Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: ZcuufKy/9KDj5KdMRWKK3Vp2GvZSkzBMAMQ/73lo2w4=
Subject key identifier: 6E:23:52:A3:79:5C:0C:19:CC:02:05:BE:AB:FD:7A:D5:99:95:E7:66
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01A0C7462565C1317EB52E427D9FA84E6FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 04:00:57 +0000
Manifest this update: Tue 22 Sep 2026 04:00:57 +0000
Manifest next update: Wed 23 Sep 2026 04:00:57 +0000
Files and hashes: 1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: ahos85xjUJ74KiPaqiPsuxfnZTh1W6XfwPnR9N4+gLY=)
5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:25:65:c1:31:7e:b5:2e:42:7d:9f:a8:4e:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Sep 22 04:00:57 2026 GMT
Not After : Sep 23 04:00:57 2026 GMT
Subject: CN=6e2352a3795c0c19cc0205beabfd7ad59995e766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:3f:52:e5:09:bd:fe:4d:33:01:76:25:20:
9b:b1:32:8d:28:ef:bf:74:29:06:5b:fa:fd:f8:47:
10:91:bd:3a:71:e6:4d:de:ee:98:5c:bc:ef:5b:3c:
60:75:99:5b:69:71:8b:66:89:06:40:2e:53:36:f7:
1c:e7:a3:09:86:5f:5c:fa:df:bc:52:05:7b:84:78:
4a:15:c8:0e:42:a1:c3:f5:29:a7:8c:bc:d3:8a:1f:
46:d8:29:37:a1:23:a9:75:fc:83:56:e2:5c:9e:7a:
59:04:40:d7:d2:81:e1:7a:bd:98:c1:cd:98:af:52:
00:0f:7b:79:e5:c6:d2:13:84:22:6e:8e:3d:6a:3f:
8c:c7:92:45:ba:66:e0:d5:d4:6b:dd:fe:db:98:77:
2d:85:05:37:bf:84:ce:8c:6c:e0:23:31:14:af:03:
6e:84:ca:5c:d8:c7:0c:28:82:ae:a6:91:4c:b5:17:
69:41:99:7f:7d:98:1e:28:cf:f0:97:24:c6:7a:8b:
02:3a:8f:50:35:ab:7c:95:33:a7:9e:88:9e:e0:a2:
6f:f3:74:6c:f1:26:6f:2b:b4:a3:ae:d2:6f:9e:9f:
24:db:77:4a:22:1b:a8:a2:b1:07:e8:21:5a:e6:05:
61:b8:12:88:66:64:cc:86:c9:a0:35:7a:8e:16:4a:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:52:A3:79:5C:0C:19:CC:02:05:BE:AB:FD:7A:D5:99:95:E7:66
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:96:56:1a:f2:16:0d:53:c5:9d:59:4e:1d:63:85:ac:10:0d:
ab:75:c9:3f:7a:05:97:44:39:31:47:7b:bf:6c:54:41:24:1a:
57:d9:1f:1c:c9:0b:44:49:9d:9d:5a:51:44:1a:c0:de:70:c3:
75:83:f0:81:51:d4:b6:9e:72:16:5d:a3:7b:83:36:9e:36:aa:
4e:ef:87:d2:68:de:e0:f2:3e:59:9e:9e:36:65:e2:3d:06:29:
59:48:3e:2f:cd:db:4c:b2:49:8b:19:38:ee:ca:95:84:7f:27:
53:8c:ca:12:07:ec:10:3c:85:27:3a:57:0b:19:54:67:23:af:
77:f8:34:57:dd:76:e4:83:e3:c9:53:e3:03:ec:74:d9:13:65:
58:c4:aa:61:cb:7b:b2:78:37:8f:ca:65:ab:6d:83:f4:11:20:
c2:26:a8:cc:4f:44:ab:d9:d1:49:39:12:bb:84:64:61:47:e7:
39:e9:e7:0c:fb:5f:1a:b0:8c:bf:f5:0d:8c:6e:19:56:5d:c2:
2b:ac:2a:04:73:7f:fb:c6:c2:a5:5c:e9:d7:8d:06:fd:ce:8b:
62:70:97:fc:97:06:bc:7b:38:29:14:95:d5:f7:69:34:65:dd:
29:72:67:f9:d9:84:94:24:6e:ed:bf:f9:56:13:c8:da:42:74:
e0:aa:83:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRiVlwTF+tS5CfZ+oTm/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk
YjAzYTgwHhcNMjYwOTIyMDQwMDU3WhcNMjYwOTIzMDQwMDU3WjAzMTEwLwYDVQQD
Eyg2ZTIzNTJhMzc5NWMwYzE5Y2MwMjA1YmVhYmZkN2FkNTk5OTVlNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42w/UuUJvf5NMwF2JSCbsTKNKO+/
dCkGW/r9+EcQkb06ceZN3u6YXLzvWzxgdZlbaXGLZokGQC5TNvcc56MJhl9c+t+8
UgV7hHhKFcgOQqHD9SmnjLzTih9G2Ck3oSOpdfyDVuJcnnpZBEDX0oHher2Ywc2Y
r1IAD3t55cbSE4Qibo49aj+Mx5JFumbg1dRr3f7bmHcthQU3v4TOjGzgIzEUrwNu
hMpc2McMKIKuppFMtRdpQZl/fZgeKM/wlyTGeosCOo9QNat8lTOnnoie4KJv83Rs
8SZvK7SjrtJvnp8k23dKIhuoorEH6CFa5gVhuBKIZmTMhsmgNXqOFkr8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4jUqN5XAwZzAIFvqv9etWZledmMB8GA1UdIwQY
MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct
MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh
LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJZWGvIW
DVPFnVlOHWOFrBANq3XJP3oFl0Q5MUd7v2xUQSQaV9kfHMkLREmdnVpRRBrA3nDD
dYPwgVHUtp5yFl2je4M2njaqTu+H0mje4PI+WZ6eNmXiPQYpWUg+L83bTLJJixk4
7sqVhH8nU4zKEgfsEDyFJzpXCxlUZyOvd/g0V9125IPjyVPjA+x02RNlWMSqYct7
sng3j8plq22D9BEgwiaozE9Eq9nRSTkSu4RkYUfnOennDPtfGrCMv/UNjG4ZVl3C
K6wqBHN/+8bCpVzp140G/c6LYnCX/JcGvHs4KRSV1fdpNGXdKXJn+dmElCRu7b/5
VhPI2kJ04KqDgA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:41 2026 by rpki-client