Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: Cw2uJ0n+33A8abR15GRip6yko8+1NnpuH7MHJ33UB8M=
Subject key identifier: 1E:B4:22:1B:C5:7E:CE:2D:B7:E0:9F:42:31:AD:61:A4:1C:89:EC:89
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 01A12B0D2477554A03AB5F83D5E3C65BFF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0F56
Signing time: Sun 11 Oct 2026 13:00:43 +0000
Manifest this update: Sun 11 Oct 2026 13:00:43 +0000
Manifest next update: Mon 12 Oct 2026 13:00:43 +0000
Files and hashes: 1: 0k8JSiXuI9yOlNc8R8ZC7myFR1s.roa (hash: hkDwNbOr9T8egEZmcAGrpawWPuV3eUejQ8UO6ApjR78=)
2: PKsQ0MGMThKjH51r68KbPjZPH40.roa (hash: 3Eued/zp686i36xpm0Wg0HQsaRbvmEUZEHnKtw6sFtw=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: y4RbwJBKnwzSaUYNlatzZWD8tJbpATiaxJvgVHR37EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:24:77:55:4a:03:ab:5f:83:d5:e3:c6:5b:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Oct 11 13:00:43 2026 GMT
Not After : Oct 12 13:00:43 2026 GMT
Subject: CN=1eb4221bc57ece2db7e09f4231ad61a41c89ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:38:1d:bd:31:4f:4e:76:fb:7e:cc:05:59:
80:fd:c2:26:d1:f5:7e:a3:5a:4f:b3:2b:b1:7b:a9:
46:72:8c:ec:cf:c5:df:79:c4:a3:29:7d:3d:4b:7d:
dc:13:b5:77:41:fd:7a:08:0f:4e:89:e0:45:c4:e1:
3f:26:d6:82:5a:a2:02:26:c1:42:ac:02:cf:5d:95:
b9:ab:cf:96:2a:e6:60:a1:2e:21:50:36:2a:28:3d:
2e:02:d2:4b:fa:6e:c4:db:82:e9:5c:fc:22:37:8e:
30:92:56:fc:92:4b:ec:cb:1c:73:75:3c:72:c3:6d:
cf:f7:da:71:f5:ee:8b:68:54:b0:5e:de:cb:89:fd:
d9:27:0f:16:c1:fc:d2:00:b7:33:f7:c5:60:66:77:
6a:a9:d5:9a:0b:bc:17:1b:ca:48:03:72:3a:35:50:
75:f4:3b:7a:47:11:9d:59:ef:a2:00:d6:2a:da:aa:
0d:f7:33:e0:05:07:2b:b0:41:90:50:cd:2b:7c:96:
0f:da:56:14:28:7a:b5:c0:e8:47:c9:7c:bd:a1:1e:
30:23:57:07:af:93:fc:0d:10:43:ca:0b:74:79:90:
a7:c0:80:e3:c1:ae:45:ed:1e:85:29:c7:09:af:d9:
dc:9b:51:aa:8b:ad:1e:2b:81:a1:4e:61:e8:c8:84:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:22:1B:C5:7E:CE:2D:B7:E0:9F:42:31:AD:61:A4:1C:89:EC:89
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f7:3b:ac:4b:a0:72:ec:a4:08:bf:81:c4:b3:77:63:09:38:
2e:7b:11:81:37:b7:a1:d7:91:98:f7:89:7f:3e:33:ee:31:3f:
f8:6f:18:ba:27:8c:2f:06:98:2d:c6:35:3f:0f:0b:2a:2b:84:
a6:a5:1a:67:da:ed:b6:3a:e8:ec:6b:83:09:20:c9:77:b2:18:
e6:da:00:7a:0a:95:e8:e9:5a:1f:c7:74:b8:86:40:0e:03:b2:
f3:17:80:2b:ed:1c:37:07:ec:f6:22:90:2e:db:d5:cc:a6:b3:
1e:15:84:02:b7:9d:57:e5:8e:ad:4e:f5:66:f6:18:cf:44:63:
43:4d:55:fd:01:fb:dd:50:85:1e:7f:65:e8:89:c8:ec:7f:7b:
cc:00:3e:df:26:32:8f:13:99:50:62:57:7f:dc:d0:63:bb:35:
c9:0a:0a:56:69:40:22:3b:b3:9a:47:d0:a4:25:a6:76:37:1b:
c9:ab:4c:a5:bc:40:63:f0:19:f2:2e:b4:2c:0c:d5:e1:b5:22:
52:d1:fa:31:6f:51:76:b2:aa:fc:82:1f:03:27:63:c0:67:66:
25:67:27:74:be:84:e4:6c:9e:c8:6f:23:9e:a3:b0:27:40:4f:
b0:a8:bc:86:b0:cb:aa:dd:3d:9f:2e:50:c3:c6:a5:bb:dd:d6:
08:71:f6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDSR3VUoDq1+D1ePGW/8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx
MWMzMzgwHhcNMjYxMDExMTMwMDQzWhcNMjYxMDEyMTMwMDQzWjAzMTEwLwYDVQQD
EygxZWI0MjIxYmM1N2VjZTJkYjdlMDlmNDIzMWFkNjFhNDFjODllYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK44Hb0xT052+37MBVmA/cIm0fV+
o1pPsyuxe6lGcozsz8XfecSjKX09S33cE7V3Qf16CA9OieBFxOE/JtaCWqICJsFC
rALPXZW5q8+WKuZgoS4hUDYqKD0uAtJL+m7E24LpXPwiN44wklb8kkvsyxxzdTxy
w23P99px9e6LaFSwXt7Lif3ZJw8WwfzSALcz98VgZndqqdWaC7wXG8pIA3I6NVB1
9Dt6RxGdWe+iANYq2qoN9zPgBQcrsEGQUM0rfJYP2lYUKHq1wOhHyXy9oR4wI1cH
r5P8DRBDygt0eZCnwIDjwa5F7R6FKccJr9ncm1Gqi60eK4GhTmHoyISEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB60IhvFfs4tt+CfQjGtYaQcieyJMB8GA1UdIwQY
MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt
NWE5MjJhNjJjNTcxLzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx
LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/c7rEug
cuykCL+BxLN3Ywk4LnsRgTe3odeRmPeJfz4z7jE/+G8YuieMLwaYLcY1Pw8LKiuE
pqUaZ9rttjro7GuDCSDJd7IY5toAegqV6OlaH8d0uIZADgOy8xeAK+0cNwfs9iKQ
LtvVzKazHhWEAredV+WOrU71ZvYYz0RjQ01V/QH73VCFHn9l6InI7H97zAA+3yYy
jxOZUGJXf9zQY7s1yQoKVmlAIjuzmkfQpCWmdjcbyatMpbxAY/AZ8i60LAzV4bUi
UtH6MW9RdrKq/IIfAydjwGdmJWcndL6E5GyeyG8jnqOwJ0BPsKi8hrDLqt09ny5Q
w8alu93WCHH29Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:24:37 2026 by rpki-client