Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.mft
File: ZeT47yZOx-oBQFIIe8yx5ipcRUo.mft (raw, json)
Hash identifier: xbPcd9/RvsOIb/PX3rc65hhQZrsc/WAD7YJq3X6eH3U=
Subject key identifier: CD:89:C0:4A:12:BB:EE:70:50:F8:C2:EF:1F:41:29:88:AD:1C:E4:31
Authority key identifier: 65:E4:F8:EF:26:4E:C7:EA:01:40:52:08:7B:CC:B1:E6:2A:5C:45:4A
Certificate issuer: /CN=65e4f8ef264ec7ea014052087bccb1e62a5c454a
Certificate serial: 01A1DF14FBE9FEDB2DB33F07B8D3238363B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeT47yZOx-oBQFIIe8yx5ipcRUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.mft
Manifest number: 01DA
Signing time: Sun 15 Nov 2026 12:00:56 +0000
Manifest this update: Sun 15 Nov 2026 12:00:56 +0000
Manifest next update: Mon 16 Nov 2026 12:00:56 +0000
Files and hashes: 1: 5D6H0v5Hc8kftct1G5rpOIB5u6g.roa (hash: inoz5zSLosxbnwapx0oUDzJHitScFa6YtasXkId5wNU=)
2: ZeT47yZOx-oBQFIIe8yx5ipcRUo.crl (hash: WDEW7g6q6KXk+jdvR8s+a5mwZYzBkhRoWbfZnFQ8Bn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeT47yZOx-oBQFIIe8yx5ipcRUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:14:fb:e9:fe:db:2d:b3:3f:07:b8:d3:23:83:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e4f8ef264ec7ea014052087bccb1e62a5c454a
Validity
Not Before: Nov 15 12:00:56 2026 GMT
Not After : Nov 16 12:00:56 2026 GMT
Subject: CN=cd89c04a12bbee7050f8c2ef1f412988ad1ce431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:39:7b:81:3b:8c:ef:cf:f2:4a:29:08:f1:
e3:18:cd:d7:b7:67:25:4e:5d:e1:a4:1f:18:bf:ca:
8a:4a:6d:cb:fe:ec:cb:1a:e8:c2:87:08:45:19:86:
0c:a8:8d:af:f3:7f:15:c2:fd:d7:ed:f2:a1:1c:dc:
40:ba:1f:7b:6c:0b:7d:6e:63:16:f2:a3:25:df:a8:
72:39:f2:90:8a:05:46:96:6b:fe:d0:7e:9e:0d:75:
af:ba:8e:bc:23:28:3c:b4:4c:d5:7d:f5:26:79:72:
e3:4a:df:d0:bf:23:e6:b8:87:c5:b1:41:94:7b:61:
07:ab:ad:3b:b9:f1:58:f8:14:fe:1a:d5:28:20:ba:
6e:3e:f7:29:74:44:7a:41:94:88:16:8a:88:ab:33:
8b:40:6f:a6:b7:ae:6c:62:16:c1:dc:26:e0:ec:0e:
eb:a9:86:99:36:0b:cb:f5:ed:18:5e:ca:5a:c8:a6:
a4:85:b3:a4:20:0e:17:ab:5f:f8:f0:10:f7:83:38:
7c:f3:aa:d6:a1:2a:7b:ae:f4:1b:06:97:c8:33:fc:
9c:3b:29:f2:30:eb:78:e6:3c:bb:b2:7e:22:3d:3c:
a9:13:15:5d:4b:f6:fa:60:ac:1f:b4:84:3b:52:5b:
37:41:08:44:d4:5e:e8:28:50:7e:bc:3f:16:76:50:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:C0:4A:12:BB:EE:70:50:F8:C2:EF:1F:41:29:88:AD:1C:E4:31
X509v3 Authority Key Identifier:
keyid:65:E4:F8:EF:26:4E:C7:EA:01:40:52:08:7B:CC:B1:E6:2A:5C:45:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeT47yZOx-oBQFIIe8yx5ipcRUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fbd7b7-576e-4fde-a8c9-16e1e87c3e40/1/ZeT47yZOx-oBQFIIe8yx5ipcRUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:0e:ef:b7:7a:67:72:b8:76:9f:dd:a6:fd:2b:15:d1:24:
05:66:58:00:a5:11:a3:d3:dc:25:9b:c7:11:fd:95:04:9e:49:
82:ed:87:01:24:ac:e5:d6:5b:29:16:74:5c:4a:97:f9:75:5c:
8f:73:03:86:33:36:6e:52:83:c4:9e:51:a8:cb:75:3a:cc:57:
80:97:00:f9:72:5c:fa:de:2e:15:88:dc:39:81:db:07:3d:41:
8d:f6:ab:a7:a6:fa:a7:91:cd:a3:3b:df:80:59:bb:88:01:0b:
01:58:e2:dc:6e:83:5d:2b:02:e8:6a:cc:b6:bc:52:98:64:d8:
23:d1:09:eb:df:90:8f:66:a7:75:74:4c:04:77:2d:02:c3:02:
73:22:f3:02:33:85:65:94:01:01:44:ec:22:32:cf:88:01:98:
bc:ca:7e:4d:a6:38:d6:0c:a7:a2:bd:5b:51:5e:25:dd:4a:2d:
4b:c0:81:0d:0a:b7:82:76:e6:b7:51:88:b5:22:c2:99:63:0d:
22:6e:0e:57:9a:f5:2b:3a:42:e6:2a:19:83:5b:2a:49:23:85:
9a:7d:31:03:79:0a:2f:4a:81:6a:b9:40:e9:3b:d2:fd:2e:a6:
c6:02:6a:a9:c1:17:47:56:30:3b:e8:f0:4e:97:31:81:18:9b:
70:52:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:45:18 2026 by rpki-client