Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: Z8sGKZ1T8LKkz4onZHFQehpXpApkIVNMTH9K2A0zg+I=
Subject key identifier: 25:BD:25:F3:7A:13:49:3B:E5:30:1D:96:AA:77:B0:4C:FE:20:5C:DB
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 01A17EBD2F6610B0E740DA3404A862CDC9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1506
Signing time: Tue 27 Oct 2026 19:01:29 +0000
Manifest this update: Tue 27 Oct 2026 19:01:29 +0000
Manifest next update: Wed 28 Oct 2026 19:01:29 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: P7+6HuwxWFF6zz1Un0kjuyNUC37LFiQO6IcxFhWeByo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:2f:66:10:b0:e7:40:da:34:04:a8:62:cd:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Oct 27 19:01:29 2026 GMT
Not After : Oct 28 19:01:29 2026 GMT
Subject: CN=25bd25f37a13493be5301d96aa77b04cfe205cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:01:c4:60:f5:fd:a2:a2:1b:55:46:98:b9:
b1:ec:ee:76:cc:27:ff:5c:c7:76:2c:d8:5a:c1:2e:
72:97:2a:72:1e:07:ef:2d:d3:5a:3d:bb:bf:e1:1e:
10:d3:ba:a9:df:e6:49:6f:00:ca:92:91:21:ba:72:
ec:6f:bf:98:36:70:6a:76:b4:27:eb:40:81:37:fb:
0d:14:45:8d:65:6d:a3:12:ad:74:68:00:68:75:28:
d5:c6:d6:e1:fa:63:1c:95:29:83:0f:a7:49:f8:ee:
77:4b:20:46:63:df:02:76:50:22:54:7e:b8:f3:e9:
d2:9b:18:82:3a:7c:3b:85:9d:e4:fa:ba:07:5d:6a:
e0:b6:6a:03:2b:99:43:ac:2e:94:d3:d3:fb:46:03:
2d:4b:00:0e:9d:52:d6:42:f9:9a:5b:e0:95:0f:f7:
77:b6:da:05:9c:6f:bf:fa:1e:41:ac:30:50:d5:ad:
78:43:0d:e1:e9:55:cc:0f:a5:d1:62:07:c6:a7:f1:
3d:35:a5:24:fa:7a:4c:86:10:9d:c5:fa:cf:0a:90:
88:7b:f5:60:e8:58:bf:f7:18:ee:02:12:cd:64:b0:
a7:d7:49:04:de:40:21:80:e5:1f:80:d8:61:e0:50:
4b:91:ac:0f:02:fd:3c:56:ba:e3:16:0a:02:15:0f:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:25:F3:7A:13:49:3B:E5:30:1D:96:AA:77:B0:4C:FE:20:5C:DB
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:f2:c3:a6:f5:e8:26:27:80:e8:35:d4:95:8e:af:97:f1:
dd:3d:3c:1c:60:4e:5b:12:25:da:b6:b5:38:10:f7:72:4f:66:
08:66:0b:f8:a0:cb:b7:fb:15:ee:b2:69:80:64:7c:22:b4:1e:
e7:9f:4e:65:0a:78:fe:74:9e:4d:4e:7c:65:c4:aa:9c:64:b4:
10:f1:b5:34:ae:de:d6:06:36:77:32:23:a9:6e:23:fb:bf:38:
ff:26:24:cf:cc:73:c3:3f:84:9d:69:03:32:d3:82:59:8d:20:
1d:02:d1:f5:0b:75:6f:de:2b:1f:df:73:b1:63:b4:34:26:a9:
23:2b:e1:ce:34:ef:ad:03:89:23:19:ae:ac:5f:19:b1:16:42:
be:04:f0:ba:5a:2f:8d:81:d4:ea:34:e0:b6:23:f6:43:78:d6:
8f:c0:74:a5:a9:b0:e9:be:32:d6:2b:ea:99:5d:ca:07:67:4c:
5d:b1:d0:df:29:de:8a:e1:f0:f8:72:11:1d:41:62:f6:83:b7:
4c:d5:e2:8e:3b:23:02:88:81:b3:1f:f1:a6:cc:a7:46:3d:83:
aa:fc:a8:e5:7f:7e:fe:31:80:3c:c4:c9:16:a6:41:b7:a6:cd:
37:28:6f:a4:3f:67:51:b7:dd:a6:f9:34:13:e3:78:98:88:98:
cf:28:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:15 2026 by rpki-client