Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: z/smBTyvMXEREswpJNohs47CoMbf30sZRZA+5by97mM=
Subject key identifier: EE:6E:00:88:73:F3:7C:DC:70:21:D3:E2:BC:17:0C:EC:D7:6B:D6:10
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01A11E2D061612AE3EDB9C70C61B0520FA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1A94
Signing time: Fri 09 Oct 2026 01:00:29 +0000
Manifest this update: Fri 09 Oct 2026 01:00:29 +0000
Manifest next update: Sat 10 Oct 2026 01:00:29 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 6NiH7xyM4Rn+fJn9rkZCrVT1ocGh+yMFiaCrbkiuIq8=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
4: n43sGwmhzZ66iynJ53zXSTJbQU8.roa (hash: fV5lfxAtxqffZkSRdmIPhZPQSriuDx7t3nKVTXbhIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2d:06:16:12:ae:3e:db:9c:70:c6:1b:05:20:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Oct 9 01:00:29 2026 GMT
Not After : Oct 10 01:00:29 2026 GMT
Subject: CN=ee6e008873f37cdc7021d3e2bc170cecd76bd610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:39:85:d7:07:82:4e:3c:9f:39:6e:e8:67:
83:2b:5e:b1:25:f5:17:6d:be:85:80:60:40:a2:c4:
b4:76:62:da:98:44:1c:90:6d:a7:84:0b:c2:ee:04:
5f:79:c6:72:aa:d3:07:82:30:fe:54:82:6c:a3:0d:
9c:3c:ae:97:60:73:27:f2:09:d9:37:97:8d:8c:19:
b1:c1:1c:7d:8d:6c:82:5b:84:23:54:20:b9:79:dc:
78:07:f4:38:a4:6f:07:55:88:3e:c0:7d:7c:a3:34:
ef:8c:b3:d2:14:bc:94:95:ce:22:0b:ab:ad:a1:4a:
60:e6:c7:ee:e5:42:5b:a4:b5:bf:10:a5:f3:3e:20:
02:d5:f8:82:d9:8d:a1:89:cc:b2:c1:fb:13:f2:39:
b8:35:bf:a6:0e:a2:d0:d7:cc:b6:fc:1c:ff:e8:5b:
81:3c:7c:80:25:7d:4d:95:6a:53:f7:dc:f3:6b:f4:
5b:25:9a:43:f6:7b:ae:c0:d2:bf:50:ae:94:90:ad:
63:f1:ca:a5:dc:5d:13:e4:af:f3:4b:34:c2:db:3d:
1d:6b:0d:a4:ea:45:b0:16:eb:9a:f9:e8:e6:12:2a:
08:db:f1:98:f2:66:bc:59:a7:53:6b:c8:90:e1:a6:
96:c9:3e:9d:2a:0b:77:82:1b:1e:54:25:b1:19:6a:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6E:00:88:73:F3:7C:DC:70:21:D3:E2:BC:17:0C:EC:D7:6B:D6:10
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:ed:f9:85:9c:5d:b5:a8:9a:58:9f:a6:d1:f4:1c:45:d5:
33:58:f8:c7:87:1a:67:56:02:04:61:9c:08:bc:c7:9b:75:7a:
9a:ef:0d:b5:1a:ba:fc:ba:c5:2b:3e:5f:83:cc:1d:ec:19:84:
0c:d2:3d:6b:41:38:ac:fc:ec:ef:ad:66:f2:1f:9d:de:2f:a6:
a0:f7:08:85:cb:ad:9d:90:9c:33:6a:1a:65:6b:fe:33:c8:f2:
65:63:f5:14:08:ab:aa:de:48:bc:9a:fc:1c:04:14:81:7c:d1:
10:16:e3:ed:0d:05:ee:e3:79:a8:94:1a:3b:70:92:62:1c:19:
be:43:e0:c1:7e:b5:e5:0a:42:75:40:6e:90:5d:bd:08:c7:31:
7a:26:11:e7:31:8f:dd:45:f7:15:03:c7:4f:c6:81:ee:52:93:
c7:22:77:a4:42:74:89:d5:d0:9f:a3:dc:66:f1:7b:52:99:a8:
f1:c4:49:56:97:d4:f9:9c:22:79:4c:29:be:a8:64:fc:6d:a5:
7b:3e:bb:0a:47:b2:7b:de:35:6b:a0:5f:b0:a5:77:05:d4:9c:
ea:ca:56:be:ff:81:a8:65:b6:d0:be:eb:31:45:96:13:25:f2:
a4:29:d0:d6:46:7c:28:a9:e0:5e:f6:c7:ce:d7:4c:93:83:54:
62:64:0d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEeLQYWEq4+25xwxhsFIPpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjYxMDA5MDEwMDI5WhcNMjYxMDEwMDEwMDI5WjAzMTEwLwYDVQQD
EyhlZTZlMDA4ODczZjM3Y2RjNzAyMWQzZTJiYzE3MGNlY2Q3NmJkNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpk5hdcHgk48nzlu6GeDK16xJfUX
bb6FgGBAosS0dmLamEQckG2nhAvC7gRfecZyqtMHgjD+VIJsow2cPK6XYHMn8gnZ
N5eNjBmxwRx9jWyCW4QjVCC5edx4B/Q4pG8HVYg+wH18ozTvjLPSFLyUlc4iC6ut
oUpg5sfu5UJbpLW/EKXzPiAC1fiC2Y2hicyywfsT8jm4Nb+mDqLQ18y2/Bz/6FuB
PHyAJX1NlWpT99zza/RbJZpD9nuuwNK/UK6UkK1j8cql3F0T5K/zSzTC2z0daw2k
6kWwFuua+ejmEioI2/GY8ma8WadTa8iQ4aaWyT6dKgt3ghseVCWxGWq5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5uAIhz83zccCHT4rwXDOzXa9YQMB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc3t+YWc
XbWomlifptH0HEXVM1j4x4caZ1YCBGGcCLzHm3V6mu8NtRq6/LrFKz5fg8wd7BmE
DNI9a0E4rPzs761m8h+d3i+moPcIhcutnZCcM2oaZWv+M8jyZWP1FAirqt5IvJr8
HAQUgXzREBbj7Q0F7uN5qJQaO3CSYhwZvkPgwX615QpCdUBukF29CMcxeiYR5zGP
3UX3FQPHT8aB7lKTxyJ3pEJ0idXQn6PcZvF7Upmo8cRJVpfU+ZwieUwpvqhk/G2l
ez67Ckeye941a6BfsKV3BdSc6spWvv+BqGW20L7rMUWWEyXypCnQ1kZ8KKngXvbH
ztdMk4NUYmQN3Q==
-----END CERTIFICATE-----
Generated at Fri Oct 9 11:17:41 2026 by rpki-client