Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: 2tWxRjcD4EExEWu+IqB9Q4x1WBUVaqU6JRqN4NdwwCw=
Subject key identifier: C0:6D:41:2B:EF:5D:AA:01:63:C8:D0:32:79:FB:57:DB:2F:6E:C7:29
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 01A0C09EB6CD5FF9A40E8EEEA0E65294B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1A73
Signing time: Sun 20 Sep 2026 21:00:21 +0000
Manifest this update: Sun 20 Sep 2026 21:00:21 +0000
Manifest next update: Mon 21 Sep 2026 21:00:21 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: UWXebIK/ENOlc7cnr1gxR+9C+SfopkVu5CFf4oqH30o=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:b6:cd:5f:f9:a4:0e:8e:ee:a0:e6:52:94:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Sep 20 21:00:21 2026 GMT
Not After : Sep 21 21:00:21 2026 GMT
Subject: CN=c06d412bef5daa0163c8d03279fb57db2f6ec729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:8b:2d:fa:85:c2:37:f1:e6:ec:f9:05:46:
eb:0e:d1:15:56:58:ca:0f:3d:d9:a3:79:b1:20:54:
99:38:c4:81:fb:b4:3b:98:2f:65:46:20:b3:fb:1a:
d3:e6:f2:b8:92:a0:5f:19:d0:8a:10:ff:a3:12:81:
de:f6:25:34:49:54:46:90:59:fa:ab:a4:94:ee:3c:
0c:96:6f:9f:3f:2c:2a:8e:6f:72:13:ca:88:86:41:
96:17:a5:89:6c:ff:b9:96:2f:0e:37:23:54:10:26:
b2:6d:75:65:7c:17:e4:d1:45:2a:ee:28:91:01:66:
9c:fb:33:0f:d0:1c:1b:ca:59:73:2d:68:e4:e8:f5:
e9:fc:41:f6:f1:f1:5a:df:f9:ec:57:21:1f:42:4f:
4f:c3:8f:47:5f:bc:66:ef:7c:3e:ea:4e:15:6c:20:
4c:da:d1:b2:46:6d:82:7f:0a:bf:ab:dc:00:0b:42:
61:48:f8:3f:a0:15:08:fb:39:7b:9a:2d:f7:73:dd:
19:61:78:65:03:4c:2b:82:28:cb:2f:ab:67:4e:f5:
9c:2f:2f:cf:11:c1:d1:90:c8:fd:87:87:c6:41:29:
e8:05:7c:52:be:87:74:7f:f8:de:1d:86:0d:a8:25:
70:35:e3:13:fd:82:34:7c:0e:19:a6:e6:d4:7f:dc:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:41:2B:EF:5D:AA:01:63:C8:D0:32:79:FB:57:DB:2F:6E:C7:29
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:63:7e:26:4a:60:d5:8e:ea:32:49:ad:c3:8e:29:c2:e4:64:
62:22:27:df:66:e6:b6:1a:ea:95:a0:92:b6:56:03:dc:b3:3d:
34:66:1b:9a:03:2f:33:52:63:99:cd:86:4c:b9:23:a7:c7:c3:
b8:54:6d:3e:04:b6:a0:70:b8:08:ea:73:68:68:b0:15:24:3f:
b1:ff:62:22:1c:42:ba:df:18:9b:c8:fe:cb:37:83:ce:b1:1e:
26:17:5f:90:6e:f8:f4:9f:62:27:e3:c2:4f:66:0c:ee:d7:98:
8f:cb:5b:a7:84:ad:05:96:c9:bc:62:88:72:21:be:55:fe:9f:
b6:cc:64:60:d3:bb:c8:bf:0e:1f:ad:a0:2f:8f:b3:79:d8:46:
e4:54:73:b4:39:ab:23:53:6b:a6:ac:da:0f:eb:21:48:60:0a:
ee:6a:6c:12:b9:ae:0a:af:89:24:9d:88:f1:fd:79:0a:fc:75:
de:5a:3c:27:8a:ca:1f:13:ca:93:d3:f0:cc:ed:f4:8e:bb:61:
af:09:0f:a3:3e:d9:7e:47:0c:f7:ae:d3:38:ff:f2:61:1d:db:
1d:03:20:cc:ec:4f:5a:ac:98:7a:c6:2d:80:ff:a0:a5:37:40:
55:16:87:04:9a:41:f8:7f:1f:f7:ea:90:b9:5e:88:ea:42:e1:
30:5f:ed:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAnrbNX/mkDo7uoOZSlLGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjYwOTIwMjEwMDIxWhcNMjYwOTIxMjEwMDIxWjAzMTEwLwYDVQQD
EyhjMDZkNDEyYmVmNWRhYTAxNjNjOGQwMzI3OWZiNTdkYjJmNmVjNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm22LLfqFwjfx5uz5BUbrDtEVVljK
Dz3Zo3mxIFSZOMSB+7Q7mC9lRiCz+xrT5vK4kqBfGdCKEP+jEoHe9iU0SVRGkFn6
q6SU7jwMlm+fPywqjm9yE8qIhkGWF6WJbP+5li8ONyNUECaybXVlfBfk0UUq7iiR
AWac+zMP0BwbyllzLWjk6PXp/EH28fFa3/nsVyEfQk9Pw49HX7xm73w+6k4VbCBM
2tGyRm2Cfwq/q9wAC0JhSPg/oBUI+zl7mi33c90ZYXhlA0wrgijLL6tnTvWcLy/P
EcHRkMj9h4fGQSnoBXxSvod0f/jeHYYNqCVwNeMT/YI0fA4ZpubUf9xlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBtQSvvXaoBY8jQMnn7V9svbscpMB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz2N+Jkpg
1Y7qMkmtw44pwuRkYiIn32bmthrqlaCStlYD3LM9NGYbmgMvM1Jjmc2GTLkjp8fD
uFRtPgS2oHC4COpzaGiwFSQ/sf9iIhxCut8Ym8j+yzeDzrEeJhdfkG749J9iJ+PC
T2YM7teYj8tbp4StBZbJvGKIciG+Vf6ftsxkYNO7yL8OH62gL4+zedhG5FRztDmr
I1NrpqzaD+shSGAK7mpsErmuCq+JJJ2I8f15Cvx13lo8J4rKHxPKk9PwzO30jrth
rwkPoz7ZfkcM967TOP/yYR3bHQMgzOxPWqyYesYtgP+gpTdAVRaHBJpB+H8f9+qQ
uV6I6kLhMF/tBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:07:39 2026 by rpki-client