Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: ddm4iJ94+cvtYuxkaZ+8/zwyySseN77Fzm7V2JPkSlg=
Subject key identifier: 13:5A:95:13:EF:5B:3D:22:17:F8:DD:E8:64:31:A1:BF:35:8F:1B:E8
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01A0C8FD77C2A8AAB4DBB0AF30A95975E774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 067B
Signing time: Tue 22 Sep 2026 12:00:49 +0000
Manifest this update: Tue 22 Sep 2026 12:00:49 +0000
Manifest next update: Wed 23 Sep 2026 12:00:49 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: ZGAHHfg6mLuk4Exj1Bgsp2gLaMgDtou6He53qqdU0hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:77:c2:a8:aa:b4:db:b0:af:30:a9:59:75:e7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Sep 22 12:00:49 2026 GMT
Not After : Sep 23 12:00:49 2026 GMT
Subject: CN=135a9513ef5b3d2217f8dde86431a1bf358f1be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:02:93:fd:71:bd:fd:1f:37:63:ea:55:32:
c6:36:c0:36:6f:55:72:79:84:24:bf:8b:14:b0:2c:
ce:c2:68:22:a2:5c:64:7d:05:57:d2:f4:8a:2b:14:
f4:fa:a7:62:a5:ae:57:82:80:16:92:5c:e6:07:11:
5c:14:c8:26:c4:fc:74:b4:9e:dc:8c:0f:16:58:b4:
6a:72:4c:61:1c:e8:4a:26:91:2d:ba:53:93:ca:e4:
db:30:cb:28:ec:1a:a7:c3:e1:07:93:ef:cb:ea:65:
17:b4:bd:28:e0:7b:1d:0d:04:a4:33:30:e0:73:0f:
12:8b:70:67:13:93:f3:21:83:d8:af:78:d1:25:97:
34:65:85:df:c9:27:92:96:c7:6c:2a:ae:8b:f7:c4:
22:22:00:f2:b5:b0:75:6a:ce:4b:b7:78:96:00:65:
72:79:be:d5:46:66:47:53:f8:12:d6:ff:27:47:55:
55:6b:44:8b:7a:0c:86:5f:21:57:42:be:ce:f2:fa:
2d:79:e9:04:c8:4a:2c:76:7d:ea:d2:13:08:05:98:
c7:c7:4d:a8:a7:6a:cd:1f:33:fe:24:b5:28:7c:7a:
8d:4d:51:64:1f:95:01:78:9f:84:7c:e9:58:64:53:
5d:cd:7a:84:6f:bf:4c:fd:da:28:56:5e:cc:70:52:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:95:13:EF:5B:3D:22:17:F8:DD:E8:64:31:A1:BF:35:8F:1B:E8
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bb:9f:0c:83:cb:7d:6b:c7:09:70:4c:1b:f8:b2:76:19:75:
aa:98:e7:6b:d2:ae:39:79:fa:9f:97:49:5b:1c:1b:3c:23:2c:
a5:3a:e9:05:b3:7a:c3:0a:a3:23:5f:b4:51:9c:9f:e3:01:52:
32:3d:7b:03:43:03:1a:49:20:e4:ca:94:75:8e:45:80:0d:ca:
6c:f6:9c:f4:ae:bd:58:bc:97:c0:f7:6e:d7:ea:b8:15:e1:25:
b0:28:f4:7e:b7:ce:22:25:a6:3e:a6:36:b1:d3:cb:7b:77:11:
22:47:c1:f5:61:57:4a:27:b1:58:9c:33:f7:0f:64:c7:3a:d0:
45:79:e2:ff:fb:7f:ad:b1:b7:24:d8:a2:94:49:71:13:0a:de:
3a:51:6b:83:b9:35:0f:5a:39:97:d9:09:82:c2:5c:8b:16:5a:
8f:bd:ae:e1:91:b4:28:50:3e:b9:17:1d:bd:af:32:1a:dc:4f:
25:1c:80:0a:a6:64:7b:06:51:99:71:3b:93:52:f3:05:0b:f3:
d9:6f:11:7c:c2:69:d0:56:af:a8:d1:a0:90:32:dd:96:df:29:
e9:f2:48:39:98:10:b6:8e:96:d9:2b:15:70:fa:46:5a:54:29:
2d:dc:70:db:80:aa:24:9f:97:74:9d:ac:47:5d:4b:20:8f:c3:
30:42:23:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/XfCqKq027CvMKlZded0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm
OTM4MjcwHhcNMjYwOTIyMTIwMDQ5WhcNMjYwOTIzMTIwMDQ5WjAzMTEwLwYDVQQD
EygxMzVhOTUxM2VmNWIzZDIyMTdmOGRkZTg2NDMxYTFiZjM1OGYxYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOcCk/1xvf0fN2PqVTLGNsA2b1Vy
eYQkv4sUsCzOwmgiolxkfQVX0vSKKxT0+qdipa5XgoAWklzmBxFcFMgmxPx0tJ7c
jA8WWLRqckxhHOhKJpEtulOTyuTbMMso7Bqnw+EHk+/L6mUXtL0o4HsdDQSkMzDg
cw8Si3BnE5PzIYPYr3jRJZc0ZYXfySeSlsdsKq6L98QiIgDytbB1as5Lt3iWAGVy
eb7VRmZHU/gS1v8nR1VVa0SLegyGXyFXQr7O8voteekEyEosdn3q0hMIBZjHx02o
p2rNHzP+JLUofHqNTVFkH5UBeJ+EfOlYZFNdzXqEb79M/dooVl7McFINmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNalRPvWz0iF/jd6GQxob81jxvoMB8GA1UdIwQY
MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt
ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm
LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrufDIPL
fWvHCXBMG/iydhl1qpjna9KuOXn6n5dJWxwbPCMspTrpBbN6wwqjI1+0UZyf4wFS
Mj17A0MDGkkg5MqUdY5FgA3KbPac9K69WLyXwPdu1+q4FeElsCj0frfOIiWmPqY2
sdPLe3cRIkfB9WFXSiexWJwz9w9kxzrQRXni//t/rbG3JNiilElxEwreOlFrg7k1
D1o5l9kJgsJcixZaj72u4ZG0KFA+uRcdva8yGtxPJRyACqZkewZRmXE7k1LzBQvz
2W8RfMJp0FavqNGgkDLdlt8p6fJIOZgQto6W2SsVcPpGWlQpLdxw24CqJJ+XdJ2s
R11LII/DMEIjZA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:27:41 2026 by rpki-client