74:8e:10:ee:50:97:1c:24:52:4e:
9f:c8:78:69:89:b2:d1:2b:26:ec:df:25:44:95:60:3b:11:1b:
f6:05:fe:2f:23:ba:a8:23:ab:d4:98:74:25:6e:f7:bb:50:de:
62:8b:20:10:09:11:5b:70:96:c6:55:87:d4:8e:f5:61:97:c2:
09:dc:ed:85:48:53:78:21:59:91:38:16:81:26:a2:fc:b0:05:
4c:31:8b:52:2c:51:88:a4:28:50:8b:06:c9:64:cf:4b:48:ce:
fe:2a:a1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsL2DOdmOQvWEepchWqN6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3
Yzg0OTcwHhcNMjYwOTI5MDgwMjAyWhcNMjYwOTMwMDgwMjAyWjAzMTEwLwYDVQQD
EygwMTE0ODRjMzM4ZGEwZTM4N2M3M2MwYmRmZjM0NmZmYmJhMjlkMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K8Xx9Uz72maPPSWkkYCt9364EML
wYVpaPCPqT5GC6fSNHsXJkpgUXCPbSHZ9cry/RfNXB04DsF+hA20umgNznPnhV3m
WIJZWsOlOOubtOCHv0VcO4JyT52yeGP+LH4bb4r2QoKDz5F8EYmLzyfSHi7ysT72
Tq66+ZIaLCXl9/hBst0HQmTtifY2sPH3oIJQtZxvdYm4Ap5zZt72WZvhdX7d7LZr
t6u8vDQxeSGhx1r3P2GMMyj2+uzpHsmlNLA+B4XB/Swm5CESGq+yuDDIzcNEVILf
xM/rwoHFdG2Zcgw7VFPyeYbZPfUo6nZgoqAyGlWgXVspQbUa2aPmgPkilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEUhMM42g44fHPAvf80b/u6KdIQMB8GA1UdIwQY
MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt
Mjk3ZDUyZjBjMjgzLzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz
LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3CTHBntW
SrF64UyR66lE7kAXOm+46ZGRTtEcsIaeaBT7xKNL4DKuZgcEE84pX+SsT4CR1Q16
TlNSsguIXKgmnJejjRFCVzJS4yrt99KuQZ8f2d9BoZSNDmyIyw3zZrlm9L7GidA8
/xfAWl8j4aMFrbIH2W7TfrYszJ8VZxj5+Hit8N5u+i0fiTHOCjXleQjvBCoLSqnJ
RtF0jhDuUJccJFJOn8h4aYmy0Ssm7N8lRJVgOxEb9gX+LyO6qCOr1Jh0JW73u1De
YosgEAkRW3CWxlWH1I71YZfCCdzthUhTeCFZkTgWgSai/LAFTDGLUixRiKQoUIsG
yWTPS0jO/iqhjg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:41:45 2026 by rpki-client