Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: lOa0DU0YlrXd/8GXnzcxSVlfcqJkcYKj9IkzmP01B8w=
Subject key identifier: 46:5B:67:BA:65:80:B4:5F:CF:4F:AB:C4:6C:60:50:0C:29:1C:FC:65
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 01A13523613BCB475CA172A5A4FC14E7AE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0C17
Signing time: Tue 13 Oct 2026 12:01:13 +0000
Manifest this update: Tue 13 Oct 2026 12:01:13 +0000
Manifest next update: Wed 14 Oct 2026 12:01:13 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 347EwwKM3dbSKztg8cdqRPhI9s7dCMvtCrsXoKmg21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:61:3b:cb:47:5c:a1:72:a5:a4:fc:14:e7:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Oct 13 12:01:13 2026 GMT
Not After : Oct 14 12:01:13 2026 GMT
Subject: CN=465b67ba6580b45fcf4fabc46c60500c291cfc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:99:16:56:b8:d5:8a:e3:c9:1c:11:59:7c:
e9:20:4a:df:63:c0:ac:6e:5b:f0:37:35:c4:24:00:
eb:d0:1e:8b:c4:32:bc:ca:5a:0a:ba:bf:d6:b1:f4:
fe:63:95:b7:17:a9:d5:3b:ab:73:4e:cd:07:de:6f:
fe:dc:ca:21:6f:1f:69:c9:b4:99:1a:2c:4d:14:11:
5f:02:2b:12:75:a8:74:14:b9:c3:de:60:64:8a:b2:
6f:4a:9c:0d:72:19:8b:d0:f9:73:00:36:63:97:30:
66:2c:5a:ec:bd:18:0c:51:80:59:66:fc:66:79:77:
46:0a:c3:dc:27:50:78:63:e7:57:50:89:4c:17:c7:
e0:be:8a:b7:bb:9c:ab:41:08:bc:bb:8d:32:e5:31:
c3:c8:f2:37:16:29:af:26:70:14:90:e2:1c:04:84:
ac:53:2f:1d:fa:3e:4c:dc:35:e8:1e:48:e2:42:d8:
5f:23:75:97:2b:3d:3d:4d:3c:40:c0:30:a1:20:f2:
12:c1:86:a2:da:d6:df:38:0e:9c:2d:ec:18:cd:74:
39:4e:f7:fb:e1:45:37:2c:bc:c5:fc:ee:ff:06:b4:
48:5d:32:f3:30:76:d4:97:5b:00:ab:7f:0a:20:d6:
1f:5f:87:d6:b2:0d:31:f6:6d:88:c4:2e:da:a0:b5:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:67:BA:65:80:B4:5F:CF:4F:AB:C4:6C:60:50:0C:29:1C:FC:65
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0a:8e:aa:d6:25:e2:51:32:af:81:31:c6:3c:3f:8e:0f:15:
18:88:e6:6f:df:30:18:81:9c:ba:24:dd:ff:3b:9b:ea:87:95:
22:79:5f:4c:af:cc:6b:23:f7:ce:2d:58:26:9b:a5:1e:ae:0a:
6d:04:8a:ec:9f:4d:92:8c:73:95:2d:66:3b:59:ca:71:35:19:
59:cf:04:8c:01:6a:06:76:3c:cf:bc:0d:a6:d2:10:16:cc:85:
04:91:5f:d1:58:08:fe:e7:02:63:c0:5a:5d:0b:48:f5:2c:8b:
83:d8:60:88:b2:93:d4:d0:e9:b0:d8:13:db:07:f4:d4:c5:b1:
e5:bf:73:5f:99:14:55:d2:70:4b:76:29:27:dd:89:c0:26:3d:
f4:1b:e2:6e:86:5f:4f:4d:90:1e:4c:c0:a0:d8:13:f4:95:bd:
06:28:49:76:fd:1e:0b:d3:89:4e:f2:1b:a9:5d:0f:0d:60:70:
3d:2e:bc:ab:ad:d0:74:1c:e8:19:11:46:f5:27:99:be:9f:95:
8b:4b:7e:ec:29:ac:1d:82:24:99:15:60:77:5b:60:9e:b7:7e:
9e:49:2e:e7:db:8d:75:ba:1d:aa:99:6e:3f:75:21:2e:b5:0d:
81:cf:4b:af:8b:61:60:e8:b4:2e:ec:41:2e:d1:74:22:97:0e:
a8:00:ff:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1I2E7y0dcoXKlpPwU565+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh
NDVhZmYwHhcNMjYxMDEzMTIwMTEzWhcNMjYxMDE0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg0NjViNjdiYTY1ODBiNDVmY2Y0ZmFiYzQ2YzYwNTAwYzI5MWNmYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsWZFla41YrjyRwRWXzpIErfY8Cs
blvwNzXEJADr0B6LxDK8yloKur/WsfT+Y5W3F6nVO6tzTs0H3m/+3Mohbx9pybSZ
GixNFBFfAisSdah0FLnD3mBkirJvSpwNchmL0PlzADZjlzBmLFrsvRgMUYBZZvxm
eXdGCsPcJ1B4Y+dXUIlMF8fgvoq3u5yrQQi8u40y5THDyPI3FimvJnAUkOIcBISs
Uy8d+j5M3DXoHkjiQthfI3WXKz09TTxAwDChIPISwYai2tbfOA6cLewYzXQ5Tvf7
4UU3LLzF/O7/BrRIXTLzMHbUl1sAq38KINYfX4fWsg0x9m2IxC7aoLW5/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZbZ7plgLRfz0+rxGxgUAwpHPxlMB8GA1UdIwQY
MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt
M2E5YzBmYmM4YTBhLzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh
LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwqOqtYl
4lEyr4Exxjw/jg8VGIjmb98wGIGcuiTd/zub6oeVInlfTK/MayP3zi1YJpulHq4K
bQSK7J9NkoxzlS1mO1nKcTUZWc8EjAFqBnY8z7wNptIQFsyFBJFf0VgI/ucCY8Ba
XQtI9SyLg9hgiLKT1NDpsNgT2wf01MWx5b9zX5kUVdJwS3YpJ92JwCY99BviboZf
T02QHkzAoNgT9JW9BihJdv0eC9OJTvIbqV0PDWBwPS68q63QdBzoGRFG9SeZvp+V
i0t+7CmsHYIkmRVgd1tgnrd+nkku59uNdbodqpluP3UhLrUNgc9Lr4thYOi0LuxB
LtF0IpcOqAD/8g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:44:36 2026 by rpki-client