Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: k21cZhQO1uusuWsrdvkB7pYh4oJuCuexYi35gNfm4UU=
Subject key identifier: BC:7D:58:D1:D1:B6:68:B3:0E:44:EA:80:D0:98:C8:C0:10:14:D7:DE
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01A0F869D580D93773D1DE1D352A71CDC039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1A85
Signing time: Thu 01 Oct 2026 17:01:20 +0000
Manifest this update: Thu 01 Oct 2026 17:01:20 +0000
Manifest next update: Fri 02 Oct 2026 17:01:20 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: RUiDVHfw6504FgtkRO0KetnfrIVZOljBdES7Z760ff8=)
2: _6LzupxXASaoZ39swk7m_G9Thtg.roa (hash: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=)
3: fjLqd8nX00J9fe0_2aJ2e9FwgbY.asa (hash: hHImG8Y2r794WFIY//Kga9NCrwxYUH3dsvX+/DPBAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:d5:80:d9:37:73:d1:de:1d:35:2a:71:cd:c0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Oct 1 17:01:20 2026 GMT
Not After : Oct 2 17:01:20 2026 GMT
Subject: CN=bc7d58d1d1b668b30e44ea80d098c8c01014d7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:d8:a5:5b:c5:b2:74:89:1a:e5:af:00:e3:
70:67:a8:4b:34:41:d0:cd:19:ed:53:68:01:15:d5:
20:31:6b:0f:22:64:d1:b5:13:f3:df:d6:73:b5:af:
be:a3:37:8e:49:aa:c7:7c:6b:06:24:a8:a8:bc:c2:
2e:b3:f8:ef:17:ab:4f:91:b2:60:19:76:48:8d:48:
53:bb:81:91:4e:81:de:d3:34:be:40:7c:e1:3f:2d:
98:10:1d:45:ba:e1:17:a7:d0:32:3a:f6:6b:a8:9d:
71:38:90:5c:3e:13:1b:d1:31:80:f9:57:81:db:68:
bb:38:10:ab:cd:a4:62:e0:6f:d4:69:4c:06:b6:c2:
6f:72:1c:c5:1d:3e:00:2a:ef:b6:ee:db:5b:a4:0f:
3b:f3:e4:c4:1f:36:75:59:46:02:32:a1:2c:1d:f8:
09:40:ab:18:60:cc:c7:2b:01:08:e8:8d:1f:ae:62:
aa:1e:9c:0a:f6:71:7f:c9:39:37:78:cd:b1:9a:9f:
a9:f2:6b:1b:f4:dd:70:da:8f:ce:96:a1:24:ac:6c:
43:de:b5:21:61:4d:b7:d3:47:93:7b:e8:dc:c9:e2:
e9:cc:80:98:d7:64:e1:eb:30:a1:bd:d0:01:fc:27:
db:eb:26:6e:f5:9e:e2:4a:cd:b3:e6:69:5e:6f:cc:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:58:D1:D1:B6:68:B3:0E:44:EA:80:D0:98:C8:C0:10:14:D7:DE
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:18:de:ce:7f:3a:43:03:29:50:08:04:b6:4b:cb:0a:05:31:
9a:0f:fc:5e:af:b6:1c:87:5c:42:80:38:87:97:92:38:1d:28:
63:76:17:56:66:fe:0e:56:e1:cb:ad:ee:9c:aa:8c:4f:17:26:
34:71:e7:08:68:b0:23:92:75:5e:ad:b6:c9:e6:a6:b9:a2:01:
5c:79:28:56:0c:e6:bd:5d:64:49:5f:f1:5b:d3:a6:7c:c2:b2:
cd:ee:47:3a:b7:44:93:20:4a:da:a0:27:de:5d:be:97:64:ef:
e8:a8:7b:f2:71:1c:93:a6:73:cd:61:26:d7:bd:88:7d:76:e5:
34:de:94:62:c4:d6:b9:61:4c:cc:fb:30:0d:7d:11:02:d2:b2:
e7:b9:b4:ae:e6:3e:5e:4e:d7:c6:1f:6d:20:90:94:41:1c:75:
81:7c:ca:7c:b5:cb:dc:92:7c:b4:24:b7:13:0f:3c:79:c2:0f:
44:f9:6b:71:4f:ed:17:b9:8b:1c:56:9f:6b:e3:c5:9b:92:37:
d7:77:ff:d6:e5:2a:e7:e5:f4:00:b9:aa:c2:1c:b0:b7:cb:65:
cc:f0:2a:9d:84:c3:20:9f:25:71:c7:0f:37:23:fa:1f:a3:d0:
be:fe:dd:c7:ac:d0:52:75:39:48:c2:be:ab:78:29:4b:fc:35:
e3:a9:9d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4adWA2Tdz0d4dNSpxzcA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjYxMDAxMTcwMTIwWhcNMjYxMDAyMTcwMTIwWjAzMTEwLwYDVQQD
EyhiYzdkNThkMWQxYjY2OGIzMGU0NGVhODBkMDk4YzhjMDEwMTRkN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSrYpVvFsnSJGuWvAONwZ6hLNEHQ
zRntU2gBFdUgMWsPImTRtRPz39Zzta++ozeOSarHfGsGJKiovMIus/jvF6tPkbJg
GXZIjUhTu4GRToHe0zS+QHzhPy2YEB1FuuEXp9AyOvZrqJ1xOJBcPhMb0TGA+VeB
22i7OBCrzaRi4G/UaUwGtsJvchzFHT4AKu+27ttbpA878+TEHzZ1WUYCMqEsHfgJ
QKsYYMzHKwEI6I0frmKqHpwK9nF/yTk3eM2xmp+p8msb9N1w2o/OlqEkrGxD3rUh
YU2300eTe+jcyeLpzICY12Th6zChvdAB/Cfb6yZu9Z7iSs2z5mleb8yOjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx9WNHRtmizDkTqgNCYyMAQFNfeMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRjezn86
QwMpUAgEtkvLCgUxmg/8Xq+2HIdcQoA4h5eSOB0oY3YXVmb+Dlbhy63unKqMTxcm
NHHnCGiwI5J1Xq22yeamuaIBXHkoVgzmvV1kSV/xW9OmfMKyze5HOrdEkyBK2qAn
3l2+l2Tv6Kh78nEck6ZzzWEm172IfXblNN6UYsTWuWFMzPswDX0RAtKy57m0ruY+
Xk7Xxh9tIJCUQRx1gXzKfLXL3JJ8tCS3Ew88ecIPRPlrcU/tF7mLHFafa+PFm5I3
13f/1uUq5+X0ALmqwhywt8tlzPAqnYTDIJ8lcccPNyP6H6PQvv7dx6zQUnU5SMK+
q3gpS/w146mdnw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:14:21 2026 by rpki-client