Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: nBaT4ZVxImkLU10+EKMkF5vkXRhKB2Bbt3Yz4M+hbpM=
Subject key identifier: 59:AB:BE:7F:68:90:40:83:A9:2D:91:85:00:3F:A2:CA:F9:0E:86:56
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 01A0E0620DF4001FE52B3A6505302A93FF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 01:01:57 +0000
Manifest this update: Sun 27 Sep 2026 01:01:57 +0000
Manifest next update: Mon 28 Sep 2026 01:01:57 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: fs/j/yGV7rMSLYMx45OFdCBsfusdhBVZwlPM7OHPqhU=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:0d:f4:00:1f:e5:2b:3a:65:05:30:2a:93:ff:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Sep 27 01:01:57 2026 GMT
Not After : Sep 28 01:01:57 2026 GMT
Subject: CN=59abbe7f68904083a92d9185003fa2caf90e8656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:0f:f6:6d:0c:17:71:9d:7f:d4:3d:03:ca:
82:45:8a:25:5a:e9:d3:ec:75:61:fa:bb:2e:7c:6b:
fe:f0:02:cd:18:29:83:00:21:23:c1:c8:dd:13:4d:
79:72:70:03:08:d3:bf:f3:1f:48:6d:62:fd:08:86:
ab:08:74:bd:a1:6f:a6:00:f5:6d:a5:7a:80:4c:e7:
74:35:38:57:22:eb:63:3a:90:1e:2c:81:81:ae:f3:
83:97:66:12:71:65:57:81:9b:ac:87:2c:fa:99:6c:
97:d6:d0:a1:e6:91:cb:22:da:05:6f:35:f7:68:87:
0c:30:b7:c0:5e:6e:93:9d:26:f8:49:88:a0:0f:23:
01:f0:9f:6f:79:32:bc:7a:48:7f:46:27:15:fe:29:
ca:a9:37:2e:c3:bb:0b:7f:0d:29:5b:c5:6f:67:4a:
f8:d0:8d:05:62:65:14:90:65:8b:d8:69:67:40:00:
21:3e:64:32:ad:d3:b5:bf:da:c8:12:31:ed:bf:4f:
90:da:85:8c:de:cf:e2:b4:38:46:ad:b3:1c:0a:5d:
bc:15:3b:9b:24:42:ea:e7:f4:f2:8d:f0:2b:fc:bb:
51:46:80:51:a3:ac:6b:6b:d0:89:99:e7:62:6a:a1:
8e:c5:8e:12:73:a6:3a:a7:43:e7:45:ef:79:52:5c:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:BE:7F:68:90:40:83:A9:2D:91:85:00:3F:A2:CA:F9:0E:86:56
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:8f:74:7d:e3:d7:8a:03:eb:43:13:c0:98:35:98:e6:b8:e9:
2d:01:92:8c:62:92:da:81:db:59:31:03:0c:e4:bb:8c:10:b8:
f4:e9:bf:6a:46:43:14:e0:04:1f:20:2e:5d:56:bd:9d:02:7a:
66:3a:7d:24:90:b7:7a:b2:bf:13:df:5d:e1:33:3c:af:73:46:
00:f8:86:be:21:8e:2a:81:e8:30:5a:65:59:53:ae:b7:b7:c0:
4e:e3:a7:fc:1b:c4:f9:0b:07:f3:6e:2a:b2:04:fe:42:97:eb:
97:8f:4c:6b:fa:c4:4f:d3:59:10:cb:0e:fa:b3:8c:24:79:ce:
6b:e9:10:49:d2:bc:19:f8:94:a3:52:ee:a2:2a:19:f8:87:c8:
87:ee:84:52:3e:1b:e4:3d:60:8a:4b:29:9d:53:1d:f6:91:f5:
28:8f:97:12:1c:b6:d7:d3:56:94:b9:fd:ae:92:a7:e9:76:cb:
09:39:83:92:c5:0e:0e:50:46:16:a3:f3:34:85:b0:f6:1e:f4:
21:fb:91:5a:26:52:6c:3f:ac:f8:fa:74:fa:3e:84:53:03:54:
38:60:de:21:bb:99:c5:ee:63:c5:08:c3:44:da:c3:93:21:78:
a3:a8:4c:0b:a4:2e:f6:d8:23:ca:d4:55:e6:51:09:ae:0d:f6:
23:64:c4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYg30AB/lKzplBTAqk/83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjYwOTI3MDEwMTU3WhcNMjYwOTI4MDEwMTU3WjAzMTEwLwYDVQQD
Eyg1OWFiYmU3ZjY4OTA0MDgzYTkyZDkxODUwMDNmYTJjYWY5MGU4NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgoP9m0MF3Gdf9Q9A8qCRYolWunT
7HVh+rsufGv+8ALNGCmDACEjwcjdE015cnADCNO/8x9IbWL9CIarCHS9oW+mAPVt
pXqATOd0NThXIutjOpAeLIGBrvODl2YScWVXgZushyz6mWyX1tCh5pHLItoFbzX3
aIcMMLfAXm6TnSb4SYigDyMB8J9veTK8ekh/RicV/inKqTcuw7sLfw0pW8VvZ0r4
0I0FYmUUkGWL2GlnQAAhPmQyrdO1v9rIEjHtv0+Q2oWM3s/itDhGrbMcCl28FTub
JELq5/TyjfAr/LtRRoBRo6xra9CJmediaqGOxY4Sc6Y6p0PnRe95Ulx00QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmrvn9okECDqS2RhQA/osr5DoZWMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4I90fePX
igPrQxPAmDWY5rjpLQGSjGKS2oHbWTEDDOS7jBC49Om/akZDFOAEHyAuXVa9nQJ6
Zjp9JJC3erK/E99d4TM8r3NGAPiGviGOKoHoMFplWVOut7fATuOn/BvE+QsH824q
sgT+Qpfrl49Ma/rET9NZEMsO+rOMJHnOa+kQSdK8GfiUo1LuoioZ+IfIh+6EUj4b
5D1gikspnVMd9pH1KI+XEhy219NWlLn9rpKn6XbLCTmDksUODlBGFqPzNIWw9h70
IfuRWiZSbD+s+Pp0+j6EUwNUOGDeIbuZxe5jxQjDRNrDkyF4o6hMC6Qu9tgjytRV
5lEJrg32I2TE4A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:09:11 2026 by rpki-client