Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: FGAoIpWj8d+o+LD4iX1ffW+TfjJwtc8dtwygUeRnwCU=
Subject key identifier: D4:3E:18:A5:56:EE:3E:A9:47:13:28:C8:34:71:CA:DC:D7:DF:9A:97
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 01A12FFCBDEDE1F4B3CBC58A397F198DEB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 12:00:55 +0000
Manifest this update: Mon 12 Oct 2026 12:00:55 +0000
Manifest next update: Tue 13 Oct 2026 12:00:55 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: nCB6pkcA3NCCT+drHYN5d4nh69VJJvU25wEsTC6jXj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:bd:ed:e1:f4:b3:cb:c5:8a:39:7f:19:8d:eb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Oct 12 12:00:55 2026 GMT
Not After : Oct 13 12:00:55 2026 GMT
Subject: CN=d43e18a556ee3ea9471328c83471cadcd7df9a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:7f:95:9b:64:79:bb:25:03:2a:a4:c2:8b:
ae:1d:ef:01:db:65:8a:e1:d9:96:9d:6e:c2:d3:b2:
9f:c0:f2:9b:34:f2:84:0c:d6:6e:47:17:c7:75:c2:
ef:9a:db:a6:a5:e1:8c:be:d3:c5:af:cf:cb:24:5d:
7a:7c:0b:bb:96:b7:28:82:35:33:e7:d9:d8:64:e1:
b3:6f:fb:92:ea:7c:a9:2d:2d:1e:2d:4c:61:e7:b9:
fe:12:e3:5a:81:71:5f:8c:97:8b:de:9b:d2:99:7f:
0e:10:38:8e:51:3e:71:92:d8:d8:11:89:9b:9b:a2:
df:b1:c3:3b:9a:95:40:91:2a:61:94:08:14:27:00:
9f:40:c7:8f:f7:a5:28:66:b0:9a:ba:be:00:48:af:
f8:b7:bf:a9:f8:18:00:e5:52:7b:11:c6:34:7b:44:
2a:1d:8f:1f:86:1a:a4:ee:8f:18:ec:06:0d:4e:53:
35:a7:4f:f0:8d:0f:be:77:4c:86:80:35:2f:da:ee:
09:c5:75:67:e1:eb:76:77:4e:43:ef:e6:62:13:19:
0c:93:41:54:9f:d8:5b:79:66:89:ef:66:f7:ed:5c:
32:b4:bc:d2:62:8a:df:ef:c7:d7:75:80:89:9c:7f:
d7:ea:1c:42:6a:50:a1:bd:01:43:7a:5e:ec:c4:c9:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:18:A5:56:EE:3E:A9:47:13:28:C8:34:71:CA:DC:D7:DF:9A:97
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ea:28:ac:1b:35:89:26:93:17:83:d8:3a:66:f8:b7:f6:9b:
99:07:96:83:c0:df:a6:f2:9e:8b:fe:c1:07:40:25:98:55:e6:
69:93:94:a4:2b:76:1b:4d:ec:c5:de:73:21:bb:7f:9d:37:e8:
57:09:90:88:00:e5:7f:7c:f5:76:3f:a6:93:37:96:6e:20:e8:
e3:89:c0:da:ac:9a:c7:9b:f9:8e:7c:27:a7:4c:f1:3c:6e:6c:
6e:ad:9a:d4:fc:c0:1c:fb:c2:98:d6:75:fe:4c:40:f6:9f:f9:
93:da:33:76:68:2b:ca:f5:f5:09:f6:7c:66:5e:e6:df:c1:54:
d8:a4:8e:fc:c3:eb:c6:fe:6e:0a:7c:3d:e0:43:e2:83:2c:ba:
d9:e3:fa:17:e3:06:e6:fd:e7:48:af:b0:a4:ae:e2:f2:03:d8:
07:9a:d9:2a:c7:41:72:2e:a6:af:2a:1b:e8:b9:16:39:31:38:
66:b8:d2:a1:3e:b2:f8:b8:39:b4:91:bf:79:b8:7a:ca:3c:18:
9b:80:9d:0b:8b:26:72:57:d8:11:e3:e2:d6:55:00:57:0c:81:
39:80:fa:c8:15:7c:e8:c1:02:f2:c3:e6:3c:01:ce:d1:ea:24:
1d:af:06:c6:4a:52:34:96:e1:4b:5d:f4:1e:0b:94:5b:42:59:
61:53:52:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/L3t4fSzy8WKOX8ZjesQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri
ODQ3NGQwHhcNMjYxMDEyMTIwMDU1WhcNMjYxMDEzMTIwMDU1WjAzMTEwLwYDVQQD
EyhkNDNlMThhNTU2ZWUzZWE5NDcxMzI4YzgzNDcxY2FkY2Q3ZGY5YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLB/lZtkebslAyqkwouuHe8B22WK
4dmWnW7C07KfwPKbNPKEDNZuRxfHdcLvmtumpeGMvtPFr8/LJF16fAu7lrcogjUz
59nYZOGzb/uS6nypLS0eLUxh57n+EuNagXFfjJeL3pvSmX8OEDiOUT5xktjYEYmb
m6LfscM7mpVAkSphlAgUJwCfQMeP96UoZrCaur4ASK/4t7+p+BgA5VJ7EcY0e0Qq
HY8fhhqk7o8Y7AYNTlM1p0/wjQ++d0yGgDUv2u4JxXVn4et2d05D7+ZiExkMk0FU
n9hbeWaJ72b37VwytLzSYorf78fXdYCJnH/X6hxCalChvQFDel7sxMnDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ+GKVW7j6pRxMoyDRxytzX35qXMB8GA1UdIwQY
MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt
ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi
LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOoorBs1
iSaTF4PYOmb4t/abmQeWg8DfpvKei/7BB0AlmFXmaZOUpCt2G03sxd5zIbt/nTfo
VwmQiADlf3z1dj+mkzeWbiDo44nA2qyax5v5jnwnp0zxPG5sbq2a1PzAHPvCmNZ1
/kxA9p/5k9ozdmgryvX1CfZ8Zl7m38FU2KSO/MPrxv5uCnw94EPigyy62eP6F+MG
5v3nSK+wpK7i8gPYB5rZKsdBci6mryob6LkWOTE4ZrjSoT6y+Lg5tJG/ebh6yjwY
m4CdC4smclfYEePi1lUAVwyBOYD6yBV86MEC8sPmPAHO0eokHa8GxkpSNJbhS130
HguUW0JZYVNSlw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:45:21 2026 by rpki-client