Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: NyX8hTHfsrP81TDMuJhZZnFVkp7HNRwDfoP3+t7SVv0=
Subject key identifier: AE:EA:CA:DF:84:B9:61:55:05:EB:78:0A:AE:7A:93:1B:AA:3A:DD:7E
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01A0CB22B996A83AA8AF6EEDCB676E4597B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1A78
Signing time: Tue 22 Sep 2026 22:00:45 +0000
Manifest this update: Tue 22 Sep 2026 22:00:45 +0000
Manifest next update: Wed 23 Sep 2026 22:00:45 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: m40b7NbS8nRU4VAzIn5xx+EpAxoxiukZr22TvGLCRhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:b9:96:a8:3a:a8:af:6e:ed:cb:67:6e:45:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Sep 22 22:00:45 2026 GMT
Not After : Sep 23 22:00:45 2026 GMT
Subject: CN=aeeacadf84b9615505eb780aae7a931baa3add7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:2f:65:10:c9:78:ef:da:6c:b5:e6:5b:1c:
7c:63:ea:79:4f:40:b5:c7:b8:ed:f0:8d:cb:14:a0:
92:5b:44:cd:89:d1:53:1a:e6:37:e8:14:7a:79:67:
17:ea:6d:a0:27:b4:02:60:98:6b:cf:be:f5:9d:cb:
a2:ca:0c:bd:45:d1:47:36:78:76:c7:f7:48:43:e4:
e2:ca:95:3f:03:b4:62:81:4f:9d:a9:a5:82:25:82:
0f:0f:bb:3e:66:13:55:8f:97:44:cd:08:42:f3:53:
2e:e3:0c:55:22:88:61:ee:64:87:07:ce:ea:6e:3a:
ed:1e:fa:13:58:b9:21:75:20:c8:de:e4:c2:ab:d8:
98:b1:e4:2a:f5:4a:0c:fa:3c:a5:77:9c:a5:b3:1d:
42:77:ab:5e:a0:37:2c:77:02:2b:c6:d0:7c:40:05:
ec:09:e9:0f:bd:24:d5:92:44:20:3a:dd:31:52:6e:
df:34:52:e8:aa:be:26:bf:63:b7:ef:9b:ef:bf:08:
c4:5e:d1:37:12:61:b2:fa:99:69:a9:d2:bf:33:8e:
22:cc:31:ad:89:2f:17:16:8d:fc:44:d9:1a:51:97:
24:04:a5:b8:bc:f2:f9:0b:29:a9:c1:33:72:80:e3:
f8:5a:10:ec:03:c3:99:19:f5:9c:6a:50:0d:ed:8d:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:CA:DF:84:B9:61:55:05:EB:78:0A:AE:7A:93:1B:AA:3A:DD:7E
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:22:47:25:54:86:02:72:fc:59:4a:c8:4d:2f:24:a1:b3:26:
ad:15:00:3c:25:99:cf:f2:37:5e:33:f0:8f:d9:77:ab:97:b1:
92:a6:57:a2:f9:29:8f:f9:e0:c2:af:fe:18:53:12:dc:78:a9:
c3:1e:2c:2d:9d:8e:c9:37:5f:37:57:fc:65:1e:c4:4c:25:20:
3c:90:83:23:a0:b5:58:15:34:a4:2b:26:28:8f:4f:cb:ca:34:
82:b9:6f:87:b3:fc:74:be:5e:b5:5d:2c:f0:d5:44:65:e8:c8:
11:64:5d:f1:aa:d1:1b:19:86:ef:3e:90:70:37:ee:c9:0d:ab:
21:e1:c5:f2:63:eb:58:c2:31:e6:ed:9d:43:03:25:a9:ca:21:
fc:45:6b:30:86:59:20:13:63:ca:5b:f7:d2:5a:b4:b4:3a:1e:
5c:5c:c8:db:07:d5:a4:e9:ad:2e:a8:05:aa:5f:1c:a7:3a:b9:
ec:f5:86:ef:00:b5:9f:d1:d9:71:77:d1:ec:c7:47:45:b8:5f:
94:b6:15:cd:39:76:ec:ac:6a:e2:c3:7f:a0:4c:3e:59:45:91:
9f:bc:ed:37:55:9a:93:97:2b:2b:1c:57:45:5f:70:84:70:25:
66:bd:a1:5a:44:c3:f3:bc:8d:b1:d9:0c:e1:fc:85:10:d6:18:
bb:88:f8:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIrmWqDqor27ty2duRZezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjYwOTIyMjIwMDQ1WhcNMjYwOTIzMjIwMDQ1WjAzMTEwLwYDVQQD
EyhhZWVhY2FkZjg0Yjk2MTU1MDVlYjc4MGFhZTdhOTMxYmFhM2FkZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdgvZRDJeO/abLXmWxx8Y+p5T0C1
x7jt8I3LFKCSW0TNidFTGuY36BR6eWcX6m2gJ7QCYJhrz771ncuiygy9RdFHNnh2
x/dIQ+TiypU/A7RigU+dqaWCJYIPD7s+ZhNVj5dEzQhC81Mu4wxVIohh7mSHB87q
bjrtHvoTWLkhdSDI3uTCq9iYseQq9UoM+jyld5ylsx1Cd6teoDcsdwIrxtB8QAXs
CekPvSTVkkQgOt0xUm7fNFLoqr4mv2O375vvvwjEXtE3EmGy+plpqdK/M44izDGt
iS8XFo38RNkaUZckBKW4vPL5CympwTNygOP4WhDsA8OZGfWcalAN7Y1wtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7qyt+EuWFVBet4Cq56kxuqOt1+MB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSJHJVSG
AnL8WUrITS8kobMmrRUAPCWZz/I3XjPwj9l3q5exkqZXovkpj/ngwq/+GFMS3Hip
wx4sLZ2OyTdfN1f8ZR7ETCUgPJCDI6C1WBU0pCsmKI9Py8o0grlvh7P8dL5etV0s
8NVEZejIEWRd8arRGxmG7z6QcDfuyQ2rIeHF8mPrWMIx5u2dQwMlqcoh/EVrMIZZ
IBNjylv30lq0tDoeXFzI2wfVpOmtLqgFql8cpzq57PWG7wC1n9HZcXfR7MdHRbhf
lLYVzTl27Kxq4sN/oEw+WUWRn7ztN1Wak5crKxxXRV9whHAlZr2hWkTD87yNsdkM
4fyFENYYu4j4yg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:35 2026 by rpki-client