Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: aTfZL3I/ru0UVAGbtbia58KfgUlx+F15k4so3AHTxUM=
Subject key identifier: 2F:C8:E4:F8:98:D8:C9:FF:B6:F0:16:34:FA:1E:7F:64:9D:ED:B6:E5
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 01A121D334DFD45CEA3FA4B3C8808FC78E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: 0165
Signing time: Fri 09 Oct 2026 18:00:52 +0000
Manifest this update: Fri 09 Oct 2026 18:00:52 +0000
Manifest next update: Sat 10 Oct 2026 18:00:52 +0000
Files and hashes: 1: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (hash: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: 6jWJiJfkbATFgpVOEWh4wNXeZAWzbKY6cDsfSVJvl5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:34:df:d4:5c:ea:3f:a4:b3:c8:80:8f:c7:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Oct 9 18:00:52 2026 GMT
Not After : Oct 10 18:00:52 2026 GMT
Subject: CN=2fc8e4f898d8c9ffb6f01634fa1e7f649dedb6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:71:8c:40:5b:9d:cc:fe:1c:29:d5:3b:17:
37:64:cd:6a:98:d7:c2:c6:c1:09:63:b9:e5:62:c2:
b9:ff:64:e2:d7:4f:7b:57:1c:ba:75:c8:47:1f:34:
62:44:5a:04:7f:a4:a5:3b:27:b8:76:ae:26:b8:2d:
e0:18:2b:6f:af:b6:0e:50:df:ca:3f:54:48:83:be:
95:7c:d4:51:2f:e0:e7:d6:1b:62:ea:a3:f3:7c:a8:
24:94:74:1b:9e:4c:52:b1:f4:b7:2b:31:a2:ca:1d:
de:3c:c5:8a:7e:63:6a:b9:fa:d3:0d:ff:c5:39:5e:
7c:1a:17:10:c8:3a:0e:cc:b1:f3:72:0e:7f:58:41:
dc:64:7a:65:82:21:6f:52:d0:ec:dc:1e:89:d2:c6:
d0:2d:4f:06:5d:25:c5:2c:cb:22:92:c1:7c:54:6e:
83:3e:31:7b:3a:07:0f:76:44:5d:1d:0c:4d:f8:e7:
d6:19:59:ac:8a:df:49:51:04:dc:1b:2f:83:7a:b6:
3d:e5:2a:21:79:4a:95:1d:b3:5d:77:fc:8f:ae:10:
0c:66:ea:4c:e1:c4:68:3b:ce:f0:0f:30:c5:46:5f:
ef:2e:a8:a8:02:9b:2c:4b:25:2b:46:57:dd:09:1d:
84:b0:ef:1f:9d:50:93:45:1e:2a:36:86:5c:4c:44:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:E4:F8:98:D8:C9:FF:B6:F0:16:34:FA:1E:7F:64:9D:ED:B6:E5
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:34:42:34:b2:f1:e3:b6:ef:3b:b9:7a:fd:e3:54:8c:d4:b2:
05:37:99:a3:52:7b:e1:16:8d:49:a0:20:7f:e0:81:5d:6c:86:
10:0d:dc:e1:09:34:2a:ce:73:26:ff:3f:9e:32:8d:62:bd:71:
81:dc:00:35:f7:3a:17:d9:97:f8:9a:88:66:48:7e:f9:25:54:
8a:15:b7:92:b6:bb:8d:e6:86:4a:b0:42:74:71:bf:53:13:e2:
60:a1:01:c4:e7:ac:6b:e6:16:66:8b:6d:8c:c0:8d:64:77:78:
74:31:3a:04:44:d6:0d:40:5e:fd:da:d1:93:c5:98:f2:68:62:
0c:23:e3:8a:9c:45:bc:85:f9:bb:ec:d1:ad:4d:f9:09:a2:44:
ef:9d:09:a2:41:a4:9b:a4:1c:9c:07:c9:6f:20:96:8a:c2:4e:
c0:00:77:26:7e:57:cf:ab:fd:be:5a:09:77:6c:55:a2:bb:a4:
61:05:a2:d7:c4:d7:29:03:1a:5d:91:ca:79:2c:0e:d1:e6:9e:
30:ae:5b:f9:02:f1:1f:9f:14:5c:25:4e:93:42:b5:1c:a5:ce:
5d:4b:d7:fe:2f:aa:07:ae:45:60:87:2f:54:d9:35:8c:50:a8:
bc:92:69:8d:95:2e:af:5e:0a:c7:d6:23:0a:62:40:87:42:37:
05:39:1d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEh0zTf1FzqP6SzyICPx44qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDM2ZjY4YjhkY2UxOTc3ZjU5NWI3YTEyMmIzMWVjZTBm
ZGM5NmIwHhcNMjYxMDA5MTgwMDUyWhcNMjYxMDEwMTgwMDUyWjAzMTEwLwYDVQQD
EygyZmM4ZTRmODk4ZDhjOWZmYjZmMDE2MzRmYTFlN2Y2NDlkZWRiNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB9xjEBbncz+HCnVOxc3ZM1qmNfC
xsEJY7nlYsK5/2Ti1097Vxy6dchHHzRiRFoEf6SlOye4dq4muC3gGCtvr7YOUN/K
P1RIg76VfNRRL+Dn1hti6qPzfKgklHQbnkxSsfS3KzGiyh3ePMWKfmNqufrTDf/F
OV58GhcQyDoOzLHzcg5/WEHcZHplgiFvUtDs3B6J0sbQLU8GXSXFLMsiksF8VG6D
PjF7OgcPdkRdHQxN+OfWGVmsit9JUQTcGy+DerY95SoheUqVHbNdd/yPrhAMZupM
4cRoO87wDzDFRl/vLqioApssSyUrRlfdCR2EsO8fnVCTRR4qNoZcTEQBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/I5PiY2Mn/tvAWNPoef2Sd7bblMB8GA1UdIwQY
MBaAFGVDb2i43OGXf1lbehIrMezg/clrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVOdmFMamM0WmRfV1Z0NkVpc3g3T0Q5eVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNDM1NDQtODBlNy00NDg2LWJlYzQt
YWFmNmUxMzQxMGY1LzEvWlVOdmFMamM0WmRfV1Z0NkVpc3g3T0Q5eVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNDM1NDQtODBlNy00NDg2LWJlYzQtYWFmNmUxMzQxMGY1
LzEvWlVOdmFMamM0WmRfV1Z0NkVpc3g3T0Q5eVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljRCNLLx
47bvO7l6/eNUjNSyBTeZo1J74RaNSaAgf+CBXWyGEA3c4Qk0Ks5zJv8/njKNYr1x
gdwANfc6F9mX+JqIZkh++SVUihW3kra7jeaGSrBCdHG/UxPiYKEBxOesa+YWZott
jMCNZHd4dDE6BETWDUBe/drRk8WY8mhiDCPjipxFvIX5u+zRrU35CaJE750JokGk
m6QcnAfJbyCWisJOwAB3Jn5Xz6v9vloJd2xVorukYQWi18TXKQMaXZHKeSwO0eae
MK5b+QLxH58UXCVOk0K1HKXOXUvX/i+qB65FYIcvVNk1jFCovJJpjZUur14Kx9Yj
CmJAh0I3BTkdeQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:55:33 2026 by rpki-client