Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: ATigjgQZyYypHc2MhsCvthiesEE9uM7uow6Ip/4fGZE=
Subject key identifier: 98:90:60:83:22:82:FB:6A:51:44:32:C0:B7:47:F4:19:84:99:CE:6D
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01A182996DCF6A31F91D65ADE3866860196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1ACD
Signing time: Wed 28 Oct 2026 13:00:55 +0000
Manifest this update: Wed 28 Oct 2026 13:00:55 +0000
Manifest next update: Thu 29 Oct 2026 13:00:55 +0000
Files and hashes: 1: 8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa (hash: R8MpU4UMaGBrjPkl0XC57+1S995gBZY7N8nvDLObasM=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: 0JGCAzsthRQa1VkL3ZbIRzlbAAoFpxZdkQiHLVkMhvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:6d:cf:6a:31:f9:1d:65:ad:e3:86:68:60:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Oct 28 13:00:55 2026 GMT
Not After : Oct 29 13:00:55 2026 GMT
Subject: CN=989060832282fb6a514432c0b747f4198499ce6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:61:f2:ac:97:84:4b:48:76:ee:a5:bf:96:
8f:b1:95:93:5e:33:1c:fe:83:cc:2c:5e:ec:d8:ef:
04:bb:48:c9:b0:1c:4a:0f:b0:7b:ce:32:f5:99:92:
4a:e7:2c:b3:3b:f6:21:39:10:3c:c7:80:31:2a:9e:
f2:d5:ff:da:a3:c0:b9:02:5e:52:ba:b6:5f:b3:f1:
92:b5:7b:e3:84:5e:b4:ab:f1:61:5f:9e:ed:0f:d8:
de:ef:da:71:12:19:0b:f3:96:3e:60:39:a9:c4:c2:
f5:3e:99:a0:60:98:69:6c:16:8c:f8:0d:82:71:26:
48:01:0e:f4:a6:e4:5d:99:2c:4f:1b:97:56:07:64:
99:80:52:b7:87:44:4d:5f:8c:62:7b:87:7d:e0:4c:
bf:9a:05:10:31:c4:cb:f3:eb:01:1f:aa:94:2a:fa:
b8:66:2f:09:d7:e1:34:4e:56:17:9f:21:5a:a9:01:
8f:08:d0:70:ef:60:7c:32:58:27:c1:b3:48:4d:9c:
f3:22:73:cf:5b:ad:fa:e8:11:1d:9a:15:e5:94:d7:
99:53:79:17:e1:9b:7a:1f:47:cb:a8:43:71:90:68:
6b:29:1a:18:d8:9e:1a:46:da:f8:53:62:eb:39:d0:
71:c0:6a:e7:94:9e:09:e8:b2:b1:b2:45:99:8f:74:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:60:83:22:82:FB:6A:51:44:32:C0:B7:47:F4:19:84:99:CE:6D
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:c9:06:e8:89:6c:34:41:35:3e:6c:b9:5f:0e:5c:05:cc:
03:a9:b2:9a:19:37:b9:10:5a:e6:18:ea:43:8f:d3:35:dd:15:
90:5e:b6:ef:58:5e:6e:fc:d7:19:06:7d:5b:57:d4:62:3b:96:
4e:8a:2e:ce:1a:2e:88:9f:94:d3:89:21:49:4b:c9:1f:49:58:
16:b1:94:61:f5:8a:ca:fe:4c:58:44:51:5d:67:47:ec:aa:40:
f4:5d:ac:31:a0:ca:fc:90:63:49:9b:4f:c1:50:65:99:5b:77:
46:37:32:6a:4a:ad:67:46:c6:0b:1b:32:f0:eb:de:c0:63:c0:
95:9a:ed:8c:89:3c:be:4d:8d:50:fd:1b:a5:c8:59:e2:b2:90:
16:9f:27:22:ea:87:a3:31:ce:f5:41:b3:9c:dd:d8:62:88:f1:
ee:80:62:20:72:0a:2d:0b:d5:0b:e2:f6:a9:fc:d7:06:29:c2:
41:76:4c:e9:09:f2:75:c4:22:41:dd:f0:0e:5a:da:96:67:08:
8a:d5:73:c0:c5:e4:11:04:9c:54:37:a9:d0:4f:48:21:3a:f1:
ea:01:ee:c0:3f:d6:db:d6:06:83:53:75:84:43:65:6c:4d:dc:
9b:70:ff:ed:bf:1c:d5:3d:ec:6a:dc:8b:47:90:3e:4a:61:ed:
73:b8:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:14:14 2026 by rpki-client