Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
File: ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft (raw, json)
Hash identifier: 1OH9jRVSBtPDQ9BIoQMjsDQEp+noUrVWADv3JGApoaw=
Subject key identifier: AA:53:DC:34:2B:BB:23:7E:D5:55:A3:C9:7A:DC:24:69:52:F7:03:A8
Authority key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Certificate issuer: /CN=6659d0207d896b18282922aeef6b472b788f9432
Certificate serial: 01A0CD108D44569898B4B99AAC6F591F0438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
Manifest number: 32
Signing time: Wed 23 Sep 2026 07:00:09 +0000
Manifest this update: Wed 23 Sep 2026 07:00:09 +0000
Manifest next update: Thu 24 Sep 2026 07:00:09 +0000
Files and hashes: 1: IIpkiT0DsKtry5SfDibaOaf5Gmc.asa (hash: piz50WCwexz+zSmea8jYzJEYb2s6Vf251Ay/agIa33g=)
2: ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl (hash: HImehmt3XHPZ3HzjSRARf7HEtk7VX2ksC9gqdAunjaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:8d:44:56:98:98:b4:b9:9a:ac:6f:59:1f:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6659d0207d896b18282922aeef6b472b788f9432
Validity
Not Before: Sep 23 07:00:09 2026 GMT
Not After : Sep 24 07:00:09 2026 GMT
Subject: CN=aa53dc342bbb237ed555a3c97adc246952f703a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:3d:8a:4b:8c:85:bf:e5:f9:b6:ed:6e:c8:
02:8e:ba:f7:10:3c:19:06:bc:91:8b:e8:24:b1:f3:
3b:71:3e:e9:d2:58:70:17:ed:61:5b:ce:2b:e2:70:
50:ab:f5:1f:9b:66:03:f3:2d:67:95:e0:50:4a:0d:
f7:4a:3f:74:33:6c:f4:65:47:15:0f:aa:80:ea:41:
ff:30:3f:a5:a9:63:51:80:af:8e:f8:00:d5:fb:fe:
c8:3b:17:96:a7:f4:66:f7:a2:ed:69:f7:35:62:b0:
b9:66:87:68:fb:16:9f:c1:41:21:91:e6:ed:5c:28:
ae:80:58:ce:b8:89:e7:aa:72:fa:5b:b5:d2:40:4e:
ba:00:9f:9b:e0:1f:56:d4:bc:f9:e3:9f:bf:72:61:
b0:1d:0c:39:d0:da:35:8e:e9:57:52:06:72:4f:05:
0d:e4:18:77:67:d5:65:3b:98:e9:08:b9:24:8c:20:
30:91:c5:18:9c:84:a0:7a:f1:78:f8:f1:80:78:ee:
e7:ae:c4:91:5f:eb:5c:bd:db:84:03:99:44:92:62:
be:cc:6c:cb:69:50:89:50:ba:b2:62:b0:b3:06:8e:
d9:85:37:27:2d:a7:a2:c0:28:e7:4f:34:28:ed:25:
8e:38:8a:86:d8:ba:0e:06:63:98:5f:fb:99:31:43:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:DC:34:2B:BB:23:7E:D5:55:A3:C9:7A:DC:24:69:52:F7:03:A8
X509v3 Authority Key Identifier:
keyid:66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:eb:00:43:64:a9:5f:10:af:ed:60:ce:d7:dc:ee:0b:ac:
87:88:07:49:2d:d4:fb:b6:b0:72:87:39:a5:07:52:df:c2:44:
58:5f:7c:df:02:30:9c:91:88:1c:81:e0:70:75:eb:91:9b:44:
29:b2:83:a8:0d:40:de:76:88:c6:86:86:98:6d:4f:73:ee:69:
7c:37:a2:28:30:9e:2e:2a:04:df:49:84:8e:40:1f:26:82:f6:
63:69:12:f9:c4:34:7b:0d:e6:e8:e7:49:ee:29:b4:1c:49:df:
a1:c8:b9:05:56:a9:dc:cf:86:f8:66:57:12:6a:fa:43:ab:45:
b0:18:fc:76:1e:92:55:43:8a:fb:2b:1f:f5:c1:5a:63:2b:f8:
81:a9:e0:3a:81:31:11:49:d4:c1:80:b2:1a:0a:cb:cf:53:87:
94:cb:c2:1a:09:38:32:5e:64:53:7a:53:db:65:5b:1e:35:61:
28:12:4b:30:82:c8:16:79:5f:77:57:00:6b:42:35:7c:54:84:
d9:7c:74:fb:d7:dd:b2:68:c0:88:d4:06:cc:26:a9:2b:84:af:
9b:8e:d3:b1:97:77:b1:3d:22:17:83:ba:0e:39:3d:ed:a6:6f:
e6:a7:25:a8:f2:4e:b1:77:b5:b8:b3:59:db:e1:1b:8e:32:5a:
85:0b:6b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEI1EVpiYtLmarG9ZHwQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTlkMDIwN2Q4OTZiMTgyODI5MjJhZWVmNmI0NzJiNzg4
Zjk0MzIwHhcNMjYwOTIzMDcwMDA5WhcNMjYwOTI0MDcwMDA5WjAzMTEwLwYDVQQD
EyhhYTUzZGMzNDJiYmIyMzdlZDU1NWEzYzk3YWRjMjQ2OTUyZjcwM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnI9ikuMhb/l+bbtbsgCjrr3EDwZ
BryRi+gksfM7cT7p0lhwF+1hW84r4nBQq/Ufm2YD8y1nleBQSg33Sj90M2z0ZUcV
D6qA6kH/MD+lqWNRgK+O+ADV+/7IOxeWp/Rm96Ltafc1YrC5Zodo+xafwUEhkebt
XCiugFjOuInnqnL6W7XSQE66AJ+b4B9W1Lz545+/cmGwHQw50No1julXUgZyTwUN
5Bh3Z9VlO5jpCLkkjCAwkcUYnISgevF4+PGAeO7nrsSRX+tcvduEA5lEkmK+zGzL
aVCJULqyYrCzBo7ZhTcnLaeiwCjnTzQo7SWOOIqG2LoOBmOYX/uZMUMwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpT3DQruyN+1VWjyXrcJGlS9wOoMB8GA1UdIwQY
MBaAFGZZ0CB9iWsYKCkiru9rRyt4j5QyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wNDFhMGQtNGVkNC00ZTMyLTg4YmUt
NjE4ZDI0ZDYyMmUwLzEvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wNDFhMGQtNGVkNC00ZTMyLTg4YmUtNjE4ZDI0ZDYyMmUw
LzEvWmxuUUlIMkpheGdvS1NLdTcydEhLM2lQbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau3rAENk
qV8Qr+1gztfc7gush4gHSS3U+7awcoc5pQdS38JEWF983wIwnJGIHIHgcHXrkZtE
KbKDqA1A3naIxoaGmG1Pc+5pfDeiKDCeLioE30mEjkAfJoL2Y2kS+cQ0ew3m6OdJ
7im0HEnfoci5BVap3M+G+GZXEmr6Q6tFsBj8dh6SVUOK+ysf9cFaYyv4gangOoEx
EUnUwYCyGgrLz1OHlMvCGgk4Ml5kU3pT22VbHjVhKBJLMILIFnlfd1cAa0I1fFSE
2Xx0+9fdsmjAiNQGzCapK4Svm47TsZd3sT0iF4O6Djk97aZv5qclqPJOsXe1uLNZ
2+EbjjJahQtrlw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:49 2026 by rpki-client