Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: XL2yLJl9MbKd8Q0YQaBWsVGJj6iOrJT4x4IfUQiJasQ=
Subject key identifier: D9:A9:CD:1B:60:C1:B9:BB:B4:59:6D:49:8B:C6:07:4B:FE:5F:37:6E
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 01A19D6B8B67B7262C405BC014C34A723362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1ADC
Signing time: Mon 02 Nov 2026 18:00:33 +0000
Manifest this update: Mon 02 Nov 2026 18:00:33 +0000
Manifest next update: Tue 03 Nov 2026 18:00:33 +0000
Files and hashes: 1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: /o3+AARiCI+iw2GbcaOUhqVJP/P1mH6DCjxNi5SoVkE=)
5: nfa8lcMTUWIbtIpuf80s2YziubY.roa (hash: hUm8YjaYLbHJUISE3EmfzpSWnBzmCV6l9EAAD3oXKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:6b:8b:67:b7:26:2c:40:5b:c0:14:c3:4a:72:33:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Nov 2 18:00:33 2026 GMT
Not After : Nov 3 18:00:33 2026 GMT
Subject: CN=d9a9cd1b60c1b9bbb4596d498bc6074bfe5f376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:ac:4b:b1:40:69:8d:ec:cb:5a:e5:30:5f:
ec:02:5f:06:55:92:5e:43:94:ac:4f:f9:8d:02:ff:
be:f3:44:da:74:b5:87:d0:11:83:20:4d:c1:1d:a6:
c2:45:35:6a:ba:69:37:94:c9:58:27:f9:d3:ed:8d:
44:49:b1:63:2a:e2:a9:ae:41:7a:fc:27:05:ed:0e:
63:96:79:5c:bb:c6:55:2c:cf:13:d8:f7:f7:4b:ec:
4b:49:54:c2:39:2d:a8:87:fc:d3:5a:d0:4d:de:49:
51:dc:ba:1e:a1:25:37:80:b4:08:71:0b:e1:54:1b:
c9:75:d5:ee:1c:7f:c7:40:af:e9:e0:50:70:69:c0:
a8:b5:1b:fb:41:d2:b1:d7:5c:29:cd:17:76:1e:7e:
4b:a2:dd:0c:ea:ad:c7:50:9f:36:d6:99:c1:06:ad:
f8:0c:99:23:0f:cc:0a:8c:b0:06:a8:86:05:98:8c:
f2:2c:62:18:7f:89:bc:ce:72:8b:c9:4f:ca:b7:65:
ce:f0:6a:51:3e:09:98:c1:2b:53:72:41:4e:b6:aa:
bf:27:7d:4e:0a:78:53:92:8f:08:81:c8:14:8c:c2:
5c:d6:87:57:d5:d5:cf:92:2e:1d:9c:20:75:bc:8c:
87:1e:87:b2:bc:18:e2:d1:47:3c:b3:17:c0:e5:4d:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A9:CD:1B:60:C1:B9:BB:B4:59:6D:49:8B:C6:07:4B:FE:5F:37:6E
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:ae:d1:9c:97:1d:04:25:c4:01:a1:da:54:69:05:2d:61:
d4:3b:21:29:61:22:aa:5f:e2:24:8d:ac:56:f2:82:41:b5:a7:
84:e8:e0:ec:7b:8e:b5:cc:09:f5:e8:18:b1:3c:77:ea:34:66:
e6:62:25:f8:f9:3b:e6:41:dd:ca:52:c8:38:ec:c4:c8:44:3e:
b4:b9:52:49:0b:e7:07:75:62:5e:b4:41:ec:71:d2:76:e2:c0:
34:d1:76:17:04:e8:38:4c:75:27:d1:54:48:c1:f3:56:fb:91:
8a:44:6c:f7:1e:87:04:d0:4b:8e:03:95:59:9c:78:df:70:e3:
6b:76:13:d6:7e:e1:b0:88:1b:09:d0:a7:e6:6c:b4:f6:78:34:
66:ff:4d:16:3a:63:48:d5:23:d0:c0:82:95:6e:69:4b:ed:51:
b3:9a:b8:d5:e4:f2:67:d3:79:cf:a4:61:a4:00:2d:99:7d:96:
28:76:90:88:e8:23:9e:21:08:a8:b0:91:45:13:9e:5c:85:21:
2a:db:3d:61:9e:e5:85:59:9b:b3:49:8c:94:be:29:d6:52:c7:
61:fa:e1:49:7c:ea:e0:51:13:e6:18:bd:8a:6d:1f:70:0f:a3:
9f:16:90:e4:e3:51:29:5c:b6:76:00:fd:2e:12:18:8f:a3:3b:
e0:0d:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:32:35 2026 by rpki-client