Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: jXecHahd313QfibV14HB2fphKsEnZakylVs6vE5SsE0=
Subject key identifier: E9:CD:34:95:24:29:D9:92:AC:FA:3D:62:38:17:28:69:50:95:9B:48
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 01A17B168570A1EE197BD747A442FA98F95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0ED8
Signing time: Tue 27 Oct 2026 02:00:35 +0000
Manifest this update: Tue 27 Oct 2026 02:00:35 +0000
Manifest next update: Wed 28 Oct 2026 02:00:35 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: LyNC48LuzKiTGq68qz1mVwr5qcaB+IIJo4cXVgct/RY=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:85:70:a1:ee:19:7b:d7:47:a4:42:fa:98:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Oct 27 02:00:35 2026 GMT
Not After : Oct 28 02:00:35 2026 GMT
Subject: CN=e9cd34952429d992acfa3d623817286950959b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:a7:e1:97:80:b2:51:75:41:67:0c:ca:79:
77:34:68:d1:7e:1b:83:39:fa:45:f9:09:24:75:ec:
5e:00:4a:90:16:e0:86:9a:17:9f:6b:7a:dd:3f:7a:
d4:51:68:84:22:13:12:06:8a:32:84:63:84:c8:4b:
c7:e9:85:7a:ce:7f:3a:1c:3b:ba:3e:c2:3a:c9:a1:
c1:be:8e:36:e7:d8:3a:6b:62:23:e4:f1:61:ee:20:
4e:cd:28:b9:67:8c:03:a3:f4:27:7e:c6:d3:0b:94:
2b:f7:be:e2:1a:44:22:c3:55:51:d1:25:92:c7:2c:
ac:be:e3:d4:d7:85:66:96:b6:69:60:fb:37:df:89:
ac:26:6c:a2:d0:9e:e3:60:f1:1a:a2:67:99:17:2d:
6b:34:7d:d5:50:43:04:b8:a7:e4:c2:00:a6:48:3b:
43:6b:94:76:54:61:94:9e:ab:f1:08:5e:a6:53:fb:
85:42:de:3b:c8:0f:f8:2a:a4:9d:09:90:6d:35:a8:
dc:61:08:70:6e:ca:f0:40:5f:28:98:70:a5:e9:41:
f6:49:58:44:1a:89:0a:f4:9b:37:0b:0b:2e:5b:43:
f5:25:b2:ab:83:8e:31:7b:83:7e:a3:38:76:d9:ad:
10:00:c1:c7:a0:77:ea:19:ce:7e:56:f0:c0:98:f2:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:34:95:24:29:D9:92:AC:FA:3D:62:38:17:28:69:50:95:9B:48
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:85:ad:f0:6c:ef:42:c4:11:25:d6:e0:86:c9:1f:81:c3:
bb:63:de:03:2c:33:e4:99:bc:f4:66:88:cf:50:d3:42:dc:ff:
d8:55:b8:b5:91:a9:09:20:12:e9:01:bd:01:e1:7a:f0:3b:53:
fd:46:cc:99:9d:36:fb:52:7a:91:72:22:d1:cb:61:1c:4e:cf:
9e:c9:eb:fd:08:12:79:c7:4b:81:35:a8:d8:b1:91:10:5a:90:
74:ce:e8:6e:68:2f:b0:8b:71:23:04:dc:77:ac:27:94:5d:84:
58:13:11:94:f8:ff:6c:44:5d:52:33:ef:d2:ac:19:96:55:ba:
2f:44:90:e6:5c:08:23:a0:06:ff:c1:81:4e:46:b2:b5:99:cb:
50:ad:f8:7e:b4:eb:ff:fb:f1:ed:62:02:7d:a4:dc:75:eb:56:
79:28:70:fa:7a:93:45:0d:d3:b2:d2:c2:cd:e0:33:15:fd:3b:
91:23:73:6e:a0:64:66:cc:f5:97:74:e8:75:d3:dd:a1:fe:06:
09:50:a2:b9:9d:0a:3f:9b:45:83:93:88:d0:c3:00:8f:2a:8a:
8e:9d:b8:36:8c:8b:db:22:80:78:29:f7:d7:d2:da:61:9a:61:
69:ec:62:c5:df:38:e4:36:f8:64:da:43:72:da:04:6e:53:af:
df:ec:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:40 2026 by rpki-client