Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: 7bgz8EWpzJkIeUHezGdCORZl+6Rzi5C91N0vzBazrdw=
Subject key identifier: 87:4A:A4:64:C9:0C:11:EB:C6:21:56:2D:1A:45:00:9B:96:24:C0:A9
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 01A0DDCECCE7AD587C3EC8FD7866BE3CDD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 0344
Signing time: Sat 26 Sep 2026 13:01:52 +0000
Manifest this update: Sat 26 Sep 2026 13:01:52 +0000
Manifest next update: Sun 27 Sep 2026 13:01:52 +0000
Files and hashes: 1: DjdRXxbB13RCBLzgc7W30AtdCq8.asa (hash: J2A9HmiX/LyHyVWsEKBZYWe3gyS+zl7oCgR1ePGuZvk=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: MQwwTh0+vpOoigM5Q46SYIYUUUoy9LobtKbGifGKV/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:cc:e7:ad:58:7c:3e:c8:fd:78:66:be:3c:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Sep 26 13:01:52 2026 GMT
Not After : Sep 27 13:01:52 2026 GMT
Subject: CN=874aa464c90c11ebc621562d1a45009b9624c0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:e9:0e:cc:9e:30:bf:ee:c1:46:8a:1c:80:
56:3f:c8:85:88:ac:91:2d:54:4e:86:c4:16:76:da:
83:d6:00:99:1c:df:25:ae:39:77:0f:b5:72:f0:2b:
0e:82:e9:99:34:2f:00:77:0c:fb:62:46:b9:f1:84:
42:b8:15:c0:d3:86:9b:8b:67:f0:f9:d0:1c:ab:29:
fe:6e:5c:72:f2:e5:b5:76:30:6e:fe:63:78:31:be:
79:7a:26:f7:09:4e:e2:1d:d7:3c:84:42:ef:8e:3c:
a6:77:f8:21:b0:9b:d1:c2:f6:91:30:21:2c:a1:1b:
bd:07:df:49:fe:d7:2a:4c:7f:27:1b:d2:42:19:8b:
d3:c3:43:4c:ea:62:3e:5f:47:e7:2b:3d:51:be:4f:
8c:65:81:a5:7d:7a:1e:cf:3b:6c:5f:45:0b:10:08:
cc:60:4c:df:59:b9:1f:47:1a:cc:f4:4f:59:53:28:
c2:3b:b7:58:0e:8a:02:44:26:2d:2c:cd:99:20:6f:
4b:4c:8f:93:73:f1:ee:40:1a:a0:aa:b9:a2:30:c6:
f7:7c:72:3e:83:a5:53:6b:58:79:8d:61:92:b7:06:
92:09:3b:47:ec:71:d7:4c:a6:1d:d0:a9:ce:72:c7:
a9:9c:81:ae:83:7f:01:5f:bb:2c:33:0e:b4:ca:98:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:A4:64:C9:0C:11:EB:C6:21:56:2D:1A:45:00:9B:96:24:C0:A9
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8a:ad:a3:26:44:47:12:af:bc:12:2d:ec:f4:09:3f:63:10:
9f:3d:71:6f:c2:d5:51:9d:4b:36:bc:fa:57:eb:50:a3:3c:ed:
ee:af:a1:39:58:d5:a2:82:d0:0e:20:a1:c1:0a:16:01:1b:12:
0c:a8:7f:ae:25:96:ae:d9:4f:a2:4d:44:fa:65:8a:ec:89:6b:
70:6a:0c:63:3e:cc:ea:63:40:d5:a5:20:08:af:46:0b:d5:44:
3a:2b:bc:1d:fe:89:4e:c0:c4:e0:64:2a:24:a5:4e:a4:fd:e9:
2f:7f:99:d8:fd:34:92:47:08:82:d6:03:05:d8:81:d5:c8:2a:
f6:cf:c7:d8:4f:d2:c8:81:24:3b:81:b7:a9:3b:da:46:43:83:
8f:54:80:bd:bf:78:a2:37:90:ad:30:cb:b6:b8:99:a8:e0:ab:
3b:56:3e:8e:3c:d2:7d:f2:42:41:a1:1c:66:53:53:c3:b3:90:
09:c6:67:ad:eb:c8:1f:e5:04:ed:9a:f5:46:e5:9b:4e:14:fa:
73:17:6c:e9:a9:05:e2:8e:02:1f:80:d9:cc:67:71:8e:e4:60:
d9:b3:aa:02:d7:7c:90:c9:1e:25:26:ed:74:46:4d:c7:ac:9c:
01:49:f0:27:40:f1:22:cf:c4:5f:71:89:c1:e0:ee:93:c9:88:
61:ac:e2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzsznrVh8Psj9eGa+PN2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYwOTI2MTMwMTUyWhcNMjYwOTI3MTMwMTUyWjAzMTEwLwYDVQQD
Eyg4NzRhYTQ2NGM5MGMxMWViYzYyMTU2MmQxYTQ1MDA5Yjk2MjRjMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqnpDsyeML/uwUaKHIBWP8iFiKyR
LVROhsQWdtqD1gCZHN8lrjl3D7Vy8CsOgumZNC8Adwz7Yka58YRCuBXA04abi2fw
+dAcqyn+blxy8uW1djBu/mN4Mb55eib3CU7iHdc8hELvjjymd/ghsJvRwvaRMCEs
oRu9B99J/tcqTH8nG9JCGYvTw0NM6mI+X0fnKz1Rvk+MZYGlfXoezztsX0ULEAjM
YEzfWbkfRxrM9E9ZUyjCO7dYDooCRCYtLM2ZIG9LTI+Tc/HuQBqgqrmiMMb3fHI+
g6VTa1h5jWGStwaSCTtH7HHXTKYd0KnOcsepnIGug38BX7ssMw60yphU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdKpGTJDBHrxiFWLRpFAJuWJMCpMB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4qtoyZE
RxKvvBIt7PQJP2MQnz1xb8LVUZ1LNrz6V+tQozzt7q+hOVjVooLQDiChwQoWARsS
DKh/riWWrtlPok1E+mWK7IlrcGoMYz7M6mNA1aUgCK9GC9VEOiu8Hf6JTsDE4GQq
JKVOpP3pL3+Z2P00kkcIgtYDBdiB1cgq9s/H2E/SyIEkO4G3qTvaRkODj1SAvb94
ojeQrTDLtriZqOCrO1Y+jjzSffJCQaEcZlNTw7OQCcZnrevIH+UE7Zr1RuWbThT6
cxds6akF4o4CH4DZzGdxjuRg2bOqAtd8kMkeJSbtdEZNx6ycAUnwJ0DxIs/EX3GJ
weDuk8mIYaziiQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:59:43 2026 by rpki-client