Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: bnbJ/R+srJp924ZfEC18uwAZasmSXnc3fz5ozcU725g=
Subject key identifier: 71:B1:E6:CD:D1:D6:2F:F1:33:5C:DD:3A:DD:AB:A9:3A:9C:A3:E5:13
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 01A174DDC78AEAE5F67BCF8EF9F189081A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 028B
Signing time: Sun 25 Oct 2026 21:00:53 +0000
Manifest this update: Sun 25 Oct 2026 21:00:53 +0000
Manifest next update: Mon 26 Oct 2026 21:00:53 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: SbZrOmdtm42viQ8z2Uj/KJrt/l/HD/97Pu/Sid3DcgM=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:c7:8a:ea:e5:f6:7b:cf:8e:f9:f1:89:08:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Oct 25 21:00:53 2026 GMT
Not After : Oct 26 21:00:53 2026 GMT
Subject: CN=71b1e6cdd1d62ff1335cdd3addaba93a9ca3e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:78:82:bf:f8:8d:f7:36:c1:dc:37:99:2c:
17:68:c0:89:84:2f:f6:85:ee:2e:34:8c:4f:ce:1b:
80:13:bd:00:11:10:25:05:7b:58:d6:84:46:07:7e:
63:1f:a2:a3:09:c8:d0:34:d5:5c:95:a7:32:92:dc:
25:9b:d8:b7:68:50:4d:69:a3:88:34:47:e6:28:03:
60:a7:6f:04:60:f9:2b:98:a5:66:ea:87:7d:09:d4:
6d:55:78:63:66:7d:60:68:b5:82:3d:2c:5b:ea:19:
53:66:00:cd:de:86:91:a6:7e:c3:02:82:80:eb:15:
6d:84:ff:db:3c:d8:d7:b7:75:e5:eb:08:7f:8a:fd:
54:fe:c6:82:97:7f:4d:fa:89:7f:1b:84:47:e1:3f:
47:01:d8:6e:4a:12:2c:6c:83:81:fd:45:10:9a:bc:
83:74:cb:dc:25:06:17:5d:49:19:f8:6a:9d:ff:f4:
01:7b:6e:62:45:5a:25:d4:0c:a6:e4:07:2c:86:08:
7e:6c:08:7b:61:c7:a7:ed:a8:a6:bd:65:36:2b:32:
53:8e:4e:0b:c3:ad:0f:09:99:ed:1b:03:d2:3a:52:
c4:a5:79:58:69:da:46:75:23:74:e2:96:4c:d4:fa:
7b:b8:29:ec:4b:9e:0b:f6:3d:9f:94:2f:ba:d5:71:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:E6:CD:D1:D6:2F:F1:33:5C:DD:3A:DD:AB:A9:3A:9C:A3:E5:13
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:68:e1:e8:fd:d4:28:c8:86:bc:2a:03:d2:aa:0f:22:b6:
7f:2c:06:48:a7:71:ae:a2:22:75:78:84:37:e0:2d:2b:08:8d:
37:e3:b8:39:32:00:89:3a:22:1c:d6:ed:1a:3c:e0:8d:7a:fe:
09:40:ec:d3:8a:a2:f2:06:e9:c1:8f:40:c9:9e:34:40:ed:ae:
17:6d:4d:87:d0:7c:9a:1d:f4:04:1c:8b:83:51:6e:6c:44:8e:
b6:23:06:01:33:37:58:ec:f6:93:3b:7e:97:37:aa:bc:e5:31:
fe:d0:71:ae:7e:0a:c0:8d:a0:1f:87:a0:77:bb:5b:a9:af:a3:
12:e9:01:cf:a1:8c:c9:fd:a1:72:7e:f2:a7:95:97:54:cd:e5:
fb:84:d3:17:70:84:8b:01:83:00:18:99:04:df:a9:ac:1b:cf:
95:4a:e4:b5:4e:29:35:a8:85:4d:e2:aa:0a:8c:a9:f5:d8:7d:
39:74:09:20:02:7a:07:f2:62:5c:be:3b:9d:7d:b7:43:f9:b2:
91:92:ce:91:95:d6:73:50:63:15:cd:aa:e4:7d:f2:b5:cd:a9:
e0:d9:36:9c:ec:78:1a:4a:9e:2a:a6:07:99:08:e2:2f:81:2a:
ff:b3:d8:ac:13:99:bf:f2:32:c1:72:18:55:49:fc:b2:b4:bc:
98:0f:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:03:48 2026 by rpki-client