Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: z6/YefzHVEzGrk/WiIg8aT+fcRpZEMHv0fgVCBxelkg=
Subject key identifier: 08:A1:0E:DB:32:A9:67:66:E8:F1:3A:61:E0:C5:9C:CC:B5:9B:DF:51
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 01A180747753E105676C7F4ADCE5E905B310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 01F9
Signing time: Wed 28 Oct 2026 03:01:18 +0000
Manifest this update: Wed 28 Oct 2026 03:01:18 +0000
Manifest next update: Thu 29 Oct 2026 03:01:18 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: PhvlCEqx0y3DiOMyCjJJ7YaXi+NIXHA+qqPKsV6bpEE=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:77:53:e1:05:67:6c:7f:4a:dc:e5:e9:05:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Oct 28 03:01:18 2026 GMT
Not After : Oct 29 03:01:18 2026 GMT
Subject: CN=08a10edb32a96766e8f13a61e0c59cccb59bdf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:c8:26:7a:a9:03:b2:54:20:34:f3:f1:6f:
01:75:4c:02:47:89:56:71:8b:c1:25:f7:ff:4e:6a:
21:4b:72:42:3d:08:4c:3a:52:41:ed:a0:66:7a:03:
ee:ff:38:3c:5f:ef:cc:17:0c:c5:6e:0c:82:76:08:
b9:e1:e8:aa:62:53:11:c8:54:ad:78:a0:5c:bc:d3:
7a:f6:52:9d:ff:a7:b3:b3:c2:96:a0:0c:47:95:a2:
9b:87:2d:f5:40:8c:9b:c9:88:11:22:cb:65:20:31:
75:ca:e7:51:e8:92:29:fb:bc:e5:6d:21:ff:cb:bd:
a1:57:5c:8b:b5:35:b7:88:a4:7e:78:57:48:29:be:
25:e9:7b:f9:b0:46:3f:b4:fd:13:8e:e7:f6:e0:4d:
29:94:f5:6f:4a:ec:14:a5:ef:80:9e:33:02:e7:65:
54:01:38:78:d8:c3:3a:51:07:98:7e:a9:69:4d:d3:
80:a9:46:81:af:9d:90:97:2c:a2:df:b5:e2:4e:b5:
cf:ed:0a:53:b3:d6:24:bc:6b:19:10:eb:ee:69:73:
7e:58:24:46:17:38:ba:af:38:5b:fa:b2:53:3c:4e:
83:8d:8c:6d:5d:88:7f:62:c8:a8:bf:b8:ba:9f:ca:
d7:f1:25:fd:cc:2f:fe:60:67:b1:aa:dd:bc:66:71:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:0E:DB:32:A9:67:66:E8:F1:3A:61:E0:C5:9C:CC:B5:9B:DF:51
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7e:04:42:1b:af:7a:01:00:21:e0:f8:6a:fc:15:ba:4e:2a:
75:f4:6b:f8:fb:ca:13:cf:9c:4c:b6:c9:ff:cc:38:e4:d9:f2:
b6:b8:08:c7:19:a5:8e:a9:ea:42:b3:5b:11:b7:50:58:87:a1:
28:89:93:3c:c8:c7:4e:85:77:6b:98:5e:b9:f8:a1:46:0c:f9:
fe:6c:28:78:37:d5:6e:8c:9b:85:41:6e:e8:3a:b0:d8:61:ef:
3d:89:ed:9d:42:90:e2:60:1a:89:86:8e:1e:d7:9e:6f:2d:46:
76:5b:3c:f4:98:a6:e6:3a:6b:4e:03:3a:fe:4f:74:46:7b:05:
26:e3:fa:48:3c:90:4b:03:1e:3d:1e:4f:0e:3f:46:79:3a:15:
80:fe:54:de:61:6a:62:33:03:7e:d2:33:51:17:f9:32:e8:76:
75:b4:b1:94:e2:68:cc:31:12:b6:fa:fd:41:29:f1:ec:d5:cc:
94:a3:db:20:47:d8:c7:a8:97:2b:14:74:69:db:77:4d:90:45:
ec:86:71:28:de:8a:d4:4a:a7:ad:63:32:d9:9f:52:92:b1:c3:
dc:4c:85:4a:00:0c:04:f6:82:92:cd:3f:fa:94:b8:8b:84:cb:
a4:a3:31:45:78:b7:7f:ca:0d:79:6d:16:2b:b7:6a:ae:9c:01:
39:73:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:06:44 2026 by rpki-client