Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: ENN1vdmfOgmSZxxPDzNzMSvZAjASM5U2jhvDsuHf834=
Subject key identifier: 28:63:8C:EB:60:FA:EF:8A:EB:B6:4D:43:F0:FC:1D:72:0E:2F:E5:36
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 01A131B48E771301D131A987389D0BE1E8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 1238
Signing time: Mon 12 Oct 2026 20:01:18 +0000
Manifest this update: Mon 12 Oct 2026 20:01:18 +0000
Manifest next update: Tue 13 Oct 2026 20:01:18 +0000
Files and hashes: 1: xybwCV1hWwBn4MLDW9HYu0-_w6w.asa (hash: t3PVU0MZBtOUV0rI7OL9UqMXFGu/+sqRp88+GVOPUEU=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: rXWFMNAtylQTRIwPmtP4iHFChQ0DjDkRosF/RA1W3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:8e:77:13:01:d1:31:a9:87:38:9d:0b:e1:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Oct 12 20:01:18 2026 GMT
Not After : Oct 13 20:01:18 2026 GMT
Subject: CN=28638ceb60faef8aebb64d43f0fc1d720e2fe536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:17:d5:73:21:98:39:f5:28:a0:32:a1:c3:
25:84:fe:9f:d5:75:2b:d6:64:8b:4c:27:79:74:a1:
c8:e4:1b:5d:ce:d9:83:39:50:2a:f4:75:b8:dc:a4:
33:63:dd:b6:09:4a:e8:90:6f:00:b6:2d:a2:5f:88:
11:8a:e6:ff:d4:08:b3:45:9f:9a:88:39:02:db:c9:
0d:2a:d8:9c:c7:cb:05:e8:be:53:03:11:cc:2b:92:
89:1d:25:53:5c:49:04:97:32:f3:24:8d:5e:d3:ff:
ba:b8:c8:56:10:69:e2:14:9b:89:a5:f7:8a:eb:70:
db:db:96:a1:8c:be:06:30:1e:80:33:ad:1a:3e:8b:
79:77:84:54:00:2a:1c:49:f5:fd:7a:17:77:61:d7:
27:bb:d2:69:0c:c2:8b:de:26:d0:fe:a5:98:19:33:
a7:49:fd:f8:44:66:7c:02:d0:5d:ee:2f:2c:c4:6b:
bc:3e:8c:48:3c:d9:4d:0c:b3:00:75:f3:19:c4:4a:
9c:b5:db:0a:64:32:91:8e:9f:3d:e5:ac:15:8c:85:
6d:bb:7d:78:94:c2:ff:91:65:8d:01:bc:6b:58:5c:
07:f1:e4:79:98:d3:67:85:c3:a1:d3:43:86:7e:3e:
1e:35:f1:01:c3:c8:6b:c5:59:ef:25:a3:50:c5:68:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:8C:EB:60:FA:EF:8A:EB:B6:4D:43:F0:FC:1D:72:0E:2F:E5:36
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:7b:84:0d:00:23:8a:43:c6:ab:1a:7d:19:b3:8b:ae:7d:d3:
30:29:fc:fa:2f:d7:a9:66:a4:c2:c6:e6:16:c9:88:6c:11:00:
a1:cc:73:4e:24:67:64:05:71:ef:f8:3c:e1:34:1e:98:da:2b:
de:dd:17:be:d0:0e:e4:40:a3:28:2a:c2:be:00:6e:4a:97:f1:
cf:97:33:fa:ae:2b:e9:d7:17:14:7f:63:47:4e:43:db:6d:c6:
1d:5d:57:2f:8f:06:40:b8:57:60:df:6b:45:f2:6e:aa:ac:53:
e7:8b:49:f0:40:cd:d3:e8:7a:29:2c:98:0c:c9:dc:5a:6f:cd:
35:67:3c:64:45:21:4b:1e:05:2e:06:cb:ab:37:91:bf:b3:76:
b9:50:97:c2:80:ae:69:bf:eb:87:56:6c:bf:66:13:7d:13:ac:
63:09:0a:6c:66:3f:3f:7e:a2:4d:2c:60:35:11:78:19:a6:2c:
6c:83:82:61:fd:5a:27:16:0e:f4:fd:8b:2b:ce:87:ae:f3:dc:
99:bb:fb:d4:5a:fa:da:1d:56:0f:c6:6e:45:d1:9a:26:3c:08:
49:e8:41:c4:89:eb:a7:3d:6b:46:e5:67:02:d0:7b:0d:2e:c1:
07:fe:33:2a:76:a7:5c:4d:18:76:67:62:a5:f7:8a:05:6b:86:
46:95:12:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExtI53EwHRMamHOJ0L4ejpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3
Yzg0OTcwHhcNMjYxMDEyMjAwMTE4WhcNMjYxMDEzMjAwMTE4WjAzMTEwLwYDVQQD
EygyODYzOGNlYjYwZmFlZjhhZWJiNjRkNDNmMGZjMWQ3MjBlMmZlNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4cX1XMhmDn1KKAyocMlhP6f1XUr
1mSLTCd5dKHI5BtdztmDOVAq9HW43KQzY922CUrokG8Ati2iX4gRiub/1AizRZ+a
iDkC28kNKticx8sF6L5TAxHMK5KJHSVTXEkElzLzJI1e0/+6uMhWEGniFJuJpfeK
63Db25ahjL4GMB6AM60aPot5d4RUACocSfX9ehd3Ydcnu9JpDMKL3ibQ/qWYGTOn
Sf34RGZ8AtBd7i8sxGu8PoxIPNlNDLMAdfMZxEqctdsKZDKRjp895awVjIVtu314
lML/kWWNAbxrWFwH8eR5mNNnhcOh00OGfj4eNfEBw8hrxVnvJaNQxWi/gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChjjOtg+u+K67ZNQ/D8HXIOL+U2MB8GA1UdIwQY
MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt
Mjk3ZDUyZjBjMjgzLzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz
LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6nuEDQAj
ikPGqxp9GbOLrn3TMCn8+i/XqWakwsbmFsmIbBEAocxzTiRnZAVx7/g84TQemNor
3t0XvtAO5ECjKCrCvgBuSpfxz5cz+q4r6dcXFH9jR05D223GHV1XL48GQLhXYN9r
RfJuqqxT54tJ8EDN0+h6KSyYDMncWm/NNWc8ZEUhSx4FLgbLqzeRv7N2uVCXwoCu
ab/rh1Zsv2YTfROsYwkKbGY/P36iTSxgNRF4GaYsbIOCYf1aJxYO9P2LK86HrvPc
mbv71Fr62h1WD8ZuRdGaJjwISehBxInrpz1rRuVnAtB7DS7BB/4zKnanXE0Ydmdi
pfeKBWuGRpUSnA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:05:34 2026 by rpki-client