Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: DzZMe3WUrM4Bl5ufsXplpwakCwoTViQxzSdHvYJi43U=
Subject key identifier: 6C:4B:FD:B0:E8:96:F8:6E:5F:0A:0E:AF:7D:03:D8:19:8B:7B:93:5D
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 01A10135B8AA3DF5021D9393093868FB446B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 07DC
Signing time: Sat 03 Oct 2026 10:01:00 +0000
Manifest this update: Sat 03 Oct 2026 10:01:00 +0000
Manifest next update: Sun 04 Oct 2026 10:01:00 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: E0kWTGAD7T8ePyEkaDSRo8J0VQS44eNOU3X3hx4tvRo=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:b8:aa:3d:f5:02:1d:93:93:09:38:68:fb:44:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Oct 3 10:01:00 2026 GMT
Not After : Oct 4 10:01:00 2026 GMT
Subject: CN=6c4bfdb0e896f86e5f0a0eaf7d03d8198b7b935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:13:0a:f3:69:e6:99:f4:3a:d4:35:f4:a4:
1d:25:0e:73:12:fe:ce:00:d3:12:14:72:9f:18:67:
dc:8f:c6:f5:91:df:da:a9:1b:31:a8:b8:99:2c:a5:
32:d0:df:67:99:43:c4:7e:3b:20:af:ef:de:c7:a5:
6d:57:10:63:44:fa:bc:51:b7:fd:e8:31:6d:9e:7b:
0a:60:bb:b6:f0:b3:d0:58:8f:b9:c4:ea:23:25:5d:
3e:8e:4d:78:f9:fb:bb:a5:f0:6e:8e:57:a4:60:44:
b6:61:b5:9b:01:4f:99:26:ed:31:05:bc:62:b3:cd:
84:f4:14:c7:11:b6:e0:fc:2d:cc:e2:01:82:42:d9:
1d:b1:b5:60:df:b0:75:c4:b9:6d:81:d3:29:c2:c5:
e7:c1:26:b7:0a:6e:a9:1a:73:2c:f8:c6:7a:85:0f:
12:96:8a:1a:3f:42:92:f7:17:69:fa:1f:79:4c:fd:
7e:26:e3:7d:f3:77:ed:70:b5:f3:ef:60:84:cd:c8:
a2:45:c7:e6:28:b5:c6:30:87:41:80:a6:48:d9:1b:
93:01:cd:82:1c:0a:11:55:d7:e9:79:61:0e:e9:30:
72:21:cf:72:7b:c4:bd:d6:bf:c4:1a:10:65:db:fd:
cb:3c:93:d8:ba:0f:13:84:cc:dd:33:61:35:cd:69:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:FD:B0:E8:96:F8:6E:5F:0A:0E:AF:7D:03:D8:19:8B:7B:93:5D
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:aa:9b:a6:c6:47:d1:ce:4b:e3:94:ca:e2:fc:95:64:ce:8d:
1a:a7:b2:38:b9:bc:51:4f:06:4f:8a:2e:94:6f:da:10:e4:a4:
e2:bd:36:74:24:05:40:8f:6b:3a:eb:32:44:f3:81:44:e0:e1:
09:2d:2e:80:81:18:1b:83:b6:d2:8d:96:1d:10:8c:2d:88:f9:
7e:b1:63:84:7b:51:01:0b:db:a1:69:b9:5e:52:63:7e:6d:c9:
a7:5c:8b:61:8b:6d:e1:01:df:52:7d:88:82:ab:75:01:53:aa:
1d:82:9a:e3:0a:b9:d0:3c:26:3d:e6:68:14:e1:ed:0f:e4:65:
51:b0:b4:83:d7:23:35:bd:e8:12:09:64:d3:fb:d2:3d:81:5a:
2b:fe:60:5c:7d:9c:ae:a0:8d:ab:51:8c:99:7f:52:82:37:26:
3d:ae:09:89:6f:2e:bc:37:bd:56:fd:ed:1d:04:cc:e3:04:ee:
b7:a1:8b:99:3e:0d:39:f5:5a:a5:c6:e1:c7:91:a3:05:91:bd:
c9:83:9e:82:68:b8:92:df:fb:eb:b1:51:d0:32:29:c6:d0:5d:
91:67:74:c7:55:75:8b:e3:98:e9:75:d7:91:f5:ab:fd:85:d5:
af:a8:76:9a:3a:24:b3:fd:13:75:53:24:c9:9c:f5:67:27:24:
a3:8d:0f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNbiqPfUCHZOTCTho+0RrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0
ZDhlN2IwHhcNMjYxMDAzMTAwMTAwWhcNMjYxMDA0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg2YzRiZmRiMGU4OTZmODZlNWYwYTBlYWY3ZDAzZDgxOThiN2I5MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvsTCvNp5pn0OtQ19KQdJQ5zEv7O
ANMSFHKfGGfcj8b1kd/aqRsxqLiZLKUy0N9nmUPEfjsgr+/ex6VtVxBjRPq8Ubf9
6DFtnnsKYLu28LPQWI+5xOojJV0+jk14+fu7pfBujlekYES2YbWbAU+ZJu0xBbxi
s82E9BTHEbbg/C3M4gGCQtkdsbVg37B1xLltgdMpwsXnwSa3Cm6pGnMs+MZ6hQ8S
looaP0KS9xdp+h95TP1+JuN983ftcLXz72CEzciiRcfmKLXGMIdBgKZI2RuTAc2C
HAoRVdfpeWEO6TByIc9ye8S91r/EGhBl2/3LPJPYug8ThMzdM2E1zWmMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxL/bDolvhuXwoOr30D2BmLe5NdMB8GA1UdIwQY
MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt
MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx
LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqqbpsZH
0c5L45TK4vyVZM6NGqeyOLm8UU8GT4oulG/aEOSk4r02dCQFQI9rOusyRPOBRODh
CS0ugIEYG4O20o2WHRCMLYj5frFjhHtRAQvboWm5XlJjfm3Jp1yLYYtt4QHfUn2I
gqt1AVOqHYKa4wq50DwmPeZoFOHtD+RlUbC0g9cjNb3oEglk0/vSPYFaK/5gXH2c
rqCNq1GMmX9SgjcmPa4JiW8uvDe9Vv3tHQTM4wTut6GLmT4NOfVapcbhx5GjBZG9
yYOegmi4kt/767FR0DIpxtBdkWd0x1V1i+OY6XXXkfWr/YXVr6h2mjoks/0TdVMk
yZz1Zycko40PJw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:01:12 2026 by rpki-client