Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: cIWm08K3YOgcE64chaBzXj3rrkJ2ISHfNqDDB0OghlQ=
Subject key identifier: C9:55:F5:02:B4:DA:B2:F1:18:5F:3F:F0:EB:63:6A:0F:21:51:C2:4F
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01A0C7EADCC7FFF9BF08D77285A2ABA3476A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 07:00:52 +0000
Manifest this update: Tue 22 Sep 2026 07:00:52 +0000
Manifest next update: Wed 23 Sep 2026 07:00:52 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: nPpNt2cmB2Mg5+v/wrPPbY9oAKVBL9lTHXrGJZ4fUPw=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:dc:c7:ff:f9:bf:08:d7:72:85:a2:ab:a3:47:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Sep 22 07:00:52 2026 GMT
Not After : Sep 23 07:00:52 2026 GMT
Subject: CN=c955f502b4dab2f1185f3ff0eb636a0f2151c24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:a9:2b:ad:3f:7b:eb:a6:ed:f6:62:97:5f:
17:7f:a4:d5:39:cf:1b:d9:7a:f5:ef:cf:9a:8e:6c:
1d:34:42:a2:af:c6:35:82:21:23:07:d6:7d:c6:f6:
55:cc:a3:28:bf:c2:84:ca:9f:39:b1:b4:e2:6e:28:
22:8b:1d:01:98:68:d6:a4:81:27:6f:e1:f7:f0:ea:
8c:92:99:e0:fd:78:59:5a:3b:9c:86:2b:e5:cb:25:
82:cd:89:7f:bc:1a:32:78:62:e7:e5:54:90:d2:23:
00:1b:72:e3:15:71:73:93:dc:dd:4a:b9:7c:2f:59:
50:1a:f5:dd:f4:89:5c:35:58:38:12:dc:0c:9d:1c:
8b:4e:f0:ee:52:f4:d0:e6:bf:90:d9:65:6d:66:ba:
4f:72:86:7e:55:2f:2f:88:2a:e5:02:75:60:e6:89:
58:5f:5b:cc:4a:4e:dc:b5:39:76:97:47:d8:38:31:
25:b5:72:a9:be:d9:2b:b1:f9:ac:96:23:87:76:15:
64:bf:e0:a8:b0:73:ad:97:f6:8e:15:9f:97:86:cc:
25:b1:81:28:7a:c5:10:fa:f6:28:03:8f:9e:1c:ac:
21:75:72:0e:62:97:22:8b:19:42:d2:35:b0:74:56:
d8:61:27:75:69:40:21:69:94:cd:95:b5:bb:3b:36:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:F5:02:B4:DA:B2:F1:18:5F:3F:F0:EB:63:6A:0F:21:51:C2:4F
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b8:f8:fe:e6:c1:5b:01:df:a5:94:f1:c1:74:23:e3:5b:10:
5a:92:db:8f:6b:4e:e8:34:6c:05:e6:56:7e:d5:41:f6:6b:ee:
de:b0:97:b7:58:e9:b0:8a:58:88:a8:01:93:76:88:00:06:1a:
d1:e3:f1:ae:a7:83:7c:c1:f8:81:a4:a1:e8:25:ba:b2:45:ce:
a0:45:60:38:b6:8d:54:26:5b:89:b5:00:8a:bc:7b:d3:e0:33:
1b:51:03:d6:69:0e:58:0b:55:48:d5:aa:1f:be:28:2b:db:cb:
c1:43:a8:99:92:84:66:e6:4b:06:f9:e4:90:70:9a:39:cf:8f:
ca:89:e3:ec:8c:07:9a:b1:70:21:f6:ce:e2:17:13:e6:30:99:
b4:da:f9:9b:15:62:6d:1a:2f:43:b9:f5:28:3f:e9:89:88:e2:
5b:e7:df:14:e6:7e:93:ef:ea:c0:4d:fa:7b:97:f7:52:f8:ef:
80:24:4a:8b:eb:e1:a7:3d:ec:c4:53:8f:f5:22:78:fa:c5:4b:
31:37:08:32:4f:97:3b:2d:88:8b:11:03:6a:ee:39:1d:72:90:
db:61:77:64:35:49:66:de:71:47:f9:37:8f:71:29:ea:dd:e4:
e8:63:5c:39:a0:8f:10:17:e3:a5:05:37:32:8c:df:bf:0c:50:
de:cb:75:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6tzH//m/CNdyhaKro0dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjYwOTIyMDcwMDUyWhcNMjYwOTIzMDcwMDUyWjAzMTEwLwYDVQQD
EyhjOTU1ZjUwMmI0ZGFiMmYxMTg1ZjNmZjBlYjYzNmEwZjIxNTFjMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xapK60/e+um7fZil18Xf6TVOc8b
2Xr178+ajmwdNEKir8Y1giEjB9Z9xvZVzKMov8KEyp85sbTibigiix0BmGjWpIEn
b+H38OqMkpng/XhZWjuchivlyyWCzYl/vBoyeGLn5VSQ0iMAG3LjFXFzk9zdSrl8
L1lQGvXd9IlcNVg4EtwMnRyLTvDuUvTQ5r+Q2WVtZrpPcoZ+VS8viCrlAnVg5olY
X1vMSk7ctTl2l0fYODEltXKpvtkrsfmsliOHdhVkv+CosHOtl/aOFZ+XhswlsYEo
esUQ+vYoA4+eHKwhdXIOYpciixlC0jWwdFbYYSd1aUAhaZTNlbW7OzZprwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlV9QK02rLxGF8/8Otjag8hUcJPMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLj4/ubB
WwHfpZTxwXQj41sQWpLbj2tO6DRsBeZWftVB9mvu3rCXt1jpsIpYiKgBk3aIAAYa
0ePxrqeDfMH4gaSh6CW6skXOoEVgOLaNVCZbibUAirx70+AzG1ED1mkOWAtVSNWq
H74oK9vLwUOomZKEZuZLBvnkkHCaOc+Pyonj7IwHmrFwIfbO4hcT5jCZtNr5mxVi
bRovQ7n1KD/piYjiW+ffFOZ+k+/qwE36e5f3UvjvgCRKi+vhpz3sxFOP9SJ4+sVL
MTcIMk+XOy2IixEDau45HXKQ22F3ZDVJZt5xR/k3j3Ep6t3k6GNcOaCPEBfjpQU3
MozfvwxQ3st1FQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:40:05 2026 by rpki-client