Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier: 9jzF6ZAuyvpL7l3vZx+aEy1P52n4XTBCCr0YoWLVFac=
Subject key identifier: 53:97:05:3B:DE:E4:88:4C:66:4E:9B:14:3D:D1:34:4A:89:5C:E0:0A
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A0DB71D659FF363A47748E594C584B2EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number: 0181
Signing time: Sat 26 Sep 2026 02:01:05 +0000
Manifest this update: Sat 26 Sep 2026 02:01:05 +0000
Manifest next update: Sun 27 Sep 2026 02:01:05 +0000
Files and hashes: 1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
2: UgcaqARpZEhIRz65bcMkPzf98wU.roa (hash: yLTp7DiKxk6cbTossdpZ5QihnG6qCy0foGcotAsMr6E=)
3: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: cvK56qpBQXv7yiR6AyOIzLb1ffciODb3Wv9eD0HqrL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:d6:59:ff:36:3a:47:74:8e:59:4c:58:4b:2e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Sep 26 02:01:05 2026 GMT
Not After : Sep 27 02:01:05 2026 GMT
Subject: CN=5397053bdee4884c664e9b143dd1344a895ce00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:06:c5:43:07:50:7b:f8:15:8b:ba:d5:f2:cc:
08:df:81:03:2d:ba:ff:66:2b:45:00:c4:bc:c7:e1:
cb:06:29:a5:5c:19:a5:43:35:d8:d1:a9:12:bc:90:
8d:e7:92:ce:fd:37:60:f7:f3:97:2a:49:45:df:cd:
7c:56:db:e3:cb:9a:7e:50:64:48:5f:f1:0e:37:90:
c5:f2:81:62:f4:59:c3:82:28:74:c2:f3:f5:9b:a6:
f7:70:4f:fa:4f:51:bd:9f:39:72:11:55:08:a6:af:
71:5a:ef:00:ba:e2:96:40:f2:01:1c:7e:0f:bd:32:
03:ec:33:23:af:e9:aa:27:30:4d:cd:6a:78:0b:01:
68:a5:f8:88:b3:24:93:e7:db:ba:fd:ff:b1:93:af:
a5:94:dc:77:cd:46:54:06:05:35:21:14:fa:56:6d:
eb:67:e5:b1:e2:b7:2d:21:d5:6e:02:16:f6:c5:96:
ff:0a:04:b7:02:04:aa:ba:07:44:2d:37:4e:a8:c1:
83:d1:99:e5:fe:96:51:de:44:df:a7:2a:f9:32:29:
72:52:5c:01:58:0c:29:36:c2:e3:2d:eb:ae:3f:4a:
f4:c3:a2:6f:18:ca:c9:e3:5e:97:33:8d:1a:3c:d1:
0d:76:78:a5:bb:74:3f:44:aa:17:c1:da:12:69:90:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:05:3B:DE:E4:88:4C:66:4E:9B:14:3D:D1:34:4A:89:5C:E0:0A
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d6:63:2e:bd:a8:88:ed:63:e5:74:79:8a:1a:47:5f:a3:b0:
77:84:e4:f8:7a:71:85:6e:7b:b9:b1:7a:91:9a:aa:d7:bb:37:
2f:1e:a0:af:23:84:6c:b7:c0:ff:87:01:1f:4a:d9:c4:f8:ae:
cb:76:52:30:88:28:c2:db:3b:30:ea:1d:af:2c:c7:8d:a4:e9:
03:87:d9:b0:be:c6:d2:3d:ba:31:73:da:dd:5e:6c:6f:ba:f5:
18:f7:ba:53:ac:9d:04:c3:98:da:d1:d7:54:38:6e:cb:20:ee:
3b:f2:84:7f:6d:f2:d7:95:48:66:da:c4:cf:12:99:83:8f:4e:
07:f2:36:a7:ef:ef:6f:55:74:59:6e:df:10:a9:87:2e:8a:37:
dd:17:9c:53:ee:db:db:eb:87:06:5c:63:6e:18:7d:47:65:75:
87:e9:9e:dd:00:ca:8f:d0:70:35:8a:60:42:ae:98:78:4e:df:
66:40:0f:99:f9:ad:99:7f:0e:8a:1c:89:86:46:e1:64:fc:59:
e2:5d:98:9e:5b:c7:a2:e9:50:5f:b7:ad:ad:18:4c:ac:17:36:
cf:b2:aa:7c:a0:da:c3:ca:80:e5:97:1b:e1:75:f2:f9:b0:de:
62:30:19:1b:c1:cd:b4:f6:93:eb:5f:2d:3a:6d:90:8c:b0:65:
bc:48:80:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbcdZZ/zY6R3SOWUxYSy7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDNmMWY2M2MxMDA5YzQyYTY4OTE5ODYzYTliOGJhODU3
ODY3MzAwHhcNMjYwOTI2MDIwMTA1WhcNMjYwOTI3MDIwMTA1WjAzMTEwLwYDVQQD
Eyg1Mzk3MDUzYmRlZTQ4ODRjNjY0ZTliMTQzZGQxMzQ0YTg5NWNlMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gbFQwdQe/gVi7rV8swI34EDLbr/
ZitFAMS8x+HLBimlXBmlQzXY0akSvJCN55LO/Tdg9/OXKklF3818Vtvjy5p+UGRI
X/EON5DF8oFi9FnDgih0wvP1m6b3cE/6T1G9nzlyEVUIpq9xWu8AuuKWQPIBHH4P
vTID7DMjr+mqJzBNzWp4CwFopfiIsyST59u6/f+xk6+llNx3zUZUBgU1IRT6Vm3r
Z+Wx4rctIdVuAhb2xZb/CgS3AgSqugdELTdOqMGD0Znl/pZR3kTfpyr5MilyUlwB
WAwpNsLjLeuuP0r0w6JvGMrJ416XM40aPNENdnilu3Q/RKoXwdoSaZDNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOXBTve5IhMZk6bFD3RNEqJXOAKMB8GA1UdIwQY
MBaAFGbT8fY8EAnEKmiRmGOpuLqFeGcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEt
NWEyZTlkNjY5NWZjLzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEtNWEyZTlkNjY5NWZj
LzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNZjLr2o
iO1j5XR5ihpHX6Owd4Tk+HpxhW57ubF6kZqq17s3Lx6gryOEbLfA/4cBH0rZxPiu
y3ZSMIgowts7MOodryzHjaTpA4fZsL7G0j26MXPa3V5sb7r1GPe6U6ydBMOY2tHX
VDhuyyDuO/KEf23y15VIZtrEzxKZg49OB/I2p+/vb1V0WW7fEKmHLoo33RecU+7b
2+uHBlxjbhh9R2V1h+me3QDKj9BwNYpgQq6YeE7fZkAPmfmtmX8OihyJhkbhZPxZ
4l2YnlvHoulQX7etrRhMrBc2z7KqfKDaw8qA5Zcb4XXy+bDeYjAZG8HNtPaT618t
Om2QjLBlvEiABw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:24:28 2026 by rpki-client