Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: Otr84oiiN0V2fDjAH1ynE1VbQwRO53G/qyIu8Wuvnqc=
Subject key identifier: D5:1D:21:3D:0D:06:68:A0:6C:73:55:10:99:67:CE:C8:50:37:C3:77
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 01A0D8041B01810D087993F6FEA4BB96A319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 1289
Signing time: Fri 25 Sep 2026 10:02:22 +0000
Manifest this update: Fri 25 Sep 2026 10:02:22 +0000
Manifest next update: Sat 26 Sep 2026 10:02:22 +0000
Files and hashes: 1: 690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa (hash: PpmrZ0y4OmHYRlFtG+Q32uLuVImrpYxd2geJcOWhBFs=)
2: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
3: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: kRmHaKR7eVUvDYTT2rmTRAlxS2R2M1FAO8n5N/H1KXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:1b:01:81:0d:08:79:93:f6:fe:a4:bb:96:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Sep 25 10:02:22 2026 GMT
Not After : Sep 26 10:02:22 2026 GMT
Subject: CN=d51d213d0d0668a06c7355109967cec85037c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:63:65:d7:5d:7b:bd:27:a7:51:b7:fa:c2:
76:eb:f8:9a:0c:a3:60:d4:df:24:f4:c3:61:29:21:
10:de:af:dc:02:87:20:7e:1b:9c:01:15:5e:6d:87:
fb:99:c3:04:a0:5f:52:14:90:c0:4d:ee:b5:2f:e5:
0f:08:92:f3:c9:31:0d:98:f7:5d:d6:0d:b3:f2:57:
9b:19:14:cc:30:a3:ec:3f:48:fc:5e:61:8f:63:49:
82:da:a2:6a:cd:93:50:1e:61:a8:85:21:fb:aa:fb:
83:02:bc:d1:2c:e7:51:c4:2e:5f:ab:d3:ff:f0:e6:
e6:24:47:ce:e1:e6:48:eb:92:00:4e:b4:56:08:7f:
b4:6f:29:37:8f:87:79:00:4c:06:d0:b2:33:16:d4:
88:f1:32:00:a8:2f:6d:35:f9:a0:24:46:b3:f3:46:
7a:2a:bd:0e:f7:2c:7c:61:a5:b3:0a:e0:db:e7:fb:
f8:b4:9d:06:0d:c9:fb:bd:07:9c:cc:61:9e:f9:fd:
10:6f:54:d8:5c:85:fc:3a:be:9a:e4:6a:f2:40:a7:
35:8a:9f:54:8e:31:fd:24:27:0e:7c:dc:14:6d:67:
32:45:a6:72:39:68:74:5d:91:3b:ac:aa:3c:77:21:
c6:32:65:4f:b5:cb:81:aa:1f:be:80:b5:9e:82:09:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:21:3D:0D:06:68:A0:6C:73:55:10:99:67:CE:C8:50:37:C3:77
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:21:16:fe:89:d7:92:c4:8a:65:2a:14:19:fc:af:53:45:a3:
ab:b0:cd:9b:0b:e6:cb:e3:0b:bd:50:8d:9b:5e:53:92:90:78:
2f:e7:19:a6:a3:8e:ac:3b:b7:03:09:fa:5a:13:08:b4:f6:51:
85:0c:c7:ff:61:bc:59:4b:db:80:db:43:75:e5:d4:97:1e:ed:
7a:3d:e5:49:d4:86:a4:f1:aa:cb:8d:83:06:83:42:0c:32:15:
d3:c4:09:65:68:d8:f0:4f:88:c2:fe:2f:b3:be:c2:f2:ca:7f:
eb:03:71:42:37:66:3d:53:64:3e:94:85:b7:c6:b0:99:c7:69:
8e:c4:ba:be:44:6a:fc:0f:7b:f7:d7:cf:f6:ef:fd:9c:53:d9:
3d:ae:3c:db:ac:18:67:f3:03:36:f2:ca:88:d3:62:04:9a:5a:
be:51:73:41:7a:f9:ba:58:15:a3:78:ff:c1:82:50:8e:8b:38:
4f:91:d9:a7:93:d1:c5:1b:7c:03:bf:57:1f:52:cd:0b:7f:7f:
a7:9b:ca:e6:88:00:86:6b:21:9a:09:8f:f3:8f:45:fc:49:d2:
59:58:93:33:f2:a2:7a:93:b1:20:c4:44:18:f9:14:cb:20:08:
d5:1c:46:92:8a:93:10:2b:12:dd:c6:33:32:fd:3c:11:74:02:
c5:8e:4e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBBsBgQ0IeZP2/qS7lqMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjYwOTI1MTAwMjIyWhcNMjYwOTI2MTAwMjIyWjAzMTEwLwYDVQQD
EyhkNTFkMjEzZDBkMDY2OGEwNmM3MzU1MTA5OTY3Y2VjODUwMzdjMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHRjZddde70np1G3+sJ26/iaDKNg
1N8k9MNhKSEQ3q/cAocgfhucARVebYf7mcMEoF9SFJDATe61L+UPCJLzyTENmPdd
1g2z8lebGRTMMKPsP0j8XmGPY0mC2qJqzZNQHmGohSH7qvuDArzRLOdRxC5fq9P/
8ObmJEfO4eZI65IATrRWCH+0byk3j4d5AEwG0LIzFtSI8TIAqC9tNfmgJEaz80Z6
Kr0O9yx8YaWzCuDb5/v4tJ0GDcn7vQeczGGe+f0Qb1TYXIX8Or6a5GryQKc1ip9U
jjH9JCcOfNwUbWcyRaZyOWh0XZE7rKo8dyHGMmVPtcuBqh++gLWeggng5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUdIT0NBmigbHNVEJlnzshQN8N3MB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiEW/onX
ksSKZSoUGfyvU0Wjq7DNmwvmy+MLvVCNm15TkpB4L+cZpqOOrDu3Awn6WhMItPZR
hQzH/2G8WUvbgNtDdeXUlx7tej3lSdSGpPGqy42DBoNCDDIV08QJZWjY8E+Iwv4v
s77C8sp/6wNxQjdmPVNkPpSFt8awmcdpjsS6vkRq/A9799fP9u/9nFPZPa4826wY
Z/MDNvLKiNNiBJpavlFzQXr5ulgVo3j/wYJQjos4T5HZp5PRxRt8A79XH1LNC39/
p5vK5ogAhmshmgmP849F/EnSWViTM/KiepOxIMREGPkUyyAI1RxGkoqTECsS3cYz
Mv08EXQCxY5O5A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:56:45 2026 by rpki-client