Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: 6jwXW3sUjZOlgn0mXRbSTsyp85bpB+yAwpOvG/bFl5E=
Subject key identifier: D3:4D:5B:80:F8:37:37:4C:DA:7F:7F:0F:36:7A:A0:56:24:C6:94:EA
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 01A0E3D00F58F8B1F94A331CF99909EA8BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 17:00:58 +0000
Manifest this update: Sun 27 Sep 2026 17:00:58 +0000
Manifest next update: Mon 28 Sep 2026 17:00:58 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: 79SrLspjQvQQLorH/s6QpHjD8Ilt1WxJr86tH+1EtaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:0f:58:f8:b1:f9:4a:33:1c:f9:99:09:ea:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Sep 27 17:00:58 2026 GMT
Not After : Sep 28 17:00:58 2026 GMT
Subject: CN=d34d5b80f837374cda7f7f0f367aa05624c694ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:01:07:75:85:0d:80:b3:d7:87:b9:6f:80:
21:68:1a:15:db:35:77:d8:7a:9a:03:91:c4:0b:e0:
d0:8e:43:e8:6a:09:25:9a:67:94:4a:c1:57:b5:4b:
ec:0e:06:f4:d6:5b:ee:38:38:91:cf:6b:19:d3:10:
92:1f:5b:81:86:c9:fe:c6:14:24:fd:28:17:0b:c4:
d7:57:0e:0c:8e:dc:6c:5f:8a:a8:31:58:91:55:15:
fa:69:e5:81:b3:3c:5c:61:a9:ca:3c:f5:0c:85:8f:
a2:8e:b2:a2:84:2e:b4:0d:b8:e5:de:1a:79:f5:2c:
01:73:fc:62:26:b9:39:8c:15:82:10:2d:02:85:99:
46:d8:ac:3c:35:0e:36:40:7c:f1:f7:26:d4:22:dc:
58:31:44:42:a3:d9:c7:87:d5:76:83:68:3f:53:e8:
0d:3e:83:ac:22:7f:68:ce:01:50:d2:ee:39:d4:e7:
9b:0a:53:c6:28:ca:b9:53:96:0a:c0:8d:56:49:09:
2e:b2:e7:db:9d:32:6e:88:31:8b:4b:c0:66:40:55:
ea:6e:f2:a5:15:66:cb:6b:15:9e:d5:e2:16:1e:8d:
57:79:ab:34:bc:91:17:e3:d0:6c:67:a4:7e:16:8a:
8d:c6:f8:c7:ab:14:dc:4c:5d:02:3b:7d:96:b6:e4:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:5B:80:F8:37:37:4C:DA:7F:7F:0F:36:7A:A0:56:24:C6:94:EA
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:56:3f:93:92:85:59:9c:f7:7b:d6:bf:32:4c:cf:47:0e:d5:
5e:22:11:09:d9:bc:c7:c4:f3:99:69:cf:d7:d2:fd:26:b0:ff:
12:12:eb:e4:f1:2b:7a:98:31:37:31:d6:f2:23:fb:41:91:1e:
62:6d:28:df:d4:dc:c5:98:3c:25:d6:b0:e3:22:88:9a:87:7f:
11:e9:8f:19:06:30:cf:52:28:5a:cd:9c:13:d0:01:dc:a5:41:
3c:2f:b2:74:9e:5f:28:74:7c:65:a6:9b:c6:78:41:46:a6:3e:
dd:da:b0:0d:f1:82:bd:ad:44:61:7e:a4:f7:a4:91:b8:b2:d2:
dd:70:ad:26:d1:c7:95:8a:56:16:5a:98:23:52:50:c6:f0:b3:
af:a5:a9:50:2f:bc:df:5a:bf:88:43:53:f9:d7:91:04:44:21:
b6:94:0a:c1:20:1b:7a:ef:7c:13:14:9c:67:e7:28:73:81:73:
0a:94:b8:dd:26:72:58:4d:2d:bf:83:cf:4d:06:a0:2c:3a:6f:
67:fd:46:79:ea:75:27:69:93:06:32:5c:7e:10:4d:81:94:e8:
97:73:91:68:ad:5e:76:52:8e:f1:11:7b:77:f8:65:e5:e4:22:
a8:38:05:c7:20:41:c6:07:ba:80:a4:6f:e9:2a:9c:56:66:91:
db:6e:97:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDj0A9Y+LH5SjMc+ZkJ6ovzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz
ODg1YWEwHhcNMjYwOTI3MTcwMDU4WhcNMjYwOTI4MTcwMDU4WjAzMTEwLwYDVQQD
EyhkMzRkNWI4MGY4MzczNzRjZGE3ZjdmMGYzNjdhYTA1NjI0YzY5NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrIBB3WFDYCz14e5b4AhaBoV2zV3
2HqaA5HEC+DQjkPoagklmmeUSsFXtUvsDgb01lvuODiRz2sZ0xCSH1uBhsn+xhQk
/SgXC8TXVw4MjtxsX4qoMViRVRX6aeWBszxcYanKPPUMhY+ijrKihC60Dbjl3hp5
9SwBc/xiJrk5jBWCEC0ChZlG2Kw8NQ42QHzx9ybUItxYMURCo9nHh9V2g2g/U+gN
PoOsIn9ozgFQ0u451OebClPGKMq5U5YKwI1WSQkusufbnTJuiDGLS8BmQFXqbvKl
FWbLaxWe1eIWHo1Xeas0vJEX49BsZ6R+FoqNxvjHqxTcTF0CO32WtuRJSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNNW4D4NzdM2n9/DzZ6oFYkxpTqMB8GA1UdIwQY
MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt
YzEzYjFmOTc3ZDU3LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3
LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlY/k5KF
WZz3e9a/MkzPRw7VXiIRCdm8x8TzmWnP19L9JrD/EhLr5PErepgxNzHW8iP7QZEe
Ym0o39TcxZg8Jdaw4yKImod/EemPGQYwz1IoWs2cE9AB3KVBPC+ydJ5fKHR8Zaab
xnhBRqY+3dqwDfGCva1EYX6k96SRuLLS3XCtJtHHlYpWFlqYI1JQxvCzr6WpUC+8
31q/iENT+deRBEQhtpQKwSAbeu98ExScZ+coc4FzCpS43SZyWE0tv4PPTQagLDpv
Z/1Geep1J2mTBjJcfhBNgZTol3ORaK1edlKO8RF7d/hl5eQiqDgFxyBBxge6gKRv
6SqcVmaR226X5g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:14:32 2026 by rpki-client