Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: zSWTh2H/9f2tiFny3vDi586BG38OJ/SR9Mm/sj5F0a4=
Subject key identifier: E4:9C:15:B5:B2:D3:10:C3:77:8F:65:05:6F:9B:B5:E5:8A:54:49:BF
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01A1DBDD336E1F909E9E72BE29BC6531CE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1AF9
Signing time: Sat 14 Nov 2026 21:01:09 +0000
Manifest this update: Sat 14 Nov 2026 21:01:09 +0000
Manifest next update: Sun 15 Nov 2026 21:01:09 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: CXMaDelO/8ZtodTLvAguwyzGdgEudow45Zw9kJhwoUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:33:6e:1f:90:9e:9e:72:be:29:bc:65:31:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Nov 14 21:01:09 2026 GMT
Not After : Nov 15 21:01:09 2026 GMT
Subject: CN=e49c15b5b2d310c3778f65056f9bb5e58a5449bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:66:57:bf:96:a7:58:e9:51:e0:48:ec:f1:
19:7f:fc:ff:6c:34:16:be:6c:54:92:01:eb:a2:c7:
f5:4f:52:1a:fd:76:60:6c:f8:91:d9:f8:d8:80:7c:
de:1b:de:3a:8d:91:59:10:c0:e6:e3:58:59:7c:d6:
74:3a:d0:4a:a5:b6:5c:ad:76:28:69:e1:dd:c4:44:
33:ad:55:d7:ef:55:1d:d9:6d:26:b0:99:db:af:d6:
3b:01:ba:e8:ce:d6:5f:41:b6:38:5e:fa:52:8b:cb:
48:f6:24:ee:d5:dc:46:b1:fe:03:d4:f9:fd:29:d9:
d7:01:b6:bd:6a:c3:88:36:ef:59:14:58:93:e0:56:
b1:fc:a1:30:82:f0:6b:91:11:6a:0d:bd:25:a6:43:
e8:78:51:ea:21:67:b2:e9:02:ae:e8:89:f7:c0:77:
ab:d4:21:11:09:14:1e:64:08:2e:5a:e0:4c:05:4c:
67:1b:ac:71:f7:53:79:45:ac:38:b3:ea:d0:2f:0d:
e3:5c:54:0f:23:8b:1e:78:d3:48:1f:e8:2a:47:47:
04:f2:2c:7a:e9:84:7a:e3:01:44:d3:84:7d:6b:1d:
83:1d:62:42:dd:53:a0:14:31:6b:e8:9a:f9:f4:21:
7b:ac:7f:73:01:2d:f1:9b:69:d7:83:f9:b1:12:bd:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:15:B5:B2:D3:10:C3:77:8F:65:05:6F:9B:B5:E5:8A:54:49:BF
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:a6:38:a9:f8:d8:9b:ab:27:eb:e4:8c:e3:03:11:90:66:
20:24:d9:ff:f8:27:d3:0a:06:8e:54:d9:c9:04:39:4c:75:cb:
69:0f:45:fe:54:80:02:2b:9a:1f:f3:84:31:6f:38:60:f3:bf:
9e:71:79:e5:c7:3f:77:c9:f7:89:cf:bf:ad:78:43:35:1d:cc:
a7:b9:d5:19:57:91:c4:10:9c:68:ba:b6:f0:7e:51:20:da:a1:
ae:08:04:1f:f8:97:3a:58:a0:bb:b8:d8:9f:0a:ff:0e:8f:a5:
c4:37:4b:95:3d:2f:9f:51:48:3c:ce:05:6a:1a:ce:7f:1b:15:
f3:71:bd:3d:fd:b4:98:87:f3:ca:b7:70:b2:48:e3:de:c6:e3:
c3:d1:89:23:8e:6b:12:f6:aa:b1:e6:83:56:1a:ac:cd:68:87:
28:ed:8a:47:c7:6a:ba:a9:e9:d5:82:62:76:07:72:b6:36:59:
eb:9a:21:4f:06:f2:04:83:6b:54:3e:a9:9f:9d:0d:18:c8:96:
7b:50:a6:4c:8f:3e:84:6d:d9:db:af:7e:fe:3d:1e:d3:14:04:
5d:e5:96:87:ad:40:94:6b:55:63:a4:e9:fc:bf:4e:42:8e:1e:
7a:ea:fe:93:19:c0:83:47:ca:13:af:44:00:19:f0:ae:a6:f2:
f6:97:f7:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHb3TNuH5CennK+KbxlMc5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjYxMTE0MjEwMTA5WhcNMjYxMTE1MjEwMTA5WjAzMTEwLwYDVQQD
EyhlNDljMTViNWIyZDMxMGMzNzc4ZjY1MDU2ZjliYjVlNThhNTQ0OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xdmV7+Wp1jpUeBI7PEZf/z/bDQW
vmxUkgHrosf1T1Ia/XZgbPiR2fjYgHzeG946jZFZEMDm41hZfNZ0OtBKpbZcrXYo
aeHdxEQzrVXX71Ud2W0msJnbr9Y7AbroztZfQbY4XvpSi8tI9iTu1dxGsf4D1Pn9
KdnXAba9asOINu9ZFFiT4Fax/KEwgvBrkRFqDb0lpkPoeFHqIWey6QKu6In3wHer
1CERCRQeZAguWuBMBUxnG6xx91N5Raw4s+rQLw3jXFQPI4seeNNIH+gqR0cE8ix6
6YR64wFE04R9ax2DHWJC3VOgFDFr6Jr59CF7rH9zAS3xm2nXg/mxEr19FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOScFbWy0xDDd49lBW+bteWKVEm/MB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6qmOKn4
2JurJ+vkjOMDEZBmICTZ//gn0woGjlTZyQQ5THXLaQ9F/lSAAiuaH/OEMW84YPO/
nnF55cc/d8n3ic+/rXhDNR3Mp7nVGVeRxBCcaLq28H5RINqhrggEH/iXOligu7jY
nwr/Do+lxDdLlT0vn1FIPM4FahrOfxsV83G9Pf20mIfzyrdwskjj3sbjw9GJI45r
EvaqseaDVhqszWiHKO2KR8dquqnp1YJidgdytjZZ65ohTwbyBINrVD6pn50NGMiW
e1CmTI8+hG3Z269+/j0e0xQEXeWWh61AlGtVY6Tp/L9OQo4eeur+kxnAg0fKE69E
ABnwrqby9pf3Xw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:24:27 2026 by rpki-client