Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: K+6QvqP64XLvn4qE48pSD+8aOxntpLupi4CMimiLqa4=
Subject key identifier: 42:7E:51:8A:DC:3A:52:22:D2:09:58:B8:CA:80:B3:17:BC:D9:EE:04
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 01A0C444C41BB675357C083F6A0610D27D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: 0172
Signing time: Mon 21 Sep 2026 14:00:35 +0000
Manifest this update: Mon 21 Sep 2026 14:00:35 +0000
Manifest next update: Tue 22 Sep 2026 14:00:35 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: AZ5ZZ42vKvZRXaWRmHj5MfiqWhJJIy7Y+a7YLO8nu2Y=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:c4:1b:b6:75:35:7c:08:3f:6a:06:10:d2:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Sep 21 14:00:35 2026 GMT
Not After : Sep 22 14:00:35 2026 GMT
Subject: CN=427e518adc3a5222d20958b8ca80b317bcd9ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:bf:be:c5:44:01:ec:1c:a6:cc:29:4b:97:
02:13:b7:96:f6:e4:5c:c8:fa:93:c4:56:72:e0:1a:
e5:96:84:e4:74:c4:f1:bd:1e:b8:5c:79:ad:90:1f:
93:d6:c2:2d:03:75:ba:b5:40:74:5e:c5:5e:08:52:
2d:ac:6b:cd:ee:83:58:97:06:5f:62:c9:26:b8:bb:
96:f1:11:e8:f0:02:b4:96:56:0d:eb:de:af:a7:00:
1a:ef:3b:39:18:ef:b8:64:a4:a4:7d:9b:98:84:3f:
0f:b2:c4:e6:5f:5d:71:07:5a:96:e6:ed:37:9b:51:
3d:b7:a8:03:1e:c4:73:38:cc:ba:ad:63:34:d0:56:
70:6d:62:36:0c:2d:90:82:fb:da:63:c2:0f:f0:ee:
8e:4b:73:2f:54:e4:77:b1:62:b5:5e:9e:d7:e0:6b:
d2:40:62:87:5a:df:eb:c9:2a:11:f2:ad:05:70:b7:
87:75:26:85:bd:44:2f:6b:d1:d2:15:19:96:62:17:
73:3e:12:49:cf:00:e5:92:b3:53:51:2b:87:eb:05:
33:66:90:1f:12:13:67:ec:3a:05:6d:98:07:82:5d:
ff:cd:46:9d:a5:a5:40:05:a7:d9:48:66:a4:5e:68:
55:2c:5a:a4:71:d8:29:8c:f9:6a:79:55:75:50:3d:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7E:51:8A:DC:3A:52:22:D2:09:58:B8:CA:80:B3:17:BC:D9:EE:04
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:d1:eb:9c:68:23:33:bf:ff:db:41:1f:27:02:4f:41:1e:
27:7d:09:3e:a4:da:9e:04:cd:11:cf:f0:3a:52:a3:c8:bf:09:
55:7f:ac:37:c0:8e:dd:4d:0e:8c:e4:47:f0:11:85:58:2c:8c:
0c:27:08:49:ce:1d:5e:ef:55:5c:75:f9:71:3f:6a:b8:9d:5a:
99:ae:4b:c5:3f:5d:55:16:85:3e:c7:ec:1d:6f:4a:71:15:bc:
87:f4:bd:ef:cc:11:c2:f0:b5:33:69:5b:99:f9:b1:ed:35:e3:
eb:4c:40:ee:99:c1:e4:b9:8a:9d:e7:af:e1:d2:fe:5f:f5:cf:
7a:0d:41:89:b7:ac:93:68:ce:2b:45:7c:8e:75:e1:6c:7e:23:
14:ee:9d:44:4f:dd:bd:29:f7:ef:c5:4c:4d:04:14:47:18:ca:
0f:ae:4a:23:71:12:9c:52:2e:83:ca:fb:3a:38:48:e0:9c:32:
83:4f:63:25:75:da:68:1c:5e:fd:49:33:5d:72:37:28:65:b3:
30:dd:8a:e4:bf:ba:7b:33:97:b6:df:60:d9:1a:d6:30:56:9a:
1e:c4:62:be:d2:c6:bd:4e:bb:52:5a:d9:4b:a5:c3:02:8e:98:
b3:cb:d9:60:a4:c9:93:14:35:17:d7:8f:8f:9f:62:6c:27:58:
24:4b:63:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERMQbtnU1fAg/agYQ0n0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzU0MmI5NGUwODhiYmY3N2FlZTFiMzM5NDIzMTUyZGFl
ZjVlMGQwHhcNMjYwOTIxMTQwMDM1WhcNMjYwOTIyMTQwMDM1WjAzMTEwLwYDVQQD
Eyg0MjdlNTE4YWRjM2E1MjIyZDIwOTU4YjhjYTgwYjMxN2JjZDllZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz+/vsVEAewcpswpS5cCE7eW9uRc
yPqTxFZy4BrlloTkdMTxvR64XHmtkB+T1sItA3W6tUB0XsVeCFItrGvN7oNYlwZf
YskmuLuW8RHo8AK0llYN696vpwAa7zs5GO+4ZKSkfZuYhD8PssTmX11xB1qW5u03
m1E9t6gDHsRzOMy6rWM00FZwbWI2DC2QgvvaY8IP8O6OS3MvVOR3sWK1Xp7X4GvS
QGKHWt/rySoR8q0FcLeHdSaFvUQva9HSFRmWYhdzPhJJzwDlkrNTUSuH6wUzZpAf
EhNn7DoFbZgHgl3/zUadpaVABafZSGakXmhVLFqkcdgpjPlqeVV1UD1IiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ+UYrcOlIi0glYuMqAsxe82e4EMB8GA1UdIwQY
MBaAFP81QrlOCIu/d67hszlCMVLa714NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pWQ3VVNElpNzkzcnVHek9VSXhVdHJ2WGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NTBiYjItNWE1MC00Nzg0LThkYWIt
M2QwZTlmZTAxYmQ4LzEvX3pWQ3VVNElpNzkzcnVHek9VSXhVdHJ2WGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81NTBiYjItNWE1MC00Nzg0LThkYWItM2QwZTlmZTAxYmQ4
LzEvX3pWQ3VVNElpNzkzcnVHek9VSXhVdHJ2WGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZvR65xo
IzO//9tBHycCT0EeJ30JPqTangTNEc/wOlKjyL8JVX+sN8CO3U0OjORH8BGFWCyM
DCcISc4dXu9VXHX5cT9quJ1ama5LxT9dVRaFPsfsHW9KcRW8h/S978wRwvC1M2lb
mfmx7TXj60xA7pnB5LmKneev4dL+X/XPeg1Bibesk2jOK0V8jnXhbH4jFO6dRE/d
vSn378VMTQQURxjKD65KI3ESnFIug8r7OjhI4Jwyg09jJXXaaBxe/UkzXXI3KGWz
MN2K5L+6ezOXtt9g2RrWMFaaHsRivtLGvU67UlrZS6XDAo6Ys8vZYKTJkxQ1F9eP
j59ibCdYJEtjRg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:21 2026 by rpki-client