Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: rp+Jvr/2THO1IOAET+kEDeV9b0sdFOTe9n+uFinYuzg=
Subject key identifier: 2E:ED:E6:3C:A4:1E:AE:04:BF:95:32:78:79:DD:33:51:93:DE:70:DA
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 01A1DF8315DC7E54B7CEADCA66D06D7FE754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0F0C
Signing time: Sun 15 Nov 2026 14:01:12 +0000
Manifest this update: Sun 15 Nov 2026 14:01:12 +0000
Manifest next update: Mon 16 Nov 2026 14:01:12 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 84vrj/Pjs3xhMvPUHgGf/e9SnZuZIkA5ecfECnUFeo8=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:15:dc:7e:54:b7:ce:ad:ca:66:d0:6d:7f:e7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Nov 15 14:01:12 2026 GMT
Not After : Nov 16 14:01:12 2026 GMT
Subject: CN=2eede63ca41eae04bf95327879dd335193de70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:df:c6:79:68:8f:ce:1a:e0:74:94:1d:e5:
d4:ab:b3:f4:58:b2:1f:3b:f2:e3:56:dd:04:96:b9:
90:0c:ee:15:e6:8d:b2:78:78:13:2c:07:75:f1:8b:
32:51:e9:62:af:3d:81:0f:99:bb:31:ec:c3:af:c1:
b2:c1:f0:3a:68:fd:fc:2f:64:2b:84:22:fa:4f:ca:
1b:d4:1a:24:bb:3d:b4:88:68:e6:53:67:3d:c5:51:
52:e5:f6:d3:b4:b9:ea:7b:6b:b6:5e:f7:71:20:1a:
23:38:94:ae:87:03:d9:40:54:c5:c6:6c:cd:3c:c7:
e1:7f:2c:4b:3d:3f:35:93:08:1b:f4:21:2d:11:ad:
ed:6c:f7:62:57:11:aa:4d:ac:7b:f7:0a:19:a0:78:
4b:e2:1f:92:af:ef:ce:53:c6:8d:49:64:50:c5:cf:
4b:24:cd:a1:17:5e:7b:8a:50:7b:e6:13:da:1c:66:
67:e4:0d:e3:68:5c:d8:97:f0:92:6d:4c:60:76:b4:
c3:cf:5e:fc:74:a2:cd:11:89:3b:10:0d:da:4d:cf:
57:dc:a9:62:02:14:1c:67:3a:49:59:22:78:a2:de:
2c:37:99:8c:23:54:4a:08:58:c1:8c:22:aa:ff:18:
db:8f:c5:5a:fe:3c:27:b5:fb:47:4b:b8:5f:9a:2a:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:E6:3C:A4:1E:AE:04:BF:95:32:78:79:DD:33:51:93:DE:70:DA
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:f8:ca:5d:3a:f3:35:6d:a7:d2:bb:da:ef:41:ff:60:c0:
67:6f:91:02:6b:59:82:89:6c:e2:c6:65:ba:15:b0:6c:93:14:
3a:4c:a3:9c:77:f4:35:7d:2d:a1:d1:05:e0:58:40:50:1f:4e:
8b:28:e3:5b:cc:7b:e0:c5:df:1f:e5:93:46:f6:07:97:0f:b3:
6a:af:0a:cd:e0:14:2a:58:78:26:cf:e2:af:f8:21:30:58:27:
54:5c:79:f8:16:e5:8e:e4:32:0c:89:fe:cf:c8:09:9b:9b:db:
e1:9e:81:78:9d:7c:5d:6d:8c:40:34:7a:c6:e9:a6:d8:e5:c9:
58:da:85:d4:0c:a2:56:a9:b9:52:d8:99:97:12:73:f0:fc:4c:
b3:9f:77:37:b1:d6:93:31:ee:e8:fa:03:a3:69:ea:93:a4:d3:
4f:c0:c5:e2:6f:b7:b8:1d:bc:0c:ce:4f:a1:e1:94:50:4b:e8:
23:68:10:38:30:fb:d4:c9:d2:53:a5:8e:22:88:4f:0b:53:e0:
42:0f:b7:51:c7:b8:59:fb:10:ea:98:e3:d6:11:0b:ec:6e:73:
b7:c2:d2:b6:0c:9d:11:53:a6:90:c8:4a:27:46:ff:70:8f:a9:
f1:97:bc:39:d4:04:28:4a:b7:8c:ad:9a:5f:22:cc:bf:c6:87:
47:c9:87:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgxXcflS3zq3KZtBtf+dUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk
MjEzMDUwHhcNMjYxMTE1MTQwMTEyWhcNMjYxMTE2MTQwMTEyWjAzMTEwLwYDVQQD
EygyZWVkZTYzY2E0MWVhZTA0YmY5NTMyNzg3OWRkMzM1MTkzZGU3MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzerfxnloj84a4HSUHeXUq7P0WLIf
O/LjVt0ElrmQDO4V5o2yeHgTLAd18YsyUelirz2BD5m7MezDr8GywfA6aP38L2Qr
hCL6T8ob1Bokuz20iGjmU2c9xVFS5fbTtLnqe2u2XvdxIBojOJSuhwPZQFTFxmzN
PMfhfyxLPT81kwgb9CEtEa3tbPdiVxGqTax79woZoHhL4h+Sr+/OU8aNSWRQxc9L
JM2hF157ilB75hPaHGZn5A3jaFzYl/CSbUxgdrTDz178dKLNEYk7EA3aTc9X3Kli
AhQcZzpJWSJ4ot4sN5mMI1RKCFjBjCKq/xjbj8Va/jwntftHS7hfmirqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7t5jykHq4Ev5UyeHndM1GT3nDaMB8GA1UdIwQY
MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt
MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh
LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdf4yl06
8zVtp9K72u9B/2DAZ2+RAmtZgols4sZluhWwbJMUOkyjnHf0NX0todEF4FhAUB9O
iyjjW8x74MXfH+WTRvYHlw+zaq8KzeAUKlh4Js/ir/ghMFgnVFx5+BbljuQyDIn+
z8gJm5vb4Z6BeJ18XW2MQDR6xumm2OXJWNqF1AyiVqm5UtiZlxJz8PxMs593N7HW
kzHu6PoDo2nqk6TTT8DF4m+3uB28DM5PoeGUUEvoI2gQODD71MnSU6WOIohPC1Pg
Qg+3Uce4WfsQ6pjj1hEL7G5zt8LStgydEVOmkMhKJ0b/cI+p8Ze8OdQEKEq3jK2a
XyLMv8aHR8mHNA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:49 2026 by rpki-client